Latest

Critical Infrastructure Security

Remote Access Tool Sprawl Increases OT Risks

Prajeet Nair  •  September 13, 2024

Excessive deployment of remote access tools in operational technology environments expands attack surfaces and creates operational challenges, warn security researchers from Claroty. Remote access tools are essential, but they introduce numerous potential vulnerabilities that threat actors exploit.

Cyberwarfare / Nation-State Attacks

US Sanctions Russian Media for Secretly Funding Ukraine War

Chris Riotta  •  September 13, 2024

The U.S. Department of State announced additional sanctions Friday against the Kremlin news outlet RT after officials received new information from employees of the organization that revealed how it has become a key component in the Russian military machine.

►

Fraud Management & Cybercrime

Should UK Cut Fraud Reimbursement Cap for Smaller Banks?

Suparna Goswami  •  September 13, 2024

The U.K. Payment Systems Regulator wants to reduce the reimbursement cap on authorized push payment fraud to ease the burden on smaller banks. That's unacceptable and would undermine the financial system's integrity, said Jonathan Frost, board member at the Stop Scams Alliance.

Artificial Intelligence & Machine Learning

Irish Data Protection Commission Probes Google's AI Model

Akshaya Asokan  •  September 13, 2024

The Irish data regulator launched an investigation to determine Google's compliance with a European privacy law when it was developing its PaLM 2 artificial intelligence model. Google launched the multilingual generative AI model last year.

Critical Infrastructure Security

Chinese Crane Giant Poses Cybersecurity Threat to US Ports

Chris Riotta  •  September 13, 2024

Congress' Select Committee on the Chinese Communist Party published a report warning that Beijing could use a Chinese state-owned crane company that currently dominates the global ship-to-shore port crane market to disrupt and manipulate the United States maritime supply chain.

Cybercrime

Chinese-Speaking Hackers Manipulate SEO Rankings Globally

Prajeet Nair  •  September 13, 2024

A Chinese search engine optimization operation hacked more than 35 web servers and stole credentials in a campaign to boost the online rankings of malicious porn sites. Researchers from Cisco Talos dubbed the threat cluster DragonRank.

Artificial Intelligence & Machine Learning

Black Hat/DEF CON 2024: Latest Insights on Security and AI

Information Security Media Group  •  September 13, 2024

Welcome to Information Security Media Group's Black Hat and DEF CON 2024 Compendium featuring latest insights from the industry's top cybersecurity researchers and ethical hackers, as well as perspectives from CEOs, CISOs and government officials on the latest trends in cybersecurity and AI.

Governance & Risk Management

Eliminating the Need for Stored Credentials in Healthcare

Marianne Kolbasuk McGee  •  September 13, 2024

Authentication requiring stored credentials is not only vulnerable to phishing and other compromises, but using these credentials can also be cumbersome for busy clinicians, said Tina Srivastava, co-founder of Badge, a provider of deviceless, tokenless authentication technology.

Critical Infrastructure Security

GPS Modernization Stalls as Pentagon Faces Chip Shortages

Chris Riotta  •  September 12, 2024

The Space Force is suffering from years of delays, setbacks and shortcomings in its Global Positioning System modernization program, according to a Government Accountability Office report, which found major deficiencies and testing issues that could hinder the United States competitiveness in space.

Fraud Management & Cybercrime

Why Aren't More Rural Hospitals Accepting Free Cyber Help?

Marianne Kolbasuk McGee  •  September 12, 2024

Rural and small hospitals and other healthcare providers often complain that a lack of resources is a major factor stunting their cybersecurity maturity. But even when offered free or discounted cyber assistance, many of these organizations aren't signing up.

Cybercrime

Android Trojans Still Pose a Threat, Researchers Warn

Mathew J. Schwartz  •  September 12, 2024

Android malware first seen in the wild in late 2023 has been targeting users' bank and online payment accounts, bolstered by its ability to steal one-time access codes sent via SMS. The banking Trojan, which security researchers call Ajina, appears to be a joint endeavor with affiliates.

Critical Infrastructure Security

UK Labels Data Centers as Critical National Infrastructure

Akshaya Asokan  •  September 12, 2024

The U.K. government on Thursday designated data centers as part of its critical national infrastructure in a move intended to prevent the loss of sensitive user data during disruptive cyberattacks. A newly announced data center security team will monitor and anticipate potential cyberthreats.