Latest Cybersecurity News and Articles

---

Harry Cocker, Jr. nominated for National Cyber Director

President Biden has nominated Harry Cocker, Jr. for National Cyber Director. From 2017 to 2019, Coker served as the Executive Director of the NSA.

---

Protect AI Raises $35M to Build a Suite of AI-Defending Tools

Protect AI announced that it raised $35 million in a Series A round led by Evolution Equity Partners with participation from Salesforce Ventures, Acrew Capital, boldstart ventures, Knollwood Capital and Pelion Ventures.

---

Russia Sends Cybersecurity CEO to Jail for 14 Years

The Russian government today handed down a treason conviction and 14-year prison sentence on Iyla Sachkov, the former founder and CEO of one of Russia's largest cybersecurity firms. Sachkov, 37, has been detained for nearly two years under charges that the Kremlin has kept classified and hidden from public view, and he joins a growing roster of former Russian cybercrime fighters who are now serving hard time for farcical treason convictions.

---

84% of financial institutions were exposed to a fourth-party breach

According to a recent report by SecurityScorecard, 78% of financial institutions experienced a third-party data breach in the past year.

---

To Execute the National Cyber Strategy, It’s Going to Take the Whole US Government

The implementation plan for the national cybersecurity strategy assigns specific tasks and responsibilities to various government agencies, highlighting the need for coordination and collaboration.

---

UK Ambulance Services Disrupted by Infosec Fiends

Several UK NHS ambulance organizations have been struggling to record patient data and pass it to other providers following a cyberattack aimed at health software company Ortivus.

---

FraudGPT: The Villain Avatar of ChatGPT

Cybercriminals are using artificial intelligence tools like FraudGPT to create sophisticated phishing attacks and other malicious activities, posing a significant threat to organizations.

---

Federal Privacy Bill Would Strip FCC's Role as Telecom Industry’s Privacy Cop

Sweeping federal privacy legislation now under debate in Congress is expected to move oversight of the telecom industry’s privacy practices from the FCC to the FTC, a shift that has long been a priority for telecom companies.

---

Chad LeMaire hired as Chief Security Officer at Echelon Risk + Cyber

Chad LeMaire has been hired as CSO at Echelon Risk + Cyber. LeMaire is a senior cybersecurity executive and CIO with more than 30 years of experience.

---

Supply Chain, Open Source Pose Major Challenge to AI Systems

Supply chain compromise, open source technology, and rapid advances in artificial intelligence capabilities pose significant challenges to safeguarding AI, experts told a Senate panel Tuesday.

---

New Realst Info-stealer Targets MacOS, Empties Crypto Wallets

In the ever-evolving information-stealer landscape, a new malware dubbed Realst has emerged. Realst is designed to target macOS systems and is capable of emptying crypto wallets and stealing stored passwords and browser data. Attackers are using tricks to lure gamers with money, which is a red flag against downloading these games.

---

90% of SOC analysts believe current threat detection tools are effective

The new 2023 State of Threat Detection Research Report provides insight into the “spiral of more” that prevents security operations center (SOC) teams from effectively securing their organizations from cyberattacks.

---

Super Admin Elevation Bug Puts 900,000 Mikrotik Devices at Risk

The critical flaw, tracked as CVE-2023-30799, allows remote attackers with an existing admin account to elevate their privileges to "super-admin" via the device's Winbox or HTTP interface.

---

UK Government Report Finds Cybersecurity Skills Gap Stagnant

The UK Government’s Cyber Security Skills in the UK Labour Market 2023 report shows a staggering 50% of all UK businesses have a basic cybersecurity skills gap, showing little improvement from the 2022 report.

---

New Realst macOS Malware Steals Your Cryptocurrency Wallets

A new Mac malware named "Realst" is being used in a massive campaign targeting Apple computers, with some of its latest variants including support for macOS 14 Sonoma, which is still in development.

---

New York State Cyber Lead Warns of What States Face in Critical Infrastructure Defense

Critical infrastructure providers are under more frequent and sophisticated cyberthreats as more nation-state adversaries work with criminal hackers to target the U.S., according to Colin Ahern, chief cyber officer for New York State.

---

Decoy Dog: New Breed of Malware Posing Serious Threats to Enterprise Networks

A deeper analysis of a recently discovered malware called Decoy Dog has revealed that it's a significant upgrade over the Pupy RAT, an open-source remote access trojan it's modeled on. "Decoy Dog has a full suite of powerful, previously unknown capabilities – including the ability to move victims to another controller, allowing them to maintain communication with compromised machines and remain

---

Decoy Dog Malware Evolves to Use New Command-and-Control and Persistence Methods

Initially discovered and disclosed in April 2023, Decoy Dog has proven to be more sophisticated than previously thought, using DNS for command-and-control (C2) and is suspected to be employed in ongoing nation-state cyberattacks.

---

Average cost of healthcare data breach reaches $11M, report finds

Healthcare continues to be the most expensive industry for data breaches, beating out other sectors for the 13th year in a row, according to research conducted by the Ponemon Institute and published by IBM Security.

---

Fenix Cybercrime Group Poses as Tax Authorities to Target Latin American Users

The goal of Fenix, according to the cybersecurity firm Metabase Q, is to act as an initial access broker and get a foothold into different companies in the region, and sell the access to ransomware affiliates for further monetization.