Latest

Anti-Money Laundering (AML)

80 Indicted for Scams, Including Business Email Compromises

Scott Ferguson  •  August 23, 2019

Eighty suspects, most of them Nigerian nationals, have been indicted on charges of running global business email compromise and romance scams that led to millions of dollars in fraud and allegedly involved a complex money-laundering operation.

Cloud Access Security Brokers (CASB)

VMware Acquiring Carbon Black to Boost Security Portfolio

Apurva Venkat  •  August 23, 2019

VMware is acquiring cloud security firm Carbon Black in a $2.1 billion cash deal to bolster the virtualization giant's security portfolio. It's also acquiring Pivotal, a company that focuses on helping its customers build applications in the cloud as well as through new technologies such as containers.

3rd Party Risk Management

Analysis: The Texas Ransomware Mess

Nick Holland  •  August 23, 2019

The latest edition of the ISMG Security Report analyzes the ransomware attack on Texas municipalities as part of a broader trend. Also featured: An initiative designed to safeguard the 2020 presidential elections and a CIO's third-party risk management efforts.

Cybercrime

For Sale on Cybercrime Markets: Real 'Digital Fingerprints'

Mathew J. Schwartz  •  August 22, 2019

Cybercrime marketplaces Genesis and Richlogs are helping fraudsters to better impersonate legitimate users of banks, eBay, Amazon, Netflix and more by providing them with victims' legitimate "digital fingerprints" and replay tools designed to fool anti-fraud defenses.

ATM Fraud

'Silence' Gang Ramps Up Bank Assaults

Jeffrey Burt  •  August 22, 2019

"Silence," a Russian-speaking criminal group that has stolen $4.2 million from ATMs and financial institutions since 2016, has become more active this year, using new tools and tactics in its attacks and expanding its reach globally, according to the security firm Group-IB.

Application Security

Shifting to the Cloud to Protect Applications

Marianne Kolbasuk McGee  •  August 22, 2019

Hunterdon Healthcare in New Jersey is shifting applications to cloud providers in order to tap into security capabilities and innovation that doesn't run as deep in the integrated healthcare delivery system's own technology team, says Jason Tahaney, the organization's director of IT.

Anti-Phishing, DMARC

Why Did Federal Agencies See Fewer Breaches in 2018?

Apurva Venkat  •  August 21, 2019

Federal government agencies experienced 12 percent fewer cyber incidents in 2018, when there were no "major" data breaches, according to a new White House report. But the report notes there's still plenty of risk mitigation work to be done.

Account Takeover

Fake VPN Website Delivers Banking Trojan

Akshaya Asokan  •  August 21, 2019

Researchers at the security firm Doctor Web have uncovered a fake website for a VPN provider that's designed to spread a Trojan that can steal credentials to bank accounts.

Business Continuity Management / Disaster Recovery

Texas Says 22 Local Government Agencies Hit by Ransomware

Mathew J. Schwartz  •  August 21, 2019

Ransomware-wielding attackers continue to target not just big businesses and large government agencies, but increasingly their smaller counterparts too. In Texas, officials say a campaign tied to a "single threat actor" infected 22 local government agencies on Friday.

Governance

Is Apple's Top $1 Million Bug Bounty Too Much?

Jeremy Kirk  •  August 21, 2019

Progressive companies seeking to improve their security are increasingly adopting bug bounty programs. The theory is that rewarding outside researchers improves security outcomes. But in practice, bug bounty programs can be messy and actually create perverse incentives, says bug-hunting expert Katie Moussouris.

Biometrics

Use of Facial Recognition Stirs Controversy

Apurva Venkat  •  August 20, 2019

A developer's use of facial recognition technology to scan the faces of pedestrians in London has sparked concerns from residents, the mayor and Britain's privacy watchdog. Meanwhile, the use of the technology is raising privacy concerns worldwide and is even becoming an issue in the U.S. presidential race.

Cyberwarfare / Nation-State Attacks

Facebook and Twitter Scuttle Hong Kong Disinformation

Mathew J. Schwartz  •  August 20, 2019

Facebook and Twitter have suspended a number of accounts and pages that they have tied to information operations being run by the Chinese government. Disinformation has targeted pro-democracy demonstrators in Hong Kong - likening them to cockroaches - while dismissing anti-Beijing sentiment as "fake news."