Latest

Finance & Banking

Russian Money Laundering Services Busted in UK-Led Operation

Akshaya Asokan  •  December 4, 2024

An international investigation led by the United Kingdom busted Russian money cash-for-crypto laundering networks in an operation that's led to the arrest of 84 individuals and U.S. sanctions against others. One of the network allegedly laundered extortion money paid to the Ryuk ransomware group.

Artificial Intelligence & Machine Learning

Experts Warn DHS Surveillance Tech Lacks Privacy Protections

Chris Riotta  •  December 4, 2024

The U.S. Department of Homeland Security is reportedly expanding its use of emerging surveillance tools, including drones and artificial intelligence, without proper safeguards as experts warn of potential privacy violations and risks involving facial recognition and third-party data usage.

Governance & Risk Management

US FTC Cracks Down GeoLocation Data Brokers

Anviksha More  •  December 4, 2024

Two data brokers pledged to stop using geolocation data gleaned from smartphones to sell services that provide a window to the intimate lives of Americans. "Surreptitious surveillance by data brokers undermines our civil liberties," an U.S. Federal Trade Commission official said.

Cybercrime

Police Shutter Largest German-Speaking Criminal Marketplace

Akshaya Asokan  •  December 4, 2024

German police arrested the suspected administrator of the largest German-speaking underground markets for illegal goods and services. Crimenetwork, online since 2012, was used to sell stolen data, drugs and forged documents. The platform had more than 100,000 users and 100 sellers.

►

Geo Focus: Asia

CyberEdBoard Profiles in Leadership: Rahul Monie

Brian Pereira  •  December 4, 2024

With over 32 years of experience spanning hardware, enterprise resource software, product development and analytics, Rahul Monie, CISO partner at CTO Bridge Solutions, has been center stage for the IT evolution from basic hardware and software to complex data analytics and cybersecurity technology.

Endpoint Security

Bug Bounties: Bringing Hackers and Manufacturers Together

Athira Nair  •  December 4, 2024

Lennert Wouters, a researcher at KU Leuven University in Belgium, has spent the past eight years studying embedded security, analyzing the vulnerabilities of everyday devices and commercial products. He shares his greatest hacks and insights on hardware security industry trends.

►

Geo Focus: Asia

Insights APAC: Top Cybersecurity Developments in November

Jayant Chakravarti , Suparna Goswami  •  December 4, 2024

In this episode of Information Security Media Group's monthly series, "Insights APAC," ISMG editors discuss the top cybersecurity developments from November, including Australia's social media ban, Chinese data protection audits and the latest fine against Meta by India.

AI-Based Attacks

How Hackers Can Manipulate AI to Affect Health App Accuracy

Marianne Kolbasuk McGee  •  December 4, 2024

Hackers can potentially use AI to manipulate data that's generated and shared by some health apps, diminishing the data's accuracy and integrity, said Sina Yazdanmehr and Lucian Ciobotaru of cybersecurity firm Aplite, describing a recent research project involving Google Health Connect.

Government

Sixgen's Kyrus Acquisition Boosts National Cybersecurity

Michael Novinson  •  December 3, 2024

Sixgen will enhance its cybersecurity operations through the purchase of Washington D.C.-area Kyrus. The move introduces reverse engineering and analytics expertise to Sixgen's portfolio, aligning with its mission to protect critical infrastructure and bolster American cyber defense capabilities.

Cybercrime

'Horns&Hooves' Malware Campaign Hits Over 1,000 Victims

Prajeet Nair  •  December 3, 2024

A malware campaign targeting Russian retailers and service businesses aims to deploy remote access tools and install infostealer malware. Kaspersky dubbed the campaign "Horns&Hooves," after a fake organization set up by fraudsters in the 1931 Soviet satirical novel "The Little Golden Calf."

Governance & Risk Management

16 Zero-Days Uncovered in Fuji Electric Monitoring Software

Jayant Chakravarti  •  December 3, 2024

Security researchers have uncovered 16 zero-day vulnerabilities in Japanese equipment manufacturer Fuji Electric's Tellus and V-Server remote monitoring software that enable attackers to execute malicious code in devices commonly used by utilities and other critical infrastructure providers.

Governance & Risk Management

GoodRx Agrees to Pay $25M to Settle Web Tracker Lawsuit

Marianne Kolbasuk McGee  •  December 3, 2024

GoodRx has reached a $25 million preliminary settlement of proposed class action litigation alleging the telehealth company violated privacy and an assortment of other laws and statutes when it previously collected and shared consumers' information with third parties through online tracking tools.