Information security

Information security

The leader of LockBit ransomware group, Dmitry Khoroshev, has been identified and charged with computer crimes, fraud, and extortion. [ more ]

Intrusions into US water systems by China, Russia, and Iran serve as a warning about the vulnerability of critical infrastructure.

Hacktivists may have ties to government intelligence services, posing a threat to critical infrastructure security.

Nation-state intelligence services using hacktivist groups to carry out cyber attacks is a concerning trend that adds complexity to cybersecurity threats. [ more ]

Ukraine's security services foiled a Russian plot to assassinate President Zelensky and other top officials. [ more ]

Attacks exploiting vulnerabilities increased by 180% driven by MOVEit hack. [ more ]

Brokewell is a new banking malware targeting Android users, posing as Google Chrome and other popular applications, capable of spying on users and stealing sensitive information. [ more ]

Criminals are evolving to use more sophisticated methods like hunter-killer malware to hide from security systems, with over two-thirds of malware now employing stealth techniques. [ more ]

Cyber security is a crucial priority for businesses to protect their digital assets and avoid significant costs and consequences associated with cyber attacks. [ more ]

Kaiser Permanente's breach resulted in sharing patients' information with tech giants; data included names and search history. [ more ]

Google focuses on using generative AI for cybersecurity, leveraging Gemini 1.5 Pro for threat analysis and report summarization. [ more ]

Google focuses on using generative AI for cybersecurity, leveraging Gemini 1.5 Pro for threat analysis and report summarization. [ more ]

Windows April security updates may cause VPN issues, prompting users to uninstall updates as a temporary workaround. [ more ]

Businesses running macOS devices face potential risk from the new variant of LightSpy malware. [ more ]

Over 380,000 NYC public school students had personal data hacked, totaling over 1 million affected. DOE offers free credit monitoring services post-security breach. [ more ]

Cybersecurity is undergoing a significant transformation, leveraging AI for faster threat detection and response. [ more ]

Cuttlefish malware infects routers to steal data and authentication information, active since July 2023. [ more ]

Ransomware attack on NHS Dumfries and Galloway led to leak of 3TB of sensitive data onto dark web. [ more ]

Iranian hackers linked to Revolutionary Guard impersonated journalists and human rights groups for phishing attacks. [ more ]

Moving to the cloud poses security challenges - data breaches, misconfigurations, compliance, and unauthorized access. Robust security measures and employee training are crucial for data protection. [ more ]

Biden administration updated federal infrastructure protection policy via NSM-22, linking it to modern cyber threat landscape, but fell short by not including space and cloud industries. [ more ]

Microsoft faced major security breaches resulting in data exposure and criticism. The company is taking steps to improve its security practices and prioritize security as the top concern. [ more ]

The EU and member states condemn Russian cyber attacks by Fancy Bear. [ more ]

SafeBase utilizes AI to automate security questionnaires, saving time and improving accuracy for customers. [ more ]

Generative AI adoption increases security risks, creating a complex threat landscape. [ more ]

More funding is crucial for CISA to enhance cybersecurity defense, particularly against Chinese hackers in critical infrastructure. [ more ]

US government's CISA is actively assisting critical infrastructure organizations in addressing vulnerabilities exploited by ransomware gangs to prevent attacks. [ more ]

The U.S. intelligence community will share threat information with critical infrastructure operators under the revised policy directive. [ more ]

UnitedHealth Group CEO revealed data breach involving U.S. military personnel.

Delay in notifying affected individuals poses challenges for health data protection. [ more ]