Mathew J. Schwartz

Executive Editor, DataBreachToday & Europe, ISMG

Schwartz is an award-winning journalist with two decades of experience in magazines, newspapers and electronic media. He has covered the information security and privacy sector throughout his career. Before joining Information Security Media Group in 2014, where he now serves as the executive editor, DataBreachToday and for European news coverage, Schwartz was the information security beat reporter for InformationWeek and a frequent contributor to DarkReading, among other publications. He lives in Scotland.

Malicious Pixels: Criminals Revamp QR Code Phishing Attacks

Mathew J. Schwartz • October 9, 2024

Attackers are moving beyond using QR code images added to phishing emails to trick victims into visiting malicious sites, and using ASCII "full block" characters to build working QR codes designed to evade optical character recognition defenses, warns cybersecurity firm Barracuda Networks.

MoneyGram Money Transfer Firm Reports Customer Data Breach

Mathew J. Schwartz • October 8, 2024

MoneyGram Payment Systems, a Dallas-based money transfer system, said hackers who hit its infrastructure last month stole customer data, including contact details, Social Security numbers and information pertaining to criminal fraud investigations.

Feds Probe Chinese 'Salt Typhoon' Hack of Major Telcos

Mathew J. Schwartz • October 7, 2024

The U.S. government is reportedly probing suspected national security breaches tied to Chinese nation-state hackers infiltrating broadband providers' infrastructure used to comply with court-authorized "lawful intercept" wiretaps of subscribers' networking traffic.

Mass Retail Hacks Affect Adobe Commerce and Magento Stores

Mathew J. Schwartz • October 4, 2024

Thousands of online stores running Adobe Commerce and Magento software have been hacked since the summer and infected with digital payment skimmers by attackers targeting a vulnerability known as CosmicSting. While patched by Adobe in June, users also need to forcibly invalidate stolen credentials.

Cybercrime is Still Evil Incorporated, But Disruptions Help

Mathew J. Schwartz • October 2, 2024

Western law enforcement may not be able to bust every last Russian cybercrime suspect, but newly revealed efforts against Evil Corp and LockBit reveal suspects arrested while on vacation, as well as the psychological fallout criminal syndicates face when members get named, indicted and sanctioned.

Evil Corp Protected by Ex-Senior FSB Official, Police Say

Mathew J. Schwartz • October 1, 2024

Russian intelligence agencies tasked the notorious Russian-speaking cybercrime syndicate Evil Corp with conducting cyberattacks and cyberespionage operations on behalf of the Russian government, British police said Tuesday. Evil Corp has stolen at least $100 million from victims.

LockBit and Evil Corp Targeted in Anti-Ransomware Crackdown

Akshaya Asokan , David Perera , Mathew J. Schwartz • October 1, 2024

Law enforcement from the United States, United Kingdom, France and Spain made a coordinated announcement Tuesday of further arrests, indictments, sanctions and server takedowns targeting the Russian cybercriminal underground including strikes against the LockBit ransomware-as-a-service operation.

Russian Hackers Increase Attacks on Ukraine's Energy Sector

Mathew J. Schwartz • September 30, 2024

Russian military and intelligence hacking teams continue to refine their Ukrainian targeting, lately shifting to online attacks designed to support and help Moscow's military operations succeed, including social engineering schemes launched via dating portals and encrypted messaging apps.

Beyond Phishing: AI's New Tricks for Cyberattacks

Mathew J. Schwartz • September 27, 2024

While AI transforms business operations, it helps cybercriminals develop sophisticated impersonation techniques such as deepfakes and voice synthesis, posing new challenges for corporate security, said Surinder Lall, senior vice president of global information security risk management at Paramount.

Cybersecurity workforce development: A Public/Private Partnership that enhances cybersecurity while giving hands-on SOC experience to students

Mathew J. Schwartz • September 25, 2024

The threat landscape has evolved for state and local government entities as well as higher education institutes. Mary Lou Prevost from Splunk and Bruce Johnson of TekStream discuss innovative public-private partnerships that boost institutional defense mechanisms.

Delay Upgrading to macOS Sequoia, Security Experts Recommend

Mathew J. Schwartz • September 20, 2024

Multiple makers of third-party Apple security tools, including CrowdStrike and SentinelOne, are warning users not to upgrade to the new macOS 15 Sequoia, pending needed OS bug fixes. Users have also reported seeing problems with third-party VPNs crashing and single sign-on tools failing.

What's Next for Secure Communication After Exploding Pagers?

Mathew J. Schwartz • September 19, 2024

Secure communications in an age of network insecurity has focused mostly on encryption and fears of surveillance tracking. But as this week revealed to the dismay of terrorists and criminals alike, no OpSec measure is bulletproof to the effects of a corrupted supply chain.

Android Trojans Still Pose a Threat, Researchers Warn

Mathew J. Schwartz • September 12, 2024

Android malware first seen in the wild in late 2023 has been targeting users' bank and online payment accounts, bolstered by its ability to steal one-time access codes sent via SMS. The banking Trojan, which security researchers call Ajina, appears to be a joint endeavor with affiliates.

Bashing Windows Bugs, Take 2: Microsoft Restores Nixed Fixes

Mathew J. Schwartz • September 11, 2024

Microsoft has issued a slew of software updates to patch numerous flaws, including three zero-day vulnerabilities that are already being exploited via in-the-wild attacks. Another fix addresses a prior update that inadvertently reintroduced vulnerable components to Windows 10.

CrowdStrike Has Yet to See Any Customer Lawsuits Over Outage

Mathew J. Schwartz • September 10, 2024

Cybersecurity firm CrowdStrike has yet to see any lawsuits get filed against it by customers, following its July 19 faulty software update crashing systems worldwide. Does that speak to the company having run a well-executed crisis management strategy?

«
1 (current)
2
3
4
…
181
»

«
1 (current)
2
3
4
…
181
»