October 17, 2024 at 12:08PM CISA and the FBI are seeking public feedback on new guidance addressing poor software security practices. The initiative aims to enhance security measures and raise awareness of risky behaviors in software development. **Meeting Takeaways:** 1. **Request for Public Comment**: CISA (Cybersecurity and Infrastructure Security Agency) and the FBI are soliciting … Read more
October 17, 2024 at 03:33AM The US Attorney’s Office indicted Sudanese nationals Ahmed Salah Yousif Omer and Alaa Salah Yusuuf Omer, alleged operators of the hacktivist group Anonymous Sudan. They face charges related to numerous DDoS attacks on US critical infrastructure. Authorities claim to have degraded the group’s capabilities and seized its attack tools. ### … Read more
October 11, 2024 at 01:32AM The FBI created a cryptocurrency, NexFundAI, to monitor and apprehend suspected fraudsters, resulting in arrests in three countries. The initiative targeted alleged “wash trading” schemes aimed at misleading investors. Charges were filed against several individuals and organizations, including Saitama, for manipulating crypto markets and making false statements. ### Meeting Takeaways: … Read more
October 7, 2024 at 05:17PM Mark Sokolovsky has pleaded guilty to his involvement in the Raccoon Stealer malware cybercrime. He distributed the malware under a MaaS model, allowing users to rent it for weekly or monthly fees. Sokolovsky was arrested in the Netherlands in March 2022, and the FBI dismantled the malware’s infrastructure in a … Read more
September 30, 2024 at 04:48PM The US Justice Department has charged three members of Iran’s Islamic Revolutionary Guard Corps with running a cyber campaign to impact the upcoming US presidential election. They are accused of conducting hacks against political campaigns, officials, and media members. The attackers used spear-phishing techniques targeting senior government officials and journalists, … Read more
September 24, 2024 at 03:57PM Arkansas City, Kansas, faced a cyberattack on its water treatment facility, prompting manual operations while authorities investigate. City officials reassured residents that the water supply remains secure and operational. The incident coincided with a warning about Russian-linked threat actors targeting the U.S. water sector, reflecting ongoing cybersecurity challenges in the … Read more
September 19, 2024 at 12:07PM The Justice Department recently conducted a court-authorized operation to disrupt a botnet, Raptor Train, affecting 200,000 devices in the US and abroad. Operated by People’s Republic of China state-sponsored hackers, the botnet targeted a variety of devices. The takedown was a joint effort involving various entities. Users concerned about compromised … Read more
September 18, 2024 at 12:05PM The FBI and cybersecurity researchers have disrupted the massive Chinese botnet “Raptor Train,” which targeted critical infrastructure in the US and other countries, including entities in the military, government, education, and IT sectors. The botnet, employing multi-tier architecture, infected over 260,000 networking devices, primarily routers, modems, NVRs, DVRs, IP cameras, … Read more
September 17, 2024 at 12:46PM CISA and the FBI advised technology manufacturers to review software for cross-site scripting vulnerabilities before shipping and implement secure-by-design practices to eliminate such flaws entirely. They recommended input validation, output encoding functions, code reviews, and adversarial testing to prevent XSS vulnerabilities in future software releases. This warning is part of … Read more
September 16, 2024 at 09:45AM Hackers are falsely claiming to have compromised US election infrastructure, but the FBI and CISA refute these assertions, stating that no evidence of cyberattacks preventing elections, altering voter information, tampering with ballots, or disrupting vote counts exists. They caution the public to critically assess claims of leaked voter data, as … Read more