Author: vCSO
-
What Cybersecurity Chiefs Need From Their CEOs
ALPHV/BlackCat received over $22 million in Bitcoin as a ransomware payment after attacking Change Healthcare. The healthcare IT provider’s systems were disrupted, impacting thousands of pharmacies. The gang may have stolen the funds from their affiliate. The affiliates claim to still possess 4TB of sensitive data and have issued a warning about dealing with ALPHV.
-
Change Healthcare attack latest: ALPHV bags $22M in Bitcoin amid affiliate drama
ALPHV/BlackCat received over $22 million in Bitcoin as a ransomware payment after attacking Change Healthcare. The healthcare IT provider’s systems were disrupted, impacting thousands of pharmacies. The gang may have stolen the funds from their affiliate. The affiliates claim to still possess 4TB of sensitive data and have issued a warning about dealing with ALPHV.
-
Who should own the Cyber security Policy
The Information Security policy should be overseen by the highest-level executive to ensure organization-wide enforcement. Specific policies, such as Acceptable Use and Network security, should be owned by relevant department executives. The policy owner often doubles as the risk owner, ensuring accountability at every level.
-
Ransomware Groups Are Bouncing Back Faster From Law Enforcement Busts
The US Department of Justice recently announced success in targeting the BlackCat ransomware group, releasing decryption keys to thwart their attacks. However, the group has since targeted Change Healthcare, causing significant disruptions in hospitals and pharmacies across the US. This incident highlights the ongoing challenge of combating ransomware attacks and the need for better identity…
-
Travelers to Acquire Cyberinsurance Firm Corvus for $435 Million
Travelers announced its acquisition of Corvus Insurance Holdings for $435 million, aiming to enhance its cyberinsurance capabilities. Founded in 2017, Corvus utilizes AI for data analysis and loss prediction. The move aligns with Travelers’ innovation agenda, leveraging Corvus’ advanced cyber capabilities. The transaction, expected to close in Q1 2024, will be funded internally. This strategic…
-
Here Come the AI Worms
Security researchers have developed a generative AI worm capable of spreading between AI systems, potentially stealing data and sending spam. This poses a new cybersecurity threat as AI systems become more autonomous. The worm, created as a form of demonstration, exploits vulnerabilities in generative AI email assistants, highlighting the need for improved security measures in…
-
Microsoft Zero-Day Used by Lazarus in Rootkit Attack
The Lazarus Group, a North Korean state-backed actor, utilized a zero-day exploit in Microsoft’s AppLocker to execute a rootkit cyberattack. The flaw was fixed on February 13 following its discovery by Avast researchers, who noted the increased sophistication of Lazarus’ techniques. This incident underscores the importance of effective vulnerability management and the need for timely…
-
White House Issues Executive Order on International Data Protection
The U.S. government issued a warning about the resurgence of BlackCat ransomware attacks in the healthcare sector, following a law enforcement operation’s failure to dismantle the group. The ransomware has targeted critical infrastructure organizations, leading to the announcement of rewards for information on the group’s members. Cybercrime groups continue to compromise organizations using sophisticated tactics…
-
FBI Warns U.S. Healthcare Sector of Targeted BlackCat Ransomware Attacks
The U.S. government issued a warning about the resurgence of BlackCat ransomware attacks in the healthcare sector, following a law enforcement operation’s failure to dismantle the group. The ransomware has targeted critical infrastructure organizations, leading to the announcement of rewards for information on the group’s members. Cybercrime groups continue to compromise organizations using sophisticated tactics…
-
NIST Releases Version 2.0 of Landmark Cybersecurity Framework
The NIST has launched Cybersecurity Framework version 2.0, expanding its scope to cover all industry sectors and organization types, including governance controls. This update aims to cater to businesses of all sizes, from small enterprises to large agencies, regardless of their cybersecurity maturity. This comprehensive release marks a significant enhancement from version 1.2.
You must be logged in to post a comment.