Latest

Account Takeover

5 Billion Unique Credentials Circulating on Darknet

Ishita Chigilli Palli  •  July 10, 2020

Five billion unique user credentials are circulating on darknet forums, with cybercriminals offering to sell access to bank accounts as well as domain administrator access to corporate networks, according to the security firm Digital Shadows.

Cybercrime

Malware Found Pre-Installed on Low-Cost Android Smartphones

Prajeet Nair  •  July 10, 2020

For the second time this year, security researchers have found malware embedded in low-cost Android smartphones distributed through a U.S. government program, security firm Malwarebytes reports.

Cybercrime

Zoom-Themed Phishing Campaign Targets Office 365 Credentials

Prajeet Nair  •  July 10, 2020

A recently uncovered phishing campaign is using spoofed Zoom account alerts to steal Microsoft Office 365 credentials, according to a report from Abnormal Security. These attacks come as use of the platform soars due to work-from-home arrangements.

COVID-19

Analysis: Monitoring the Risks Posed by Remote Workers

Nick Holland  •  July 10, 2020

The latest edition of the ISMG Security Report analyzes the surge in the use of employee monitoring tools for the increasingly remote workforce. Also featured: Discussions about IoT security guidelines and CCPA compliance requirements.

Cybercrime

Cybercrime Research: For the Greater Good, or Marketing?

Mathew J. Schwartz  •  July 10, 2020

U.S. prosecutors this week unsealed an indictment against the alleged hacker "Fxmsp" after his identity was revealed in a cybersecurity firm's report. That sequence of events has raised questions about information sharing and highlighted law enforcement's reliance on private cybersecurity researchers.

Cybercrime

Fxmsp Probe: Feds Say Group-IB Report Forced Its Hand

Mathew J. Schwartz  •  July 9, 2020

Did a private cybersecurity firm's report into the "Fxmsp" hacking operation that deduced the identity of the group's alleged leader disrupt a U.S. law enforcement investigation?

Breach Notification

Health Data Breach Trends: A Mid-Year Assessment

Marianne Kolbasuk McGee  •  July 9, 2020

What major health data breach trends emerged in the first half of 2020? Here's a rundown of the latest statistics - plus an analysis by experts.

Cybercrime

Feds Indict 'Fxmsp' for Hacking Multiple Firms

Ishita Chigilli Palli  •  July 8, 2020

The U.S. Justice Department has charged Kazakhstan national Andrey Turchin with being the hacker known as "Fxmsp," as well as running a hacking collective known by the same name that's been tied to 300 attacks worldwide, including against anti-virus vendors.

►

COVID-19

DIACC: Building a Fully Digital Canada

Anna Delaney  •  July 8, 2020

Joni Brennan, president of the Digital ID & Authentication Council of Canada (DIACC), says identity management is a core component to building a solid foundation for a socioeconomic safety net, particularly during a pandemic. However, engagement and education are also vital components to establishing a strong...

Cybercrime

Russian BEC Gang Targets Hundreds of Multinational Companies

Akshaya Asokan  •  July 7, 2020

A newly uncovered Russia-based business email compromise gang has been targeting hundreds of large, multinational corporations in over 40 countries since 2019, according to the security firm Agari.

Business Continuity Management / Disaster Recovery

Ransomware + Exfiltration + Leaks = Data Breach

Mathew J. Schwartz  •  July 7, 2020

Ransomware-wielding attackers continue to pummel organizations. But labeling these as being just ransomware attacks often misses how much these incidents involve serious network intrusions, exfiltration of extensive amounts of data, data leaks and, as a result, reportable data breaches.

Cybercrime

Patching Urged as F5 BIG-IP Vulnerability Exploited

Ishita Chigilli Palli  •  July 6, 2020

Security researchers warn that the number of exploit attempts targeting a critical vulnerability in F5 Networks' BIG-IP networking products has steadily increased since the company first announced the flaw late last week. They urge users to immediately apply patches.