Fake ransom note left by WhisperGate wiper malware (Source: CrowdStrike)

Teardown: Fake Ransomware Targeting Ukrainian Government

Mathew J. Schwartz • January 20, 2022

More information continues to emerge about the destructive malware attack that targeted Ukrainian government systems last week. As a probe continues, numerous questions about the incident remain unanswered. But the three-stage wiper attack, disguised as ransomware, apparently hit few systems.

3rd Party Risk Management

Ukrainian Websites Defaced as Tensions With Russia Continue

Latest

Endpoint Security

Israeli Officials Deny Claims of Improper Spyware Use

Dan Gunderman • January 20, 2022

New developments have emerged in the case of the Israel Police allegedly using the flagship spyware of NSO Group, Pegasus, on its own citizens, with reported targets including critics of former Prime Minister Benjamin Netanyahu, among others. Following a bombshell local report, high-ranking Israeli officials have...

3rd Party Risk Management

UK Issues Fresh Proposals to Tackle Cyberthreats

Prajeet Nair • January 20, 2022

The U.K. government is considering new measures to boost cybersecurity standards in the country. The proposed laws recommend levying large fines on essential digital service providers for noncompliance with strict cybersecurity rules, and improving incident reporting.

3rd Party Risk Management

HHS HC3: Healthcare Sector Remains at Risk for Log4j Attacks

Marianne Kolbasuk McGee • January 20, 2022

Although there have been no major compromises in the healthcare and public health sector to date involving Apache Log4j flaws, the sector remains highly vulnerable, federal regulators warn.

Cloud Security

Biden Memo Orders Cybersecurity Improvements

Dan Gunderman • January 20, 2022

U.S. President Joe Biden today signed a National Security Memorandum that aims to improve the cybersecurity of national security systems. The memo gives new powers to the NSA to oversee cybersecurity improvements such as the use of the multifactor authentication, encryption and endpoint detection services.

3rd Party Risk Management

How Medical Device 'Ingredient Labels' Could Bolster Security

Marianne Kolbasuk McGee • January 20, 2022

Among the simplest things that vendors can do to help improve the cybersecurity of their products is providing better transparency, especially regarding the third-party components contained in their technology, says Rob Suárez, CISO of medical device maker Becton Dickinson.

3rd Party Risk Management

2 Key Cybersecurity Lawmakers Will Not Seek Reelection

Dan Gunderman • January 19, 2022

In a span of just days, two prominent congressmen who have long advanced cybersecurity at the federal level announced that they will not be seeking reelection in 2022. Reps. Jim Langevin, D-R.I., and John Katko, R-N.Y., will, however, pursue a cyber agenda throughout the remainder of their terms.

Application Security

Log4Shell Update: VMware Horizon Targeted

Prajeet Nair • January 19, 2022

Attackers have been actively targeting Log4j vulnerabilities, or Log4Shell, vulnerabilities in the servers of virtualization solution VMware Horizon to establish persistent access via web shells, according to an alert by the U.K. National Health Service.

Application Security

OpenSubtitles Data Breach Affected 6.7 Million Users

Mihir Bagwe • January 19, 2022

OpenSubtitles, a website providing free movie subtitles, confirmed to its users today that it had been hacked last August and the hacker had demanded a ransom to remain silent about the attack and to delete the leaked data. This data breach affected 6,783,158 users.

Critical Infrastructure Security

European Authorities Seize VPN Service Tied to Ransomware

Devon Warren-Kachelein • January 19, 2022

VPN Lab, known for its alleged wide use by ransomware threat actors, has been shut down. Fifteen servers associated with VPNLab.net were seized or disrupted based on multiple international investigations tying the VPN service provider to cybercrime operations, according to Europol.

Business Continuity Management / Disaster Recovery

JPMorgan Chase Invests $12 Billion in Security Updates

Devon Warren-Kachelein • January 19, 2022

JPMorgan Chase will earmark $12 billion for technological updates - including cloud migration, upgrading legacy architecture, data strategy, and emerging technologies. About half of this budget will go toward security modernization, while the other half will be invested into digital innovation.

Cybercrime

Indian Fashion Retailer Data Leaked on Darknet Marketplace

Soumik Ghosh • January 19, 2022

Ransomware group ShinyHunters has published 700 GB of data stolen from Indian firm Aditya Birla Fashion and Retail on a dark web forum, says Troy Hunt of Have I Been Pwned. A source at the retailer, however, says that its threat intrusion and detection solutions have not shown signs of an attack.

3rd Party Risk Management

Why SBOMs in the Healthcare IT Supply Chain Are Critical

Marianne Kolbasuk McGee • January 19, 2022

Because healthcare IT environments are so complicated, it will become essential for all suppliers to provide and maintain a software bill of materials for their products to remain relevant, says Curt Miller of the Healthcare Supply Chain Association.