Cumulative count of data breach reports shared with Verizon (Image: Verizon DBIR 2023)

Verizon: When Ransomware Attacks Cost, They're Costing More

Mathew J. Schwartz • June 6, 2023

Criminals are continuing to wield stolen credentials, compromise attacks, ransomware and social engineering to earn an illicit payday, according to Verizon's latest annual analysis of data breaches and how they happened, which finds that post-ransomware cleanup costs are rising.

Fraud Management & Cybercrime

Gouda Hacker: Charges Tie to Ransomware Hit Affecting Cheese

Latest

Fraud Management & Cybercrime

Ukraine Warns Against Cyberespionage Campaign

Akshaya Asokan • June 6, 2023

Ukrainian cyber defenders say they've identified a cyberespionage campaign active since mid-2022 that gained unauthorized access to "several dozen" computers. A government spokesperson said Tuesday the campaign targets government agencies and media organizations.

Governance & Risk Management

FTC Files Amended Lawsuit Against Data Broker Kochava

Marianne Kolbasuk McGee • June 6, 2023

The Federal Trade Commission has filed an amended complaint against Kochava, as allowed by a federal judge who last month dismissed the agency's first shot at a lawsuit seeking to permanently stop the data analytics firm from selling geolocation data collected from mobile devices.

Fraud Management & Cybercrime

Highlights of Verizon Data Breach Investigations Report 2023

Anna Delaney • June 6, 2023

Pretexting incidents, a social engineering technique that manipulates victims into divulging information, have nearly doubled, representing 50% of all social engineering attacks, according to Verizon's 2023 Data Breach Investigations Report, which analyzed more than 16,312 security incidents.

Application Security

Cisco Doubles Down on Generative AI, SSE, Cloud App Security

Michael Novinson • June 6, 2023

Cisco took its first major step toward realizing its secure cloud vision in April with the debut of a new extended detection and response platform. The next set of enhancements around generative AI, secure access and defending applications across multiple clouds debuted Tuesday at Cisco Live 2023.

Governance & Risk Management

Microsoft Pays $20M to Settle FTC COPPA Complaint

David Perera • June 5, 2023

Microsoft will pay $20 million to settle a U.S. federal investigation into whether the computing giant violated children's privacy protections during the Xbox Live registration process. The Federal Trade Commission accused the company of a slew of infractions.

Governance & Risk Management

Psychiatry Practice Fined for Posting PHI Online

Marianne Kolbasuk McGee • June 5, 2023

Federal regulators have once again smacked a healthcare provider with a HIPAA settlement involving patient protected health information that was disclosed in response to a negative online review. Manasa Health Center will pay $30,000 and implement a corrective action plan, HHS said.

3rd Party Risk Management

Iowa Reports Third Big Vendor Breach This Year

Marianne Kolbasuk McGee • June 5, 2023

The Iowa Department of Health and Human Services has reported to federal regulators its third major health data breach involving a vendor since April. This time, Iowa HHS/Medicaid says the data of nearly 234,000 individuals was compromised in a mega hack recently reported by MCNA Insurance Co.

Next-Generation Technologies & Secure Development

How to Implement Large-Scale Security Programs Economically

Shipra Malhotra • June 5, 2023

Flipkart embraced a comprehensive security maturity program that incorporated defense-in-depth, automation, zero trust and secure SDLC/security-by-design principles across its four subsidiaries. Flipkart's Raakesh Thayyil discussed the importance of a cohesive strategy.

Cyberwarfare / Nation-State Attacks

Why Cyber Defenders Need Partnerships, Tools and Education

Steve King • June 5, 2023

In this episode of "Cybersecurity Insights," Lonnie Price of Peraton discusses the importance of partnerships between the public and private sectors to help Ukrainians with the war effort. He also shares how we can become better educated and more efficient as cyber defenders.

Business Continuity Management / Disaster Recovery

Why Rubrik Is Looking to Break Cybersecurity's IPO Dry Spell

Michael Novinson • June 5, 2023

Despite the beating new publicly traded security companies have taken during the economic downturn, Rubrik is looking to test its luck in the public market. Reuters reported Monday the firm is working with Goldman Sachs, Barclays and Citigroup in preparation for an IPO that could take place in 2024.

General Data Protection Regulation (GDPR)

Microsoft Sets Aside $425M for Anticipated GDPR Fine

David Perera • June 3, 2023

Microsoft is warning investors it may receive a fine from European privacy regulators adding up to at least hundreds of millions of dollars over targeted advertising on its LinkedIn social network. European authorities have shown increased willingness to use the GDPR to limit targeted advertising.

Cybercrime

Chinese APT Backdoor Bypasses Indonesian Antivirus

Jayant Chakravarti • June 2, 2023

A Chinese espionage threat group is using a novel backdoor to bypass popular Indonesian antivirus tool Smadav. Targets include European embassies in Southeast and East Asia. Smadav treats processes with no windows as suspect. The APT gets around that by opening a window not visible to users.