Latest

Critical Infrastructure Security

GPS Modernization Stalls as Pentagon Faces Chip Shortages

Chris Riotta  •  September 12, 2024

The Space Force is suffering from years of delays, setbacks and shortcomings in its Global Positioning System modernization program, according to a Government Accountability Office report, which found major deficiencies and testing issues that could hinder the United States competitiveness in space.

Business Continuity Management / Disaster Recovery

Kernel Mode Under the Microscope at Windows Security Summit

Michael Novinson  •  September 12, 2024

Cutting kernel mode dependencies and adopting safe deployment practices will make endpoint systems more resilient and secure for Windows customers. Tuesday's meeting came two months after a faulty CrowdStrike update disrupted 8.5 million Windows machines and caused $5.4 billion in direct losses.

Cybercrime

Android Trojans Still Pose a Threat, Researchers Warn

Mathew J. Schwartz  •  September 12, 2024

Android malware first seen in the wild in late 2023 has been targeting users' bank and online payment accounts, bolstered by its ability to steal one-time access codes sent via SMS. The banking Trojan, which security researchers call Ajina, appears to be a joint endeavor with affiliates.

Critical Infrastructure Security

UK Labels Data Centers as Critical National Infrastructure

Akshaya Asokan  •  September 12, 2024

The U.K. government on Thursday designated data centers as part of its critical national infrastructure in a move intended to prevent the loss of sensitive user data during disruptive cyberattacks. A newly announced data center security team will monitor and anticipate potential cyberthreats.

Artificial Intelligence & Machine Learning

Businesses Wary of Overregulation in Australia's AI Plan

Jayant Chakravarti  •  September 12, 2024

The Australian government has proposed new regulations to place mandatory guardrails on the use of AI in high-risk settings, but private sector industry groups fear that too many laws and regulations around AI could deter businesses from investing in or deploying the AI technology.

Cybercrime

Singapore Police Round Up Global Cybercrime Syndicate

Jayant Chakravarti  •  September 12, 2024

Singapore police arrested five Chinese nationals and seized cryptocurrency assets. It said the group led an international crime organization that used hacking tools and credentials for internet servers to carry out cyberattacks. A Singapore national faces charges related to helping the group.

Cybercrime

Breach Roundup: Mexico in Hacker Spotlight

Anviksha More  •  September 12, 2024

This week, cyberthreats rising in Mexico; FBI warned of BEC scams; U.K. police arrested hacking suspect; Avis, Slim CD, Medicare and Fortinet disclosed breaches; Highline public schools reopened after cyberattack; a critical flaw was found in WHOIS; and Konni upped attacks on Russia, South Korea.

Blockchain & Cryptocurrency

Cryptohack Roundup: $20.5M Indodax Theft

Rashmi Ramesh  •  September 12, 2024

This week, Indodax was hacked, Angel Drainer resurfaced, Russia developed Infra crypto, GS Partners settled with U.S. states, Caroline Ellison to be sentenced Sept. 24, FCA prosecuted first unregistered crypto case, Nigeria set new crypto regulations, and India may approve offshore crypto firms.

Cyberwarfare / Nation-State Attacks

Election Experts Still Demanding More Federal Cyber Support

Chris Riotta  •  September 11, 2024

Election security experts told Information Security Media Group the United States continues to lack adequate federal funding and resources to support state and local election information technology security efforts amid heightened global tensions and an ever-expanding threat landscape.

Cyberwarfare / Nation-State Attacks

French Cyber Agency Warns of APT28 Hacks Against Think Tanks

Akshaya Asokan  •  September 11, 2024

Russian state hackers are targeting think tanks studying strategic interests and the defense sector, warned the French cyber agency. A hacking group that officially is Unit 26165 of the Russian Main Intelligence Directorate appears to be Russia's most prolific targeter of think tanks.

Fraud Management & Cybercrime

NoName Apparently Allies With RansomHub Operation

Prajeet Nair  •  September 11, 2024

Up-and-coming online criminal extortion group RansomHub appears to have a new affiliate - NoName, a midtier actor whose main claim to fame so far has been impersonating the LockBit ransomware-as-a-service operation. NoName is known for exploiting years-old vulnerabilities.

Governance & Risk Management

Bashing Windows Bugs, Take 2: Microsoft Restores Nixed Fixes

Mathew J. Schwartz  •  September 11, 2024

Microsoft has issued a slew of software updates to patch numerous flaws, including three zero-day vulnerabilities that are already being exploited via in-the-wild attacks. Another fix addresses a prior update that inadvertently reintroduced vulnerable components to Windows 10.