Black Hat Europe: Chaos Puts Cybersecurity in the Hot Seat

Mathew J. Schwartz • December 11, 2024

With everything in the world lately seeming to reach end states faster - sometimes referred to as the "super cycle" or accelerationism - cybersecurity professionals must help their organizations "organize to operate," said Black Hat Europe conference founder Jeff Moss at this year's annual event.

Cybercrime

Police Shutter Largest German-Speaking Criminal Marketplace

Latest

Artificial Intelligence & Machine Learning

AI Meets Fraud Prevention in LexisNexis-IDVerse Acquisition

Michael Novinson • December 11, 2024

To counter AI-driven fraud, LexisNexis acquired IDVerse, a London-based startup focused on document authentication and regulatory compliance. This acquisition aims to seamlessly integrate advanced tools into LexisNexis' fraud and identity platforms, enhancing global operations.

Governance & Risk Management

Ransomware Hackers Exploiting Cleo Software Zero-Day

Prajeet Nair • December 11, 2024

File transfer software made by Cleo Communications is under active attack and a patch meant to stymie hackers doesn't fix the flaw, say security researchers from Huntress. Hackers exploit an arbitrary file-write vulnerability along with a feature that automatically executes files.

Breach Notification

Clearinghouse Pays $250K Settlement in Web Exposure Breach

Marianne Kolbasuk McGee • December 11, 2024

A breach that exposed the personal information of nearly 1.6 million patients of a Puerto Rico-based clearinghouse has led to a $250,000 financial settlement with federal regulations for multiple HIPAA violations. The 2019 leak has cost Inmediata Health $2.7 million in fines and civil settlements.

Cybersecurity Spending

US Defense Bill Includes Major Focus on Tech, AI and Cyber

Chris Riotta • December 11, 2024

An $895 billion National Defense Authorization Act features key provisions for significant investments in artificial intelligence, cybersecurity and quantum technology, including initiatives aimed at enhancing the Pentagon’s technological capabilities.

Artificial Intelligence & Machine Learning

GovWare 2024: Trust and Security in the Digital Era

• December 11, 2024

Welcome to ISMG's GovWare 2024 Compendium. GovWare, Singapore's premier cybersecurity trade event held as part of Singapore International Cyber Week, brought together a community of cybersecurity professionals, including policymakers, tech innovators and information security leaders.

Cyberwarfare / Nation-State Attacks

Chinese APT Groups Target European IT Companies

Akshaya Asokan • December 11, 2024

A probable Chinese nation-state threat actor compromised Visual Studio Code and Microsoft Azure cloud infrastructure to target Western technology firms for espionage, security firms Tinexta Cyber and SentinelLabs said. The companies call the campaign "Operation Digital Eye."

Artificial Intelligence & Machine Learning

From Silos to Synergy: Gen AI Aligns IT and Security Teams

Rahul Neel Mani • December 11, 2024

Historically, IT and security teams have operated in silos, creating gaps in knowledge and response. Gen AI bridges this gap through natural language interfaces, enabling better communication and understanding between departments, said Druva CTO Stephen Manley.

Leadership & Executive Communication

Cybersecurity Gadgets to Hack Your Holiday Gift List

Brandy Harris • December 11, 2024

If you're a cybersecurity professional trying to come up with ideas for your holiday wish list (or maybe you’re a loved one trying to pick out the perfect gift), look no further! Here are some top picks that will thrill any cybersecurity practitioner.

Cloud Security

Financial Sector Turning to Multi-Cloud Strategies

Chris Riotta • December 10, 2024

Financial institutions are increasingly adopting multi-cloud strategies to mitigate rising cyber risks and comply with complex regulations, according to a new report. Although the move enhances flexibility and disaster recovery, challenges remain, from implementation costs to a growing skills gap.

Governance & Risk Management

Citrix Acquisitions Boost Zero Trust Defense for Hybrid Work

Michael Novinson • December 10, 2024

Citrix enhances its security for hybrid work by acquiring deviceTRUST and Strong Network. Purchasing these European startups boosts protection for VDI, DaaS and cloud development, empowering organizations to enforce zero trust principles and reduce risks across their hybrid environments.

Breach Notification

Hospital Notifies 316,000 of Breach in Christmas 2023 Hack

Marianne Kolbasuk McGee • December 10, 2024

A Massachusetts hospital is notifying 316,000 people that their information was compromised in a cyberattack discovered nearly a year ago during Christmas 2023. Cybercriminal group Money Message claimed that it stole 600 gigabytes data, posting patient and employee records on the darkweb.

Endpoint Security

OpenWrt Update Flaw Exposed Devices to Malicious Firmware

Anviksha More • December 10, 2024

A critical flaw in the updating service of a popular Linux operating system for embedded devices could enable hackers to compromise firmware with malicious images. OpenWrt developers patched the vulnerability, tracked as CVE-2024-54143, with a CVSS score of 9.3.