Latest

Government

Sixgen's Kyrus Acquisition Boosts National Cybersecurity

Michael Novinson  •  December 3, 2024

Sixgen will enhance its cybersecurity operations through the purchase of Washington D.C.-area Kyrus. The move introduces reverse engineering and analytics expertise to Sixgen's portfolio, aligning with its mission to protect critical infrastructure and bolster American cyber defense capabilities.

Cybercrime

'Horns&Hooves' Malware Campaign Hits Over 1,000 Victims

Prajeet Nair  •  December 3, 2024

A malware campaign targeting Russian retailers and service businesses aims to deploy remote access tools and install infostealer malware. Kaspersky dubbed the campaign "Horns&Hooves," after a fake organization set up by fraudsters in the 1931 Soviet satirical novel "The Little Golden Calf."

Governance & Risk Management

16 Zero-Days Uncovered in Fuji Electric Monitoring Software

Jayant Chakravarti  •  December 3, 2024

Security researchers have uncovered 16 zero-day vulnerabilities in Japanese equipment manufacturer Fuji Electric's Tellus and V-Server remote monitoring software that enable attackers to execute malicious code in devices commonly used by utilities and other critical infrastructure providers.

Governance & Risk Management

GoodRx Agrees to Pay $25M to Settle Web Tracker Lawsuit

Marianne Kolbasuk McGee  •  December 3, 2024

GoodRx has reached a $25 million preliminary settlement of proposed class action litigation alleging the telehealth company violated privacy and an assortment other laws and statues when it previously collected and shared consumers' information with third-parties through online tracking tools.

Artificial Intelligence & Machine Learning

AWS Unveils Future of Enterprise AI and Cloud at re:Invent

Rahul Neel Mani  •  December 3, 2024

Amazon Web Services hopes to redefine enterprise innovation in the cloud with a slew of announcements made during CEO Matt Garman's keynote speech at re:Invent 2024 in Las Vegas about advancements in compute, storage, databases, generative AI and analytics.

Critical Infrastructure Security

No Timeline for Evicting Chinese Hackers from US Networks

David Perera  •  December 3, 2024

Chinese hackers who penetrated U.S. telecoms likely haven't been fully evicted partially due to shifting tactics made in response to public disclosures, federal officials said Tuesday. Industry and government investigators have revealed in dribs and drabs a campaign of Beijing telecom hacking.

Artificial Intelligence & Machine Learning

China Is Outpacing US in Critical Tech Research Investments

Chris Riotta  •  December 2, 2024

China has surged past the United States in critical technology research, according to a recent report published by the Australian Strategic Policy Institute. Experts warn the shift could have profound global implications, including risks to U.S. cybersecurity, innovation and global leadership.

Artificial Intelligence & Machine Learning

Upwind Raises $100M to Thwart Cloud Security Vulnerabilities

Michael Novinson  •  December 2, 2024

With $100 million in Series A funding, Upwind plans to enhance its runtime and AI-powered cloud security platform. CEO Amiram Shachar outlines the company's investments in engineering, customer engagement and scaling solutions to address vulnerabilities such as misconfigurations and insecure APIs.

Artificial Intelligence & Machine Learning

Feds Propose AI 'Guardrails' for Medicare Advantage Plans

Marianne Kolbasuk McGee  •  December 2, 2024

The Centers for Medicare and Medicaid Services has issued proposed "guardrails" to help ensure that the use of artificial intelligence for Medicare Advantage insurance plans does not result in inequitable access to healthcare-related services. The proposed rule will go into effect in 2026.

Cybercrime

SmokeLoader Campaign Targets Taiwanese Companies

Prajeet Nair  •  December 2, 2024

A threat actor is targeting Taiwanese companies using phishing emails and long-standing vulnerabilities to deliver SmokeLoader malware. The threat actor uses plugins for the infamous malware to directly attack systems rather than using SmokeLoader, as its name suggests, as a loader for other malware.

Fraud Management & Cybercrime

Cyber Incidents Hit Three NHS Hospitals in UK

Marianne Kolbasuk McGee  •  December 2, 2024

At least three National Health Service hospitals in U.K. are responding to recent cyber incidents, including a children's hospital and a heart and chest specialty hospital - both located in Liverpool - that share IT systems. INC Ransom claims to have stolen data from the two hospitals.

Fraud Management & Cybercrime

Russia Indicts Alleged Ransomware Hacker Wanted by the FBI

Akshaya Asokan  •  December 2, 2024

A suspected, prolific ransomware affiliate hacker and developer has been arrested on criminal charges in Russia, reported Kremlin media. Mikhail Pavlovich Matveev has been wanted by U.S. authorities since 2023 for his alleged participation in the LockBit, Hive and Babuk ransomware groups.