Patch Alert Issued for Veeam Backup & Replication Software

Mathew J. Schwartz • September 9, 2024

Security experts are urging all Veeam Backup & Replication users to immediately update their software to patch a flaw that attackers can remotely exploit to take full control of a system. Experts say ransomware groups likely will target the critical-severity vulnerability for double extortion.

CrowdStrike Outage Updates

Verkada Agrees to $2.95M Civil Penalty With US FTC

Latest

Artificial Intelligence & Machine Learning

US Prepares to Gather AI Foundational Model Developer Info

Rashmi Ramesh • September 9, 2024

The U.S. federal government is preparing to collect reports from foundational artificial intelligence model developers, including details about their cybersecurity defenses and red-teaming efforts. The Department of Commerce said it wants thoughts on how data should be safety collected and stored.

Governance & Risk Management

Progress Software Fixes Critical LoadMaster Vulnerability

Prajeet Nair • September 9, 2024

Progress Software released an urgent patch Thursday to fix a critical vulnerability that hackers could exploit to launch remote attacks. The company is no stranger to urgent patching. It was at the center of a Memorial Day 2023 mass hacking incident.

Network Detection & Response

Darktrace CEO Swap: Gustafsson Steps Down; Popelka Steps Up

Michael Novinson • September 9, 2024

Darktrace has promoted COO Jill Popelka to CEO, replacing long-time leader Poppy Gustafsson. As the cybersecurity AI vendor prepares to finalize its sale to Thoma Bravo, Popelka will steer Darktrace into its next phase of growth. Gustafsson will join the board as a non-executive director.

Blockchain & Cryptocurrency

FBI Report Says Cryptocurrency Scams Surged in 2023

Chris Riotta • September 9, 2024

The FBI's Internet Crime Complaint Center on Monday issued a report revealing victims filed more than 69,000 public complaints related to cryptocurrency fraud and $5.6 billion in financial losses in 2023, while investment scams made up the bulk of losses throughout the year.

Cyberwarfare / Nation-State Attacks

Hackers Target Taiwan UAV, Military Industries

Prajeet Nair • September 9, 2024

A Chinese-speaking hacking group is targeting drone manufacturers in Taiwan and other military-related industries on the island country located roughly 100 miles from mainland China. Trend Micro on Friday said it tracks the threat actor as "Tidrone."

Breach Notification

Acadian Ambulance Notifying Nearly 3 Million of Data Theft

Marianne Kolbasuk McGee • September 9, 2024

A Louisiana-based ambulance company that provides emergency medical care services in four states is notifying nearly 3 million people that their sensitive health information was potentially stolen in a June hack. Ransomware gang Daixin claims to have published the data on its dark web leak site.

Cyberwarfare / Nation-State Attacks

German Cyber Agency Investigating APT28 Phishing Campaign

Akshaya Asokan • September 9, 2024

The German cyber agency is reportedly investigating a phishing campaign tied to Russian state hacking group APT28 that used a bogus website mimicking an influential think tank. The campaign, which ran for months, used variations of the institute's legitimate IfW-Kiel web domain to lure victims.

Healthcare

Texas AG Hopes to Upend HIPAA Rules to Investigate Abortions

Marianne Kolbasuk McGee • September 6, 2024

Texas Attorney General Ken Paxton is suing the Biden administration, alleging that "unlawful" HIPAA Privacy Rule regulations are hindering the state's law enforcement investigations into abortion cases and other reproductive health care cases.

Governance & Risk Management

Absolute Purchases Syxsense to Tackle Cyber Vulnerabilities

Michael Novinson • September 6, 2024

Absolute Security has strengthened its platform with the acquisition of Syxsense, adding powerful automated vulnerability management tools to its existing endpoint security capabilities. The move aims to improve security compliance and simplify complex remediation tasks for organizations.

Cybercrime

Feds Warn Health Sector to Patch Apache Tomcat Flaws

Marianne Kolbasuk McGee • September 6, 2024

Federal authorities are alerting healthcare entities of vulnerabilities - including older flaws - that put Apache Tomcat at risk for attacks if left unmitigated. The open-source web server is heavily used in healthcare for hosting electronic health record and other systems and applications.

Cybercrime

Critical GeoServer Flaw Enabling Global Hack Campaigns

Prajeet Nair • September 6, 2024

Cybercriminals are using a critical remote code execution vulnerability in an open-source geospatial data platform to spread malware globally across several industries. GeoServer Project maintainers released a patch on July 1. The vulnerability has a CVSS score of 9.8 out of 10.

Government

White House Launches Cyber, Tech and AI Hiring Sprint

Chris Riotta • September 6, 2024

The White House announced a hiring sprint to fill cyber, technology and artificial intelligence jobs across federal agencies, dubbed Service for America, which aims to attract diverse candidates for critical open positions in the public sector - along with new incentives.