The NSA says that recent sanctions are creating difficulty for ransom payments leading to reduced ransomware attacks, which are still largely originating from Russia and allies such as Belarus.
2022 Verizon DBIR finds that at least 90% of data breaches are attempts at financially motivated crime, with nearly all of the remainder made up of espionage (in turn almost entirely conducted by nation-state threat groups).
New study finds that bad bot traffic is responsible for a surge in non-human internet activity, with malicious bot activity doubling that of the benign bots that power services like search engines. Bot traffic made up 42.3% of all internet activity in 2021.
Now over 35 years old, the CFAA has been broadly criticized throughout the technology world for its vague terms and harsh punishments. Security researchers are now being assured of some level of safety.
A Discord bot that is often used to automate moderation and message display functions was compromised, enabling the hackers to send spam and malware messages from trusted administrative sources in NFT Projects.
Passwordless authentication schemes like FIDO have been available for years but have received a mostly lukewarm reception. Big tech’s biggest names are now getting behind the standard.
The chain of attacks on the Costa Rican government began on April 17, quickly turning into a true national emergency. Conti ransomware made its way onto the servers of the finance and labor ministries among other agencies.
The thieves appear to have made off with less than $1,000 in the Ferrari NFT scam, owing to quick action to shut it down once it was noticed.
The DoT is looking to fine fuel supplier Colonial Pipeline over the widely publicized ransomware attack of 2021, saying that the company failed inspections conducted in 2020.
The DoD vendor phishing scam in 2018 seemed to work well enough, netting $23.5 million in stolen payments for four months before it all fell apart.