Latest

►

Endpoint Security

IoT in the Enterprise: The Next Big Thing

Tom Field  •  July 20, 2017

Millions of connected devices already have been potentially compromised - inside and outside of the enterprise. Phil Marshall of Tolaga Research is concerned about when and how attackers will take advantage of these in the next big IoT strike.

Fraud

Russian Citadel Malware Developer Gets 5-Year Sentence

Mathew J. Schwartz  •  July 20, 2017

Russian citizen Mark Vartanyan, aka "Kolypto," has been sentenced to serve five years in U.S. prison after he pleaded guilty to helping develop and distribute the notorious banking Trojan called Citadel.

Data Breach

Ricoh Australia Scrambles to Fix Document Leak

Jeremy Kirk  •  July 20, 2017

Ricoh's Australia office has notified banks, government agencies, universities and many large businesses about a curious data breach that, in some cases, exposed login credentials for its multifunction devices.

Endpoint Security

IoT Security Cameras Have a Major Security Flaw

Jeremy Kirk  •  July 19, 2017

An investigation into a single IP security camera has unfolded into yet another worrying finding in the land of the internet of things. Millions of IoT devices may have a remotely executable buffer overflow in an open-source code component, according to cybersecurity company Senrio.

Cybersecurity

State Department Official Who Backs Russian Cyber Engagement Leaving

Eric Chabrow  •  July 19, 2017

Christopher Painter, who has advocated for diplomatic engagement with cyber friends and foes alike, is leaving his post as coordinator of cyber issues at the State Department, a job he has held since early 2011.

Breach Preparedness

Report: Major Cloud Services Attack Could Cost $53 Billion

Jeremy Kirk  •  July 18, 2017

What trait does a global cyberattack and a hurricane share? Both could cost insurers - and victims - dearly. In a new report, Lloyd's of London estimates that a major cloud services attack could trigger $53 billion in losses and cleanup costs.

►

Encryption

Cybercrime Battle: Next Steps

Mathew J. Schwartz  •  July 18, 2017

Demands by politicians that people must be willing to surrender their privacy rights to help security services battle cybercrime are shorthand for governments having significantly underinvested in the required resources, says information security expert Brian Honan.

Anti-Malware

Shedding Light on the Darknet Marketplace

Eric Chabrow  •  July 18, 2017

A discussion on the latest happenings in the darknet marketplace leads the latest edition of the ISMG Security Report. Also, getting to the bottom of Russia's Democratic Party hack could be the ultimate goal of a lawsuit filed against the Donald Trump presidential campaign.

Healthcare Information Exchange (HIE)

Interview: ONC on Next Steps for Secure Data Exchange

Marianne Kolbasuk McGee  •  July 17, 2017

In an exclusive in-depth interview, Genevieve Morris of the Office of the National Coordinator for Health IT discusses the agency's plans for ramping up its efforts to advance the secure exchange of health data to improve care - and seeks feedback.

Breach Preparedness

Consumer Routers Report Concludes: It's a Market of Lemons

Jeremy Kirk  •  July 17, 2017

A new report into the state of consumer routers by Carnegie Mellon researchers is unsparing in its criticism: It's a market of lemons, and virtually all of the test models had security problems. What's the solution?

Breach Response

'Private Citizens' Sue Trump Campaign for Exposing Their PII

Eric Chabrow  •  July 17, 2017

The plaintiffs who are suing Donald Trump's presidential campaign for conspiring with Russia and WikiLeaks over disclosing their private information stolen from Democratic Party computers could declare a moral victory even if they lose their case. Could exposing the truth be their ultimate goal?

Fraud

Feds Charge 412 in $1.3 Billion Healthcare Fraud Bust

Marianne Kolbasuk McGee  •  July 14, 2017

Federal authorities have charged 412 individuals allegedly responsible for $1.3 billion in billing fraud in a takedown that officials are calling the largest healthcare fraud enforcement action to date.