Latest

Cyberwarfare / Nation-State Attacks

Spyware Campaign Targets Sino Minority Groups via WeChat

Anviksha More  •  December 6, 2024

A possible Chinese-state threat group is targeting vulnerabilities in messaging apps to deliver spyware in cross-platform devices used by members of ethnic minorities targeted for repression by Beijing. Trend Micro dubs the group "Earth Minotaur."

Breach Notification

Hacker Extorts HDFC Life for Breach of 16 Million Records

Jayant Chakravarti  •  December 6, 2024

A threat actor who claims to have stolen 16 million customer records from HDFC Life is demanding a $6.9 million ransom to keep from selling it on the dark web. The stolen records of the Indian insurance giant are being advertised for sale beginning Dec. 6 for 200,000 Tether, or $200,000.

Email Security & Protection

Insider Breach, Email Attacks Net $1.7M in HIPAA Fines

Marianne Kolbasuk McGee  •  December 6, 2024

An insider breach at a Florida pain management firm and an email breach at a Colorado pediatric hospital have resulted in more than $1.7 million in fines for HIPAA violations found by federal investigators. The two incidents affected fewer than 50,000 people.

Fraud Management & Cybercrime

Dutch Counter-Ransomware Initiative Led to Global Takedowns

Akshaya Asokan  •  December 6, 2024

A Dutch public and private sector anti-ransomware initiative has contributed to ransomware disruptions globally, found an assessment from the University of Leiden. "Project Melissa" was launched in 2023 by Cybersafe Netherlands, the Dutch National Cyber Security Center and security companies.

Artificial Intelligence & Machine Learning

Trump's AI, Crypto Czar David Sacks Faces Conflict Scrutiny

Chris Riotta  •  December 6, 2024

President-elect Donald Trump's appointment of former PayPal executive David Sacks to serve as the inaugural White House czar for artificial intelligence and cryptocurrency is already raising significant concerns about potential conflicts of interest and market favoritism.

►

Artificial Intelligence & Machine Learning

ISMG Editors: China Outpacing US in Critical Technology R&D

Mathew J. Schwartz  •  December 6, 2024

In the latest weekly update, ISMG editors discussed China outpacing the U.S. in critical technology research investments, why all 10 RSA Conference 2025 Sandbox Innovation finalists will receive a $5 million investment, and how artificial intelligence dominated the AWS re:Invent 2024 conference.

CISO Trainings

Protecting the C-Suite in the Wake of UHC CEO's Murder

Marianne Kolbasuk McGee  •  December 6, 2024

The torrents of public hostility directed at health insurers in the aftermath of UnitedHealthCare CEO Brian Thompson's murder are serious signs of intensifying cyber and physical threats facing the C-suites of healthcare and many other sectors, said Chris Pierson, founder and CEO of BlackCloak.

Governance & Risk Management

Here's Where Top Cybersecurity Vendors Stand as 2025 Nears

Michael Novinson  •  December 6, 2024

Three of the world's largest pure-play cybersecurity vendors recently reported earnings, grappling with SIEM and firewall displacement opportunities along with rebounding from a massive outage. Palo Alto Networks Continues to reap the benefits of buying IBM's QRadar SaaS business.

Artificial Intelligence & Machine Learning

Weaponized AI: Hot for Fraud, Not for Election Interference

Mathew J. Schwartz  •  December 6, 2024

Artificial intelligence: What's it good for? Per the old song about war, the answer isn't "absolutely nothing," but so far it also isn't "absolutely everything." New findings pinpoint where generative AI and deepfakes are hot - fraud - and where they're not - election interference

Artificial Intelligence & Machine Learning

Quantum Computing Advances Signal Major Industry Disruption

Kawin Boonyapredee  •  December 6, 2024

Recent developments in quantum computing show progress toward quantum supremacy, while integration with AI and classical systems creates new possibilities across industries. Leading researchers report significant advancements in qubit processing and error correction.

►

Email Security & Protection

AI and 'Customer Zero' Practices for Enhanced Usability

Tom Field  •  December 5, 2024

Barracuda's CIO Siroui Mushegian discusses how Barracuda uses AI and strong partnerships to deliver comprehensive cybersecurity solutions. The company builds products on AWS infrastructure, sells them through AWS Marketplace and uses AWS for internal systems.

Cyberwarfare / Nation-State Attacks

Russian Forces Accused of Secretly Planting Spyware on Phone

Chris Riotta  •  December 5, 2024

A Russian activist says security forces covertly installed spyware on his cellphone while he was detained in Moscow for aiding Ukraine. A report published Thursday shows the spyware received a broad range of permissions, from tracking location to reading encrypted messages.