DNC Credentials Compromised by ‘IntelFetch’ Telegram Bot

August 14, 2024 at 06:03AM The Democratic National Convention (DNC) in Chicago faces a security threat as IntelFetch, a Telegram-based bot service, aggregates compromised credentials from DNC and Democratic Party websites. ZeroFox researchers verified stolen data, posing a risk of unauthorized access to sensitive systems. The DNC, along with attendees, is seen as potential targets … Read more

South Korea says DPRK hackers stole spy plane technical data

August 12, 2024 at 04:27PM South Korea’s ruling party PPP warns of North Korean hackers stealing crucial data on K2 tanks and spy planes, fearing it will aid military surveillance evasion. The theft includes design blueprints, technical data, and maintenance information. PPP urges immediate cybersecurity measures to counter North Korea’s escalating cyberattacks and calls for … Read more

Justice Department Disrupts North Korean ‘Laptop Farm’ Operation

August 12, 2024 at 01:24PM Law enforcement in the U.S. has arrested Matthew Isaac Knoot for running a “laptop farm” helping North Korean IT workers secure remote jobs at American companies. Knoot faces a maximum penalty of 20 years in prison. This follows an admission by KnowBe4 of hiring a North Korean who attempted to … Read more

DOJ Charges Nashville Man for Helping North Koreans Get U.S. Tech Jobs

August 9, 2024 at 03:33AM The U.S. Department of Justice has charged a man from Nashville for running a “laptop farm” to help North Korean actors obtain remote IT jobs with American and British companies. Matthew Isaac Knoot faces multiple charges and potential imprisonment. The scheme aimed to fund North Korea’s weapons program by defrauding … Read more

Former NSA Director Paul Nakasone Joins Ballistic Ventures as Strategic Advisor

August 5, 2024 at 09:42AM Retired U.S. Army General Paul M. Nakasone has joined cybersecurity-focused venture capital firm Ballistic Ventures as a Strategic Advisor. With extensive experience in national security and cyber operations, Nakasone will provide strategic support to the firm’s portfolio companies. His appointment emphasizes the importance of public-private partnerships in addressing cyber threats. … Read more

Kaspersky says Uncle Sam snubbed proposal to open up its code for third-party review

July 25, 2024 at 08:08AM Kaspersky proposed a “comprehensive assessment framework” to verify its security products to the US Department of Commerce, aiming to mitigate supply chain risks and provide security assurances. Despite this, the Commerce Department did not respond to the proposal. The framework includes localization of data processing, review of data received, and … Read more

Chinese Hackers Target Taiwan and US NGO with MgBot Malware

July 23, 2024 at 09:31AM Taipei and U.S. NGOs targeted by state-affiliated Chinese hacking group Daggerfly, using upgraded malware tools. Symantec reports the group engages in internal espionage, exploits Apache HTTP server vulnerability, and quickly adapts to continue espionage activities. New malware linked to Daggerfly includes MACMA and Nightdoor, targeting major operating systems. CVERC accuses … Read more

Kaspersky Is an Unacceptable Risk Threatening the Nation’s Cyber Defense

July 22, 2024 at 10:13AM The US federal government has announced a ban on Kaspersky software due to cybersecurity threats and its association with Russia, reinforcing concerns over foreign software supply chain threats. Geopolitical tensions are impacting cybersecurity, necessitating organizations to consider these implications in their cybersecurity strategies and collaborate for proactive threat intelligence to … Read more

Pentagon Leaker Jack Teixeira to Face Military Court-Martial, Air Force Says

July 18, 2024 at 09:03AM Jack Teixeira, a member of the Massachusetts Air National Guard, plead guilty to leaking classified military documents. He will now face a military court-martial for collecting and sharing sensitive secrets on social media. Teixeira, a cyber transport systems specialist, faces charges of disobeying orders and obstructing justice. The leaks exposed … Read more

MxD Research Reveals Major Disconnect Between Perceived and Actual Cybersecurity Capabilities in US Manufacturing

July 17, 2024 at 04:55PM The report from MxD and the National Center for Cybersecurity in Manufacturing highlights the urgent need for the U.S. manufacturing sector to enhance its cybersecurity posture. It reveals that manufacturers are overestimating their capabilities and identifies key areas where additional resources can strengthen cybersecurity infrastructure. The report also emphasizes the … Read more