US Indicts, Sanctions Alleged Chinese Sophos Firewall Hacker

David Perera • December 10, 2024

The U.S. federal government rolled out its heavy guns Tuesday against a Chinese hacker allegedly at the center of a zero-day exploit used to hack firewalls made by Sophos, unsealing an indictment, rolling out sanctions and offering $10 million for information leading to the suspect's arrest.

Black Hat

No Timeline for Evicting Chinese Hackers from US Networks

Latest

Artificial Intelligence & Machine Learning

From Silos to Synergy: Gen AI Aligns IT and Security Teams

Rahul Neel Mani • December 11, 2024

Historically, IT and security teams have operated in silos, creating gaps in knowledge and response. Gen AI bridges this gap through natural language interfaces, enabling better communication and understanding between departments, said Druva CTO Stephen Manley.

Cloud Security

Financial Sector Turning to Multi-Cloud Strategies

Chris Riotta • December 10, 2024

Financial institutions are increasingly adopting multi-cloud strategies to mitigate rising cyber risks and comply with complex regulations, according to a new report. Although the move enhances flexibility and disaster recovery, challenges remain, from implementation costs to a growing skills gap.

Governance & Risk Management

Citrix Acquisitions Boost Zero Trust Defense for Hybrid Work

Michael Novinson • December 10, 2024

Citrix enhances its security for hybrid work by acquiring deviceTRUST and Strong Network. Purchasing these European startups boosts protection for VDI, DaaS and cloud development, empowering organizations to enforce zero trust principles and reduce risks across their hybrid environments.

Breach Notification

Hospital Notifies 316,000 of Breach in Christmas 2023 Hack

Marianne Kolbasuk McGee • December 10, 2024

A Massachusetts hospital is notifying 316,000 people that their information was compromised in a cyberattack discovered nearly a year ago during Christmas 2023. Cybercriminal group Money Message claimed that it stole 600 gigabytes data, posting patient and employee records on the darkweb.

Endpoint Security

OpenWrt Update Flaw Exposed Devices to Malicious Firmware

Anviksha More • December 10, 2024

A critical flaw in the updating service of a popular Linux operating system for embedded devices could enable hackers to compromise firmware with malicious images. OpenWrt developers patched the vulnerability, tracked as CVE-2024-54143, with a CVSS score of 9.3.

Artificial Intelligence & Machine Learning

CyberEdBoard Profiles in Leadership: David Ortiz

Anna Delaney • December 10, 2024

David Ortiz was building websites over 20 years ago when he first become exposed to cybersecurity. Back then, his biggest worry was denial-of-service attacks. Today, as a CISO of a global company, emerging AI threats related to phishing and deepfakes are what keeps him up at night.

Artificial Intelligence & Machine Learning

Satya Nadella's Vision for Microsoft: AI, AI and AI

Yamini Kalra • December 10, 2024

Advanced AI took the center stage at Microsoft Ignite 2024. Reflecting on AI as the "most transformative technology of our time," CEO Satya Nadella set the tone for Microsoft's future where every facet of technology is integrated with AI in all key aspects - productivity, collaboration and security.

Identity & Access Management

Astrix's $45M Series B Targets Non-Human Identity Security

Michael Novinson • December 10, 2024

Astrix raises $45 million to advance AI agent security and expand its global presence. The company plans to double its workforce, focusing on anomaly detection and fingerprinting techniques for non-human identities along the correlating information about human and non-human identities.

Cybercrime

Moody's: Hackers Aim for Big Payouts, Supply Chain Attacks

David Perera • December 9, 2024

Improved cybersecurity will result in ransomware hackers targeting larger organizations to wring out high dollar extortion payments and intensified focus on supply chain attacks, predicts Moody's Ratings. The share of ransomware victims willing to meet criminal demands for money is at record lows.

Governance & Risk Management

Rhode Island Schools Deploy DNS Service to Tackle Ransomware

Chris Riotta • December 9, 2024

Rhode Island will become the first state in the nation to launch a statewide cybersecurity tool for K-12 schools, offering enhanced protection against ransomware threats with a new, no-cost, federally funded service that will shield 136,000 students across 64 school districts.

3rd Party Risk Management

FDA Urges Blood Suppliers to Beef Up Cyber

Marianne Kolbasuk McGee • December 9, 2024

The Food and Drug Administration is urging blood suppliers - a recent target of attacks - to bolster their cybersecurity practices to prevent and mitigate cyber incidents that could affect the supply and safety of critical blood and blood components used for transfusions and other patient care.

Artificial Intelligence & Machine Learning

Shaping the Future: How Gen AI Is Transforming 3D Design

Rahul Neel Mani • December 9, 2024

At AWS re:Invent 2024, Autodesk unveiled its innovative vision for generative AI in design. From Project Bernini's billion-parameter foundation model to sustainable workflows powered by AWS, the company is transforming 3D CAD design and shaping the future of creativity.