Here's Where Top Cybersecurity Vendors Stand as 2025 Nears

Michael Novinson • December 6, 2024

Three of the world's largest pure-play cybersecurity vendors recently reported earnings, grappling with SIEM and firewall displacement opportunities along with rebounding from a massive outage. Palo Alto Networks continues to reap the benefits of buying IBM's QRadar SaaS business.

Artificial Intelligence & Machine Learning

Upwind Raises $100M to Thwart Cloud Security Vulnerabilities

Latest

Cyberwarfare / Nation-State Attacks

Spyware Campaign Targets Sino Minority Groups Via WeChat

Anviksha More • December 6, 2024

A possible Chinese state threat group is targeting vulnerabilities in messaging apps to deliver spyware in cross-platform devices used by members of ethnic minorities targeted for repression by Beijing. Trend Micro dubs the group "Earth Minotaur."

Breach Notification

Hacker Extorts HDFC Life for Breach of 16 Million Records

Jayant Chakravarti • December 6, 2024

A threat actor who claims to have stolen 16 million customer records from HDFC Life is demanding a $6.9 million ransom to keep from selling it on the darkweb. The stolen records of the Indian insurance giant are being advertised for sale beginning Dec. 6 for 200,000 tether, or $200,000.

Email Security & Protection

Insider Breach, Email Attacks Net $1.7M in HIPAA Fines

Marianne Kolbasuk McGee • December 6, 2024

An insider breach at a Florida pain management firm and an email breach at a Colorado pediatric hospital have resulted in more than $1.7 million in fines for HIPAA violations found by federal investigators. The two incidents affected fewer than 50,000 people.

Fraud Management & Cybercrime

Dutch Counter-Ransomware Initiative Led to Global Takedowns

Akshaya Asokan • December 6, 2024

A Dutch public and private sector anti-ransomware initiative has contributed to ransomware disruptions globally, found an assessment from the University of Leiden. "Project Melissa" was launched in 2023 by Cybersafe Netherlands, the Dutch National Cyber Security Center and security companies.

Artificial Intelligence & Machine Learning

Trump's AI, Crypto Czar David Sacks Faces Conflict Scrutiny

Chris Riotta • December 6, 2024

President-elect Donald Trump's appointment of former PayPal executive David Sacks to serve as the inaugural White House czar for artificial intelligence and cryptocurrency is already raising significant concerns about potential conflicts of interest and market favoritism.

Artificial Intelligence & Machine Learning

ISMG Editors: China Outpacing US in Critical Technology R&D

Mathew J. Schwartz • December 6, 2024

In the latest weekly update, ISMG editors discussed China outpacing the U.S. in critical technology research investments, why all 10 RSA Conference 2025 Sandbox Innovation finalists will receive a $5 million investment, and how artificial intelligence dominated the AWS re:Invent 2024 conference.

CISO Trainings

Protecting the C-Suite in the Wake of UHC CEO's Murder

Marianne Kolbasuk McGee • December 6, 2024

The torrents of public hostility directed at health insurers in the aftermath of UnitedHealthCare CEO Brian Thompson's murder are serious signs of intensifying cyber and physical threats facing the C-suites of healthcare and many other sectors, said Chris Pierson, founder and CEO of BlackCloak.

Artificial Intelligence & Machine Learning

Weaponized AI: Hot for Fraud, Not for Election Interference

Mathew J. Schwartz • December 6, 2024

Artificial intelligence: What's it good for? Per the old song about war, the answer isn't "absolutely nothing," but so far it also isn't "absolutely everything." New findings pinpoint where generative AI and deepfakes are hot - fraud - and where they're not - election interference

Cyberwarfare / Nation-State Attacks

Russian Forces Accused of Secretly Planting Spyware on Phone

Chris Riotta • December 5, 2024

A Russian activist says security forces covertly installed spyware on his cellphone while he was detained in Moscow for aiding Ukraine. A report published Thursday shows the spyware received a broad range of permissions, from tracking location to reading encrypted messages.

Blockchain & Cryptocurrency

Cryptohack Roundup: Solana npm Package Attack's Wallet Risks

Prajeet Nair • December 5, 2024

This week, Solana npm package attack, a Brazilian banking giant entered crypto trading and a Nebraska man pleaded guilty to cryptojacking. Australia tightened rules for crypto businesses and crypto losses dropped in 2024 and DMM Bitcoin will cease operations.

Artificial Intelligence & Machine Learning

CEO's Murder Sparks Outcry Over UHC's Coverage Denials

Marianne Kolbasuk McGee • December 5, 2024

Law enforcement investigating murder of Brian Thompson, CEO of UnitedHealthcare, are examining potential motives. But shell casings reportedly found at the crime scene spotlight one of the top motives speculated - anger over the company's alleged denial of coverage practices. Where does AI fit in?

Cybercrime

Breach Roundup: Vodka Maker Bankrupt After Cyberattack

Anviksha More • December 5, 2024

This week, a vodka maker in bankruptcy cited its ransomware attack, no ransomware at the Spanish tax agency and cable cuttings in Finland. Data stolen from Japanese shoppers, Chemonics International and law firm KYL. A sweep of Asian cybercrime, trends in the U.K. and ENGlobal ransomware attack.