Ransomware DataBreachToday.com

Group Cross-Referenced Open-Source Victim Intelligence With Infostealer Hauls
The leak of 200,000 internal chat messages for the Black Basta operation provides an overview of how a modern ransomware group organizes itself to take down victims in the most efficient, profit-maximizing manner possible, using a variety of tactics that should be, in theory, easy to repel.

A proposed state privacy law awaiting the signature of New York State's governor promises to make the processing of and sale of health information by a wide array of organizations much more complicated and restrictive, said regulatory attorney Angie Matney, who explains why.

Citing Security Concerns, Australia Joins Others in Banning Anti-Virus Products
The Australian Department of Home Affairs on Friday banned the use of Kaspersky Lab products in public offices citing an "unacceptable security risk" to the government networks and data. All government offices must uninstall all Kaspersky products and report the completion of the task to the agency.

Withdrawal of Advanced Data Protection for British Users Could Have Global Impact
Apple's decision to withdraw iCloud end-to-end encryption in the United Kingdom has privacy and security advocates worried that the British government could scan and surveil sensitive information of Apple users worldwide. Apple on Friday deactivated its Advanced Data Protection feature in the U.K.

Protiviti-CII CIO Insights Reveal AI and Cybersecurity as Top Priorities for CIOs
AI, security and sustainable technology are set to be the defining trends for the digital future. This technological evolution is fueled by rapid advancements in AI-powered automation, the adoption of zero trust security frameworks and a growing focus on ESG integration in digital strategies.

Security Leaders From Three Continents Convene to Address AI Adoption Challenges
ISMG recently concluded its tri-continental Virtual AI Summit, where experts from the Americas, EMEA and APAC explored governance, supply chain risks and ethical concerns. The summit addressed growing concerns related to AI, highlighting the urgent need for tailored security strategies.

Report Also Flags Threats Linked to North Korea, Iran
Chinese influence operations are using artificial intelligence to carry out surveillance and disinformation campaigns, OpenAI said in its latest threat report. The report details two major Chinese campaigns that misused AI tools, including OpenAI's own models, to advance state-backed agendas.

Crypto Firm Offers Up to $140M Bounty for Recovery of Hacked Funds
Hacked crypto exchange Bybit replenished the $1.4 billion in Ether stolen days ago, CEO Ben Zhou said Monday. A new proof-of-reserves audit will confirm that client assets are back to a 1:1 ratio using a Merkle Tree verification system, Zhou tweeted.

Chinese Nation-State Hackers Used a Custom Utility to Capture Packets
Chinese hackers who infiltrated U.S. telecoms likely only used one, known Cisco vulnerability, says Cisco's threat analysis unit. Otherwise, the Chinese nation-state cyberespionage operation known as Salt Typhoon used stolen login credentials living-off-the-land techniques, says Cisco Talos.

Computing Giant Warns Against Future Decryption of Secure Communications
Google adopted quantum-safe digital signatures for its cloud environment designed to help users combat the next phase of adversarial attacks. The announcement from the company comes days after Microsoft unveiled its latest quantum chip. NIST formalized the algorithms in August 2024.

Ransomware Attack Taught Lessons on Health Sector Resiliency, Vendor Redundancy
It's been one year since hackers attacked IT services provider Change Healthcare, quickly shutting down critical processes for thousands of healthcare entities, triggering a data breach affecting 190 million people. So what top lessons are emerging from that massive disruption and data compromise?

Vendors Consolidate Endpoint, Managed Offerings to Combat Major Industry Players
Rising competition from CrowdStrike and Microsoft is driving MDR and EDR providers to consolidate. Companies such as Sophos and Arctic Wolf are acquiring endpoint or managing security technology to enhance detection and response capabilities, signaling a shift toward full-stack security solutions.

It's critical for healthcare providers that offer telehealth and remote patient monitoring services to incorporate these systems into their organizational risk programs, including how they plan to address issues such as patch management from afar, said attorney Betsy Hodge of the law firm Akerman.

Experts Say Consumers Gain Little as Implementation Challenges Loom for Framework
Australia's new scams framework bill sets the foundation for industry action but leaves consumers with limited protection. Experts warn that enforcement and reimbursement mechanisms are unclear, forcing victims to navigate a complex system with little guarantee of compensation.

Also: Lee Enterprises Recovering From Ransomware Attack, an Ivanti POC
This week, a FBI warning on Ghost ransomware, Lee Enterprises confirmed its ransomware attack, a proof of concept for Ivanti EPM flaws and a cybersecurity flaw in a Xerox machine. Also, a Chinese cyberespionage hacker apparently moonlighted as a ransomware attacker and NioCorp hit by a cyber heist.

Longtime Leader Dino DiMarino to Expand Non-Human Identity, Quantum-Ready Solutions
Dino DiMarino, the new CEO of AppViewX, is steering the company toward growth by expanding its presence in cybersecurity and cloud infrastructure. His strategic focus includes scaling operations, strengthening non-human identity security and safeguarding post-quantum cryptography advancements.

Credential Stuffing Breaches Affected Nearly 200,000 Warby Parker Customers
Federal regulators have levied a $1.5 million HIPAA civil monetary penalty against eyeglass maker and retailer Warby Parker over credential stuffing hacks that affected about 200,000 people. The HIPAA enforcement action is the first disclosed in the second Trump administration.

EIT Oxford's Dr. Laura Gilbert on AI Accountability and Responsible AI Adoption
AI adoption demands a balance between ethics, regulation and compliance. Dr. Laura Gilbert, head of AI for government at EIT Oxford and Tony Blair Institute for Global Change, and AI expert advisor for the British government, discusses how AI can enhance decision-making in public and private sectors.

Both Ransomware Operations Remain Active and Pose a Threat, Experts Warn
Ransomware business moves: Attacks tied to BlackLock have been surging, likely bolstered by the group's custom-built malware, while the long-running Black Basta operation remains a threat, even as it looks set to disband due to core members facing "fatigue," report cybercrime experts.

New Pentagon CISO Appointed as Pentagon Budget Cuts Loom
The White House appointed a Trump ally and former Department of Defense cybersecurity official as DOD CISO, an unexpected return to the Pentagon for an official previously removed under a cloud of security concerns. Arrington returns to the Pentagon just as it faces budget cuts.