December 12, 2024 at 07:21AM An international law enforcement operation, Operation PowerOff, successfully dismantled 27 DDoS-for-hire websites and arrested three suspects in France and Germany. Coordinated by Europol, the operation identified over 300 users and aimed to curb disruptive DDoS attacks, especially during the holiday season, which cause significant financial and operational harm. ### Meeting … Read more
December 9, 2024 at 07:07AM Deloitte responded to claims by the ransomware group Brain Cipher, which alleges it stole over one terabyte of data. Deloitte stated the issue pertains to a single client’s external system, with no impacts on its network. The group has targeted various sectors and threatened to release stolen data unless paid. … Read more
November 18, 2024 at 10:33AM Cyber Threat Intelligence (CTI) is vital for cybersecurity, emphasizing the importance of actionable, reliable, and timely information. Indicators of Compromise (IOCs) are crucial but often generic and ineffective. Custom IOCs enhance threat detection, adapt to specific risks, improve supply chain security, and support compliance, making them essential for organizational defense. … Read more
November 6, 2024 at 07:04AM Unauthorized activity on the Washington courts network caused a cyberattack, resulting in the unavailability of websites and other services. This incident prompted concerns about cybersecurity within the state’s judicial systems. **Meeting Takeaways:** 1. **Incident Overview**: There was unauthorized activity detected on the Washington courts network. 2. **Impact**: This unauthorized activity … Read more
October 17, 2024 at 02:22PM Eric Council, a 25-year-old from Alabama, was arrested for allegedly hacking the SEC’s X account using a SIM-swap attack, resulting in a fake announcement about Bitcoin ETF approvals. The scheme caused Bitcoin’s price to fluctuate dramatically. Council faces charges of conspiracy and identity theft, with a potential five-year prison sentence. … Read more
September 16, 2024 at 01:03PM Submit a clever cybersecurity-related caption by Oct. 16, 2024, to [email protected] with the subject “Dark Reading September Toon” or via X, Facebook, and LinkedIn. Congrats to last month’s winner, Renen Wasserman. Notable entries included “Blindfolded and Breached: The Modern Cybersecurity Nightmare” and “This 5th level of multi-authentication may be taking … Read more
August 14, 2024 at 03:09PM Guardz, the AI-powered cybersecurity company, has announced the launch of its new free Community Shield plan for MSPs. The plan provides a unified platform for detection and response across identities, emails, devices, and data, with no financial commitment. It aims to support MSPs’ growth and cybersecurity, offering advanced automation, AI, … Read more
June 11, 2024 at 10:11AM Government agencies are increasingly seeking to hold corporate CEOs personally liable for inadequate cybersecurity investment. The focus has shifted from security leaders to the CEOs, as executives are now being held accountable for cyber harm and the allocation of resources. This trend towards regulation by enforcement is driven by the … Read more
May 6, 2024 at 05:18PM The DNS Abuse Institute has transformed into the NetBeacon Institute, focusing on combating online technical abuse. It offers free innovative solutions, education, and collaboration opportunities to domain industry stakeholders. The flagship programs, NetBeacon MAP and NetBeacon Reporter, have been expanded to better measure and report on DNS Abuse. The Institute … Read more
March 20, 2024 at 11:27AM Law enforcement action against ransomware groups has not eradicated them, but it has disrupted the cyber underground and created distrust among criminals. Based on the meeting notes, the key takeaway is that while law enforcement action has not completely eradicated ransomware groups, it has disrupted the cyber underground and fostered … Read more