The Auckland, New Zealand skyline (Image: Nadine Simoner/Pixabay)

Ransomware Attack in New Zealand Has Cascading Effects

Mihir Bagwe • December 6, 2022

A ransomware attack on a New Zealand third-party managed IT service provider affected several government agencies across the country - including the Ministry of Justice and the national health authority. Investigations are ongoing to determine the incident's full impact.

Fraud Management & Cybercrime

AxLocker Ransomware Adds a Twist: Stealing Discord Tokens

Latest

Artificial Intelligence & Machine Learning

As Complexity Challenges Security, Is Time the Solution?

Mathew J. Schwartz • December 7, 2022

"Who here thinks your network or environment will become more complex next year?" a cybersecurity veteran asked the audience at Black Hat Europe this week in London. As attackers' capabilities continue to improve, Jeff Moss said defenders must learn to succeed or fail faster.

Cryptocurrency Fraud

Social Engineering Hackers Use Excel to Target Crypto VIPs

Prajeet Nair • December 7, 2022

Hackers, possibly North Korea's Lazarus Group, are behind a campaign that socially engineers cryptocurrency traders into opening an Excel spreadsheet loaded with a malicious macro. Pyongyang hackers specialize in cryptocurrency theft as the regime seeks hard currency to fuel weapons development.

Endpoint Detection & Response (EDR)

SentinelOne Pushes Upmarket to Minimize Effects of Slowdown

Michael Novinson • December 6, 2022

SentinelOne plans to go after more Fortune 500 and Global 2000 organizations as the economic downturn prompts customers to shrink the size of their purchases. Over the past year, the company doubled the number of clients spending at least $100,000 and $1 million with SentinelOne annually.

Fraud Management & Cybercrime

Rackspace Confirms Exchange Outage Caused by Ransomware

Akshaya Asokan • December 6, 2022

Ransomware lies behind the ongoing outage of hosted Exchange services at Rackspace, the company disclosed in a Tuesday update. The company did not disclose any particular ransomware actor. It told federal regulators that the outage is likely to create a financial loss.

Cybercrime

US Prosecutors Unspool xDedic Criminal Marketplace Cases

Prajeet Nair • December 6, 2022

The 2019 seizure by U.S. law enforcement of online criminal marketplace xDedic is paying dividends for lawyers unrolling prosecutions of accused fraudsters who allegedly obtained compromised credentials from the site. The FBI and IRS estimate that xDedic facilitated more than $68 million in fraud.

Application Security

Snyk's Iain Rose on How to Secure Cloud-Native Environments

Michael Novinson • December 5, 2022

Organizations should build apps and design development workflows in a way that embraces how quickly cloud-native architectures change, says Snyk Solutions Engineer Iain Rose. Unlike traditional on-premises environments, containerized applications are designed to be ephemeral, Rose says.

Security Information & Event Management (SIEM)

Securonix Taps Ivanti, BMC, SAP Vet Nayaki Nayyar as New CEO

Michael Novinson • December 5, 2022

Securonix has snagged longtime Ivanti, BMC Software and SAP executive Nayaki Nayyar as CEO to strengthen product capabilities and customer experience. One of a handful of female CEOs in the vendor community, she doubled Ivanti's total addressable market during her 30 months as president.

Cyberwarfare / Nation-State Attacks

A Look Ahead: David Pollino on Evolution of the CISO Role

Tom Field • December 5, 2022

From the invasion of Ukraine to the conviction of a former Uber CISO and the Musk takeover of Twitter, it's been a watershed year for cybersecurity concerns. Veteran CISO David Pollino reflects on 2022 and looks ahead to the challenges - and opportunities - that await in 2023.

Business Continuity Management / Disaster Recovery

Rackspace Hosted Exchange Still Offline Over Security Issue

Prajeet Nair • December 5, 2022

Thousands of Rackspace customers continue to face hosted Microsoft Exchange Server outages after the managed services giant took the offering offline after being affected by an unspecified security incident Thursday. Rackspace urges affected customers to at least temporarily move to Microsoft 365.

Identity & Access Management

OneSpan CEO on Joining Identity Verification and e-Signature

Michael Novinson • December 4, 2022

Bringing OneSpan's identity verification and e-signature businesses together in the cloud will allow the company to secure the whole customer transaction life cycle, says CEO Matt Moynahan. Customers want security capability that is seamlessly integrated and interwoven across their entire workflow.

Incident & Breach Response

New Zealand Health Insurer Investigates IT Provider Hack

Mihir Bagwe • December 4, 2022

New Zealand private health insurer Accuro says an investigation into a cyber incident at a third party IT infrastructure provider so far has not revealed evidence of a data breach affecting its 34,000 customers. Customers should expect delayed service in claims processing.

Industry Specific

Top Cybersecurity Challenges Facing Healthcare Providers

Marianne Kolbasuk McGee • December 3, 2022

With the surge in ransomware and other major hacking incidents affecting third-party suppliers, it is more critical than ever for healthcare sector entities to diligently scrutinize threats and risks involving their vendors, says Denise Anderson, president and CEO of the Health-ISAC.