Latest

Backdoor Found and Defused in Widely Used Linux Utility XZ

Mathew J. Schwartz  •  April 1, 2024

Nation-state attackers apparently backdoored widely used, open-source data compression software as part of a supply chain attack. Malicious code inserted into recent versions of XZ Utils was designed to facilitate full, remote access to an infected system.

Standards, Frameworks, Governance

OMB Issues First Governmentwide AI Risk Mitigation Rules

Chris Riotta  •  March 28, 2024

The Office of Management and Budget issued the first-ever governmentwide guidance for mitigating risks associated with the federal use of artificial intelligence, including specific actions agencies must complete within a year to help ensure the responsible use of emerging tools and technologies.

On the Increase: Zero-Days Being Exploited in the Wild

Mathew J. Schwartz  •  March 27, 2024

Fresh zero-day vulnerabilities continue to be actively exploited in the wild by attackers, often for surveillance and espionage purposes, according to the latest annual review of in-the-wild exploits published by Google. In 2023, 97 new zero-days came to light, up from 62 in 2022.

Cyberattacks, Malware, Ransomware

Russia Announces Arrest of Medibank Hacker Tied to REvil

Mathew J. Schwartz  •  February 21, 2024

Russian authorities have reportedly arrested three accused members of the SugarLocker ransomware-as-a-service operation. Their alleged crime? Targeting Russians, although one suspect has also been tied to a massive hack of Australian health insurer Medibank and a subsequent data leak.

Government

Biden to Sign Executive Order Raising Maritime Cybersecurity

Chris Riotta  •  February 21, 2024

U.S. President Joe Biden is set Wednesday to sign an executive order aimed at bolstering cybersecurity in maritime ports, including a directive for the Coast Guard to develop minimum cybersecurity standards for the marine transportation system.

Cyber Fraud

Banking Trojan Harvests Facial Biometrics for AI Deepfakes

Mathew J. Schwartz  •  February 15, 2024

A Chinese-speaking cybercrime group with the codename GoldFactory has built a new Android and iOS banking Trojan, GoldPickaxe, that can harvest and steal personal details, including biometric face profiles, that attackers use to create AI-driven deepfakes to fool bank defenses, researchers warn.

Dozens of Commercial Spyware Vendors at Work, Google Warns

Mathew J. Schwartz  •  February 6, 2024

Greater diplomacy and faster vulnerability identification and remediation, backed by more bug bounty programs, are needed to combat the ongoing rise of advanced surveillance tools now being offered by at least 40 commercial spyware vendors, said Google's Threat Analysis Group.

Swiss Government Reports Nuisance-Level DDoS Disruptions

Mathew J. Schwartz  •  January 18, 2024

Switzerland's federal government reports that multiple federal agencies' public-facing sites were temporarily disrupted by distributed denial-of-service attacks perpetrated by a self-proclaimed Russian hacktivist group "as a means of gaining media attention for their cause."

Kimsuky Uses Permissive DMARC Policies to Spoof Emails

Prajeet Nair  •  April 16, 2024

North Korean hackers with an affinity for establishing rapport with targets via social engineering and email are getting smarter about bypassing anti-spam protections and using tracking pixels, say researchers. The group, codenamed Kimsuky, has been operational since 2012.

BCP & DR

Iran Launches Wave of Retaliatory Strikes at Israel

Prajeet Nair  •  April 14, 2024

Israel Defense Forces reported the launch of rockets by Iran from Lebanon into Israel on Saturday. Hezbollah militants claim responsibility, citing retaliation for recent Israeli actions and solidarity with Palestinians in Gaza, according to reports.

Internet of Things Security

New Rules for Shipbuilding Focus on IT/OT Cybersecurity

Sandhya Michu , Prajeet Nair  •  April 4, 2024

IT and OT security experts say threats to shipping underscore the need for more stringent regulations for passenger, cargo and high-speed vessels by the International Association of Classification Societies. The new IACS cybersecurity and resilience requirements will go into effect July 1.

►

Video

AI-Powered, Portable Autonomous Stores Disrupt Retail Sector

Sandhya Michu  •  April 4, 2024

Co-founder Steve Liguori discusses how Juxta's AI-powered autonomous micro-stores provide a disruptive solution to the global labor shortage in convenience retail outlets. These stores use AI sensors and cameras for a seamless shopping experience and are being applied across hospitals, EV stations and campuses.