Latest

Containerization & Sandboxing

Feds Probe Chinese 'Salt Typhoon' Hack of Major Telcos

Mathew J. Schwartz  •  October 7, 2024

The U.S. government is reportedly probing suspected national security breaches tied to Chinese nation-state hackers infiltrating broadband providers' infrastructure used to comply with court-authorized "lawful intercept" wiretaps of subscribers' networking traffic.

Cybercrime

Hackers Used Fake Skype Courtroom to Con Textile Tycoon

Jayant Chakravarti  •  October 4, 2024

Cybercriminals impersonated government investigators and the chief justice of India's Supreme Court in a fake Skype call to defraud wealthy industrialist and Vardhman Group Chairman S.P. Oswal out of about $835,000 after threatening to arrest him on money laundering charges.

Blockchain & Cryptocurrency

Russia Arrests 100 in Cryptex Crypto Exchange Crackdown

Chris Riotta  •  October 4, 2024

Russia’s primary federal investigative agency announced a rare and sweeping investigation into the United States-sanctioned cryptocurrency exchange Cryptex and other platforms used to carry out illegal transactions and launder millions from ransomware groups.

Artificial Intelligence & Machine Learning

Irish DPC Probes Ryanair Over Facial Recognition

Akshaya Asokan  •  October 4, 2024

The Irish data regulator launched an investigation into Dublin-based ultra low-cost carrier Ryanair to identify potential privacy violations related to the company's use of third-party facial recognition technology, stepping into a running fight Ryainair has fought against online ticket sellers.

General Data Protection Regulation (GDPR)

Meta Hit Again With Targeted Advertising Limits In Europe

David Perera  •  October 4, 2024

Targeted advertising may face additional restrictions following a ruling by the top European Union court that social media giant Meta cannot indefinitely retain user data. Nor can it use data for advertising "without distinction as to type of data," the European Court of Justice said Friday.

Fraud Management & Cybercrime

Medical Group Pays $240K Fine for 3 Ransomware Attacks

Marianne Kolbasuk McGee  •  October 4, 2024

Federal regulators have hit a California physician services organization with a $240,000 HIPAA civil penalty following an investigation into three ransomware attacks that occurred within a three-week span in early 2018, compromising the sensitive information of 85,000 patients.

Governance & Risk Management

Ivanti Confirms Exploitation of an Old Critical Vuln

Prajeet Nair  •  October 4, 2024

Ivanti confirmed that hackers are exploiting an SQL injection vulnerability in its Ivanti Endpoint Manager enabling remote code execution, despite the company addressing the issue with a patch in May. The flaw allows unauthenticated attackers within the same network to execute arbitrary code.

3rd Party Risk Management

Mass Retail Hacks Affect Adobe Commerce and Magento Stores

Mathew J. Schwartz  •  October 4, 2024

Thousands of online stores running Adobe Commerce and Magento software have been hacked since the summer and infected with digital payment skimmers by attackers targeting a vulnerability known as CosmicSting. While patched by Adobe in June, users also need to forcibly invalidate stolen credentials.

Cybercrime

Cyberattack Cripples Uttarakhand Government's IT Services

Jayant Chakravarti  •  October 4, 2024

A cyberattack shut down government web portals, servers and a regional data center in the Indian state of Uttarakhand, forcing agencies to scramble to restore affected services. The attack disrupted work at all government locations and crippled services to citizens.

►

Fraud Management & Cybercrime

ISMG Editors: Russian Cybercrime Syndicates Under Siege

Anna Delaney  •  October 4, 2024

In the latest weekly update, ISMG editors discussed recent international law enforcement efforts against Russian cybercrime organizations, the latest U.S. cybersecurity bill aimed at protecting the healthcare sector and key takeaways from ISMG's Canada Summit.

Healthcare

600,000 Prison Inmates to Share in $6.49M Breach Settlement

Marianne Kolbasuk McGee  •  October 3, 2024

A misconfigured web server and the exposure of sensitive information for nearly 600,000 prison inmates in 2022 will cost medical claims processing company CorrectCare $6.49 million to settle a consolidated proposed class action lawsuit, according to court records.

Cybercrime

Breach Roundup: AI 'Nudify' Sites Serve Malware

Anviksha More  •  October 3, 2024

This week, AI nudify sites spread malware, BEC scammers head to prison, London man charged with hacking, and a Spanish insurance company with a breach. Also, a North Korean hacking group and a West African crackdown on online scammers. And, a Schrödinger Windows vulnerability: Is it real?