Latest

►

Artificial Intelligence & Machine Learning

Aligning Security With Business Goals Amid Regulatory Shifts

Tom Field  •  December 13, 2024

Expanding into global markets requires organizations to navigate complex and rapidly changing regulatory landscapes. Kayla Williams, CISO at Devo, shared how a collaborative approach to compliance planning helps organizations meet these challenges while accelerating growth.

Cybercrime

German BSI Disrupts Android Malware Infecting IoT Devices

Akshaya Asokan  •  December 13, 2024

The German federal information security agency disrupted a botnet that infected thousands of backdoored digital picture frames and media players made with knock-off Android operating systems shipped from China. The agency identified at least 30,000 infected devices.

Business Continuity Management / Disaster Recovery

Hackers Steal 17M Patient Records in Attack on 3 Hospitals

Marianne Kolbasuk McGee  •  December 13, 2024

Cybercriminals claim they stole 17 million patient records from a southern California regional healthcare provider that is still struggling with IT and phone systems outages that have been disrupting patient care since the organization was hit by a ransomware attack on Dec. 1.

►

Artificial Intelligence & Machine Learning

ISMG Editors: CEO Shooting Sparks AI Accountability Debate

Anna Delaney  •  December 13, 2024

In the latest weekly update, ISMG editors discussed the shooting death of the UnitedHealthcare CEO and its wider implications for AI-driven decision-making, market strategies for the top cybersecurity companies in 2025 and they are reflecting industry trends.

Attack Surface Management

Researchers: Iranian Custom Malware Targets Fuel Systems

Prajeet Nair  •  December 13, 2024

An Iranian state hacking group is using custom malware to compromise IoT and OT infrastructure in Israel and the United States. An attack wave from Islamic Revolutionary Guard Corps-affiliated "CyberAv3ngers" swept up fuel management systems made by U.S.-based firm Gilbarco Veeder-Root.

Artificial Intelligence & Machine Learning

Artificial Intelligence Looms Large at Black Hat Europe

Mathew J. Schwartz  •  December 13, 2024

The topic of AI reality versus hype, as well as what the next killer use cases might be, dominated the wrap-up "Locknote" panel at this year's annual Black Hat Europe in London, comprised of conference Review Board members detailing this year's hot topics, with AI taking top place.

Blockchain & Cryptocurrency

Crypto Roundup: Crypto Pros Targeted With Fake Meeting Apps

Prajeet Nair  •  December 12, 2024

This week, scammers targeted crypto workers with fake meeting apps, Australia fined Kraken crypto exchange operator Bit Trade, a Los Angeles federal court ordered five individuals to pay $5 million, Polish police detained a Russian former exchange operator and FTX debtors clawed back more cash.

►

Artificial Intelligence & Machine Learning

ISMG Editors: Cloud and AI in Action at AWS re:Invent 2024

Tom Field  •  December 12, 2024

In this special edition at AWS re:Invent 2024 in Las Vegas, ISMG editors discuss groundbreaking generative AI use cases transforming industries, from predictive fleet management to drug discovery, and explore how AI is reshaping user expectations in data analytics.

Cyberwarfare / Nation-State Attacks

Russia Used Borrowed Spyware to Target Ukrainian Troops

Jayant Chakravarti  •  December 12, 2024

A Russian state-backed hacker group used third-party data-stealing bots and possibly a backdoor used by another Russia-based threat group to infiltrate and spy on devices used by frontline Ukrainian military units, according to a report from the Microsoft threat intelligence team.

Cybercrime

Breach Roundup: Kosovar Illicit Markeptlace 'Rydox' Shuttered

Anviksha More  •  December 12, 2024

This week, a shuttered illicit marketplace, Patch Tuesday, lax German cybersecurity, mobile user accounts stolen in Spain, Operation PowerOFF closed booter sites, Google patched Chrome and scammers rented AirBnBs. Stolen student data in Peru and an incident at a U.S. medical device maker.

Cybercrime

US Indicts 14 North Koreans in IT Scam Funding WMD Programs

Chris Riotta  •  December 12, 2024

U.S. federal prosecutors indicted 14 North Koreans for a long-running IT scam generating $88 million by exploiting remote work with U.S. firms, a scheme prosecutors say is tied to DPRK-controlled companies that fund weapons programs through stolen identities, data theft and extortion.

Governance & Risk Management

NY Health Group Fined $550K in Unpatched Vulnerability Hack

Marianne Kolbasuk McGee  •  December 12, 2024

New York State has levied a $550,000 fine against a healthcare group that tried - but failed - to patch a critical zero-day vulnerability in a Citrix NetScaler appliance used for telemedicine. Hackers exploited the flaw, stealing 196 gigabytes of data in an incident affecting 242,000 people.