SCMagazine.com reported that “A multinational operation involving law enforcement agencies from 11 countries has struck a decisive blow to the LockBit group, the world’s most prolific ransomware-as-a-service (RaaS) gang. A taskforce of 17 agencies including the FBI, the UK’s National Crime Agency (NCA), and Europol took control of key LockBit

Continue Reading LockBit, the most prolific RaaS (Ransomeware-as-a-Service), struck by 11 counties!

SCMagazine.com reported that Department of Justice Press Release (http://tinyurl.com/26zn8wbt) that “A January 2024 court-authorized operation has neutralized a network of hundreds of small office/home office (SOHO) routers that GRU Military Unit 26165, also known as APT 28, Sofacy Group, Forest Blizzard, Pawn Storm, Fancy Bear, and Sednit, used

Continue Reading Small Office/Home Office (SOHO) routers which have been part of a Russian large credential-harvesting has been dismantled by the FBI!

HealthcareInfoSecurity.com reported that “The Federal Trade Commission is the latest regulatory agency taking action against fundraising and customer relationship management software provider Blackbaud in the aftermath of a 2020 ransomware incident that compromised the data of tens of thousands of clients and millions of consumers.” The February 1, 2024 report

Continue Reading  FTC not happy about Blackbaud’s ‘Shoddy’ Practices in Ransomware hack!

SCMagazine.com reported that “The healthcare sector increasingly relies on interconnected information systems. This digital transformation opens new security gaps and makes the industry a prime target for cybercrime.” The January 26, 2024 report entitled ” Here’s how AI can enhance cybersecurity in healthcare” (http://tinyurl.com/5yft8s39) included these points on

Continue Reading Healthcare Cybersecurity can be enhanced with AI!

Darkreading.com reported that “Rated at a CVSS score of 10, the bug is as bad as it gets, allowing remote cyberattackers unfettered access to corporate environments… A max-critical unauthenticated remote code execution (RCE) vulnerability is impacting Atlassian Confluence Data Center and Confluence Server, in all versions released before Dec. 5.

Continue Reading Atlassian Bug needs Patch ASAP!

DarkReading.com reported that “Zero trust is a high-level strategy that assumes that individuals, devices, and services attempting to access company resources, both externally and internally, can’t automatically be trusted. The approach has become popular because it addresses the risk associated with the modern attack surface. However, tying together various data

Continue Reading Zero Trust in the Cloud take serious planning!

BankInfoSecurity.com reported that “Hospitality giant Indian Hotels said it’s probing the alleged theft of sensitive data from its systems after a criminal claimed to have stolen data pertaining to 1.5 million customers.”  The November 24, 2023 report entitled “Indian Hotels Probes Alleged Customer Data Breach” (https://www.bankinfosecurity.com/indian-hotels-probes-alleged-customer-data-breach-a-23687?rf=2023-11-27_ENEWS_SUB_BIS__Slot1_ART23687&mkt_tok=MDUxLVpYSS0yMzcAAAGPsIVP_eqUjGouubODdT5r8DjwgT471B0YThRmNSqyB3-BMZiLaRRjivUCRnVrgE9MW3fea7yzDHEnVwXkSk1EVtQI3VNYOxjM0oV63fddwmqKEtZOCw) included these

Continue Reading Anyone Surprised to Hear 1.5M Hotel Customers’ Data was Stolen!

BankInfoSecurity.com reported that “The notorious BlackCat ransomware group tattled to U.S. federal regulators about an alleged victim not disclosing a material cyberattack within four business days.”  The November 16, 2023 article entitled “BlackCat Gang Tattles to SEC About Victim Not Disclosing Breach” (https://www.bankinfosecurity.com/blackcat-gang-tattles-to-sec-about-victim-disclosing-breach-a-23611?rf=2023-11-17_ENEWS_SUB_BIS__Slot1_ART23611&mkt_tok=MDUxLVpYSS0yMzcAAAGPfO8qfBRKXpKKhl9uvOhaGZ8RHOMe7Jr3fnHnF8s0ca0pBaJ9np6bb_K1s597087s60t6mmROrPdxgHBfG2CY-QUlifWhx-Dt43tBOlbOiOM9ykvv1w) included these comments:

The ransomware

Continue Reading WOW! Ransomware Gang BlackCat Tattles to the SEC!

The Federal Trade Commission reported that it has “submitted two reports to Congress detailing the agency’s efforts to combat cross-border fraud through the U.S. SAFE WEB Act and work contributing to the fight against ransomware and other cyber attacks that originate outside the United States.”  The October 20, 2023 Press

Continue Reading  Can the FTC really combat Cross-Border Fraud and Ransomware?

DarkReading.com reported “Most security teams can benefit from integrating artificial intelligence (AI) and machine learning (ML) into their daily workflow. These teams are often understaffed and overwhelmed by false positives and noisy alerts, which can drown out the signal of genuine threats.” The September 28, 2023 article entitled “Looking Beyond

Continue Reading Maybe AI & ML are not really working in Cybersecurity!