Content by Scott Ferguson

Prosecutors: Insider Trading Tips Sold on Darknet Sites

Scott Ferguson  •  July 12, 2021

A 30-year-old Greek national has been indicted on charges of selling insider trading tips and other proprietary financial data on darknet sites. Apostolos "The Bull" Trovias faces securities fraud and money laundering charges.

Biden's New Executive Order Looks to Address Data Privacy

Scott Ferguson  •  July 9, 2021

In a new executive order, President Biden asks the FTC to establish new rules governing how tech firms can collect and use data from their customers as a way to offer more privacy protections for U.S. consumers. The order also looks to push the Justice Department to step up its antitrust enforcement.

Government Cybersecurity Summit: A Preview

Scott Ferguson  •  July 9, 2021

Acting CISA Director Brandon Wales, Rep. Jim Langevin and many others will discuss the government's top priorities in addressing cybersecurity challenges at ISMG's Virtual Cybersecurity Summit: Government, to be held July 13 and 14.

Congress Considers Measures to Improve Telecom Security

Scott Ferguson  •  July 2, 2021

A House subcommittee is considering a slate of nine bills designed to improve cybersecurity practices in the telecommunications supply chains that support wireless networks.

US Tracking Brute-Force Attacks Linked to Russia

Scott Ferguson  •  July 1, 2021

The NSA, the FBI and other U.S. government agencies are tracking an ongoing Russian cyberespionage campaign in which attackers are using brute-force methods to access Office 365 and other cloud-based services.

White House Will Release Details on Exchange Attacks

Scott Ferguson  •  June 30, 2021

Deputy national security adviser Anne Neuberger says the White House is preparing to release additional details, including attribution, about the attacks that targeted vulnerable on-premises Microsoft Exchange email servers at government agencies and other organizations earlier this year.

Report Urges NASA to Improve Cybersecurity Risk Management

Scott Ferguson  •  June 29, 2021

A government watchdog is urging NASA to make multiple improvements to its cybersecurity and risk management policies to counter threats to the space agency's network, infrastructure and data. NASA, in turn, is working toward making some security improvements outlined by the GAO by the end of this year.

NIST Releases 'Critical Software' Definition for US Agencies

Scott Ferguson  •  June 28, 2021

NIST has published its definition of "critical software" for the U.S. federal government as the standards agency begins fulfilling requirements laid out in President Biden's executive order on cybersecurity. The software part of the executive order looks to reduce the threat of supply chain attacks.

Group Behind SolarWinds Attack Targeted Microsoft Customers

Scott Ferguson  •  June 26, 2021

The Russian-linked cyberespionage group behind the supply chain attack against SolarWinds targeted Microsoft's customer support system as part of a new campaign, the company disclosed in a report. The group, called Nobelium, has been linked to recent attacks against a marketing firm used by USAID.

US Secret Service Releases 'Most Wanted' Cyber Fugitive List

Scott Ferguson  •  June 25, 2021

The U.S. Secret Service has published a Most Wanted Fugitives list featuring 10 suspects wanted in connection with financial cybercrimes The agency is offering rewards of up to $1 million for information on two Ukrainian suspects who allegedly targeted the SEC in 2016.

High-Ranking FIN7 Gang Member Receives 7-Year Prison Term

Scott Ferguson  •  June 25, 2021

A high-ranking member of the FIN7 payment card theft group has been sentenced to seven years in federal prison. Andrii Kolpako worked as a "pen tester" for the organization, prosecutors say.

FBI Seeks Extra Funds to Fight Ransomware, Other Threats

Scott Ferguson  •  June 24, 2021

The FBI is requesting $40 million in additional funding for its fiscal 2022 budget to help combat and counter ransomware attacks and other cyberthreats. The bureau is also requesting $15 million to help strengthen its internal security infrastructure as well as address network vulnerabilities.

Lawsuits Allege Colonial Pipeline Had Inadequate Cybersecurity

Scott Ferguson  •  June 23, 2021

Colonial Pipeline Co. now faces at least two lawsuits seeking class action status in the aftermath of a ransomware attack in May that led the firm to shut down the operations of a 5,500-mile pipeline for nearly a week.

CISA Shifting Einstein Detection System Deeper Into Networks

Scott Ferguson  •  June 22, 2021

CISA is moving its Einstein intrusion detection system deeper into federal networks in an effort to better detect supply chain attacks after its failure to detect the espionage campaign that targeted SolarWinds and its customers, including federal agencies.

Lawmakers Unveil Cybersecurity Legislation

Scott Ferguson  •  June 21, 2021

Republican and Democratic lawmakers have recently introduced several cybersecurity-related bills seeking to address issues ranging from imposing tougher penalties for cybercriminals to improving protection of school districts.