Latest

Blockchain & Cryptocurrency

Crypto Roundup: Crypto Pros Targeted With Fake Meeting Apps

Prajeet Nair  •  December 12, 2024

This week, scammers targeted crypto workers with fake meeting apps, Australia fined Kraken crypto exchange operator Bit Trade, a Los Angeles federal court ordered five individuals to pay $5 million, Polish police detained a Russian former exchange operator and FTX debtors clawed back more cash.

►

Artificial Intelligence & Machine Learning

ISMG Editors: Cloud and AI in Action at AWS re:Invent 2024

Tom Field  •  December 12, 2024

In this special edition at AWS re:Invent 2024 in Las Vegas, ISMG editors discuss groundbreaking generative AI use cases transforming industries, from predictive fleet management to drug discovery, and explore how AI is reshaping user expectations in data analytics.

Cyberwarfare / Nation-State Attacks

Russia Used Borrowed Spyware to Target Ukrainian Troops

Jayant Chakravarti  •  December 12, 2024

A Russian state-backed hacker group used third-party data-stealing bots and possibly a backdoor used by another Russia-based threat group to infiltrate and spy on devices used by frontline Ukrainian military units, according to a report from the Microsoft threat intelligence team.

Cybercrime

Breach Roundup: Kosovar Illicit Markeptlace 'Rydox' Shuttered

Anviksha More  •  December 12, 2024

This week, a shuttered illicit marketplace, Patch Tuesday, lax German cybersecurity, mobile user accounts stolen in Spain, Operation PowerOFF closed booter sites, Google patched Chrome and scammers rented AirBnBs. Stolen student data in Peru and an incident at a U.S. medical device maker.

Cybercrime

US Indicts 14 North Koreans in IT Scam Funding WMD Programs

Chris Riotta  •  December 12, 2024

U.S. federal prosecutors indicted 14 North Koreans for a long-running IT scam generating $88 million by exploiting remote work with U.S. firms, a scheme prosecutors say is tied to DPRK-controlled companies that fund weapons programs through stolen identities, data theft and extortion.

Governance & Risk Management

NY Health Group Fined $550K in Unpatched Vulnerability Hack

Marianne Kolbasuk McGee  •  December 12, 2024

New York State has levied a $550,000 fine against a healthcare group that tried - but failed - to patch a critical zero-day vulnerability in a Citrix NetScaler appliance used for telemedicine. Hackers exploited the flaw, stealing 196 gigabytes of data in an incident affecting 242,000 people.

Government

Experts Call for Overhaul of National Cyber Director Role

Chris Riotta  •  December 12, 2024

Cybersecurity experts are urging a revamp of the Office of the National Cyber Director. The Center for Cybersecurity Policy and Law says the office needs a clearer mission, more resources and the authority to lead cybersecurity policies for other government agencies to bolster U.S. cyber defenses.

Cybercrime

New Malware Framework Targets Cleo File Systems

Prajeet Nair , David Perera  •  December 12, 2024

Hackers exploiting flaws in Cleo Communications software instances had intimate knowledge of their internals and deployed a previously unknown family of malware, security researchers from Huntress said Thursday. Cleo published a patch Wednesday evening.

►

Artificial Intelligence & Machine Learning

Predictive AI and the Future of Fleet Maintenance

Tom Field  •  December 12, 2024

Predictive AI solutions can now anticipate maintenance needs before issues arise, enabling fleet operators to schedule timely repairs and prevent disruptions, said Sarvant Singh, vice president, data and emerging digital solutions at Penske Transportation Solutions.

Application Security

Google Gemini 2.0 Introduced With Advanced AI for Developers

Michael Novinson  •  December 11, 2024

Google's latest AI model can natively process and output text, images and audio in the search giant's push toward more autonomous reasoning, planning and action. The company said Gemini 2.0 is designed for applications ranging from development and gaming to research and everyday assistance.

Governance & Risk Management

Hackers Exploiting Cleo Software Zero-Day

Prajeet Nair  •  December 11, 2024

File transfer software made by Cleo Communications is under active attack and a patch meant to stymie hackers doesn't fix the flaw, say security researchers from Huntress. Hackers exploit an arbitrary file-write vulnerability along with a feature that automatically executes files.

Breach Notification

Clearinghouse Pays $250K Settlement in Web Exposure Breach

Marianne Kolbasuk McGee  •  December 11, 2024

A breach that exposed the personal information of nearly 1.6 million patients of a Puerto Rico-based clearinghouse has led to a $250,000 financial settlement with federal regulations for multiple HIPAA violations. The 2019 leak has cost Inmediata Health $2.7 million in fines and civil settlements.