Latest

Artificial Intelligence & Machine Learning

China Beating US in Critical Technology Research Investments

Chris Riotta  •  December 2, 2024

China has surged past the United States in critical technology research, according to a recent report published by the Australian Strategic Policy Institute, as experts warn the shift could have profound global implications, including risks to U.S. cybersecurity, innovation and global leadership.

Artificial Intelligence & Machine Learning

Feds Propose AI 'Guard Rails' for Medicare Advantage Plans

Marianne Kolbasuk McGee  •  December 2, 2024

The Centers for Medicare and Medicaid Services has issued proposed "guard rails" to help ensure that the use of artificial intelligence for Medicare Advantage insurance plans does not result in inequitable access to healthcare-related services. The proposed rule will go into effect in 2026.

Cybercrime

SmokeLoader Campaign Targets Taiwanese Companies

Prajeet Nair  •  December 2, 2024

A threat actor is targeting Taiwanese companies using phishing emails and long-standing vulnerabilities to deliver SmokeLoader malware. The threat actor uses plugins for the infamous malware to directly attack systems rather than using SmokeLoader as its name suggests, as a loader for other malware.

Fraud Management & Cybercrime

Cyber Incidents Hit 3 NHS Hospitals in U.K.

Marianne Kolbasuk McGee  •  December 2, 2024

At least three United Kingdom National Health Service hospitals are responding to recent cyber incidents, including a children's hospital and a heart and chest specialty hospital are both located in Liverpool and share IT systems. Inc Ransom claims to have stolen data from those two hospitals.

Fraud Management & Cybercrime

Russia Indicts Ransomware Hacker Wanted by the FBI

Akshaya Asokan  •  December 2, 2024

A prolific ransomware affiliate hacker and developer is facing criminal charges in Russia, Kremlin media reported Friday. Mikhail Pavlovich Matveev has been wanted by U.S. authorities since 2023 for his role in hacking activities as part of ransomware groups including LockBit, Hive and Babuk.

DevSecOps

Sonatype, Snyk, Black Duck Top Comp Analysis Forrester Wave

Michael Novinson  •  November 29, 2024

Sonatype, Snyk and Black Duck remained atop Forrester's software composition analysis rankings as commoditization of core features has led to increased competition. Pressure in the market has increased due to both a saturation of core functionalities and license identification.

Security and Exchange Commission compliance (SEC)

CyberEdBoard Profiles in Leadership: Patrick Benoit

Anna Delaney  •  November 29, 2024

Patrick Benoit, a seasoned security leader and CyberEdBoard member, advises security leaders to lead by example and not worry about showing any of their own vulnerabilities, not least when they make a mistake. "It's OK to fail or misstep … That's what makes you a stronger leader," he said.

ISMG Editors: Major Crypto Mixer Decision Redefines Rules

Anna Delaney  •  November 29, 2024

In the latest weekly update, ISMG editors discussed Tornado Cash's landmark legal victory and what it means for crypto mixers, the impact of artificial intelligence on data privacy, and advancements in cybersecurity for which the industry can be thankful as it heads into 2025.

Governance & Risk Management

Warning: Patch Advantech Industrial Wireless Access Points

Prajeet Nair  •  November 29, 2024

Researchers identified 20 critical vulnerabilities in a type of Advantech industrial-grade wireless access points that is widely deployed across critical infrastructure environments. Attackers could exploit the flaws to remotely executive code and create denials of service.

Governance & Risk Management

Overcoming Identity and Access Challenges in Healthcare

Marianne Kolbasuk McGee  •  November 29, 2024

Third-party access management poses significant cybersecurity risks in healthcare, but continuous identity management and monitoring can help mitigate those risks, said Jim Routh, chief trust officer at Saviynt.

Encryption & Key Management

The Growing Quantum Threat to Enterprise Data: What Next?

Cdr Rishi Das S. (Retd)  •  November 29, 2024

As quantum computing continues to evolve, cybersecurity professionals and enterprise leaders must grapple with a future where current encryption technologies - on which our entire digital infrastructure is built - may no longer be secure. What next steps must they take now?

Endpoint Security

Just Like Windows: Linux Targeted by First-Ever UEFI Bootkit - UPDATED

Prajeet Nair  •  November 28, 2024

Cybersecurity researchers have discovered the first-ever UEFI bootkit designed to target Linux systems and subvert their boot process for malicious purposes. The "Bootkitty" malware, first uploaded to VirusTotal this month, appears to be more "proof of concept" than full-fledged threat, they said.