Creator, Author and Presenter: Tanusree Sharma, Pennsylvania State University
Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Enigma ’23 Conference content on the organization’s’ YouTube channel.
The post USENIX 2025: PEPR ’25 – Verifying Humanness: Personhood Credentials For The Digital Identity Crisis appeared first on Security Boulevard.
Business continuity integrates both people and technology to help organizations anticipate, manage, and recover from disruptions to regular business operations. While business continuity planning includes disaster recovery—the process of restoring IT services after an unexpected outage—its scope extends beyond that. The primary objective of a business continuity strategy is to ensure that the organization remains […]
The post The Role of Cybersecurity in Effective Business Continuity Planning appeared first on Kratikal Blogs.
The post The Role of Cybersecurity in Effective Business Continuity Planning appeared first on Security Boulevard.
On Monday this week, Chinese authorities sentenced to death 16 members of "The Four Families" for the multitude of crimes they committed while operating scam compounds in Northern Myanmar near the Chinese border. This was the culmination of an investigation that has been on-going since July 2023 and that we have been tracking primarily through Chinese Telegram channels that discuss the scam compounds. Thirty-nine criminals were sentenced in the hearing. Eleven will be immediately executed, while five others have a two year reprieve, during which their sentences might be commuted to life in prison. Eleven more received life sentences, while the rest received sentences of between five and twenty-four years. But who are The Four Families? Read on . . .
The Incident at Crouching Tiger Villa - October 20, 2023 In Myanmar this is referred to as the "1020 Incident." Crouching Tiger Villa, which is also called "Wohu Mountain Villa" was a telecom scam compound that covered 200 acres, and encompassed hotels, shopping malls, and buildings full of high tech equipment. Ming Xuechang, who was the richest man in the Kokang Autonomous Region had a private army of 2,000 men to help patrol and protect the area. On October 20th a large group of prisoners, forced to work as cyber scammers, rioted and attempted to escape. In the ensuing chaos, Ming's troops began to fire into the crowd, killing at least 60 (some say 70.) Rumors indicate that some of those killed were undercover Chinese police officers, but some say this is based on the plot of a Chinese movie with a similar theme. As a result, on November 12, 2023, the Criminal Investigation Bureau of the Ministry of Public Security issued a reward notice, offering a cash incentive for four leaders of the Myanmar Kokang group headed by Ming. Within just a few days, all four had been arrested! Ming Guoping, Ming Julan, and Ming Zhenzhen were turned over to the Chinese police Myanmar hands over 10 crime bosses to the Chinese - January 30, 2024 The Record: Crime bosses behind Myanmar cyber 'fraud dens' handed over to Chinese government (image from: X.com/johnwSEAP )On December 10, 2023, China issued arrest warrants for Bai Suocheng and ten other key leaders of the Kokang Autonomous Region's telecom and internet fraud rings. Working with Myanmar's Ministry of Foreign Affairs, six of the ten were arrested and on January 30, 2024, sent to China to answer for their crimes. These are the ten in the China Warrant according to the Irawaddy
Two leaders of the Bai Family were among those sent back to China. The Bai family operated many casinos around Laukkaing, especially "the Silver Palace." They had many construction and logistics firm that served their own needs and those of the other families. Bai's most famous brand was the "Yum! Brands" which operated several other casinos that served as scam compounds as well.
Bai Suocheng -白所成
Bai Yingcang - 白应苍
The Wei family was led by Wei Chaoren ( 魏朝仁 ), operating chiefly from Kongyang Township. They were significant players in telecom infrastructure and provided SIM Pools for the use of the families. The Henry Group was the chief company of Wei Chaoren, as well as The Xiaozhu.
Arrested:
Wei Huairen - 魏怀仁
The Liu family also operated from Kongyang and other nearby border towns. The Liu family came to wealth in the mining industry and control most of the mining in Kokang. They were significant players in money laundering. Liu's primary casinos were operated under the name "Fully Light Group." Liu Guoxi has also been linked to organ trafficking. Liu Zhengxiang was the founder of the Fulilai Group back in 1992 which operates a number of casinos in the area. His predecessor, Liu Abao, was known to be a significant drug trafficker.
Arrested:
Liu Zhengxiang - 刘正祥
Liu Zhengmao - 刘正茂
Remaining at large from the Liu family was:
Liu Zhengmao
In this press conference, Li mentions that Ming Zhenzhen ( 明珍珍 ) had also been taken into custody.
Myanmar's Cooperation with China's Ministry of Public Security September 28, 2024 - The Ministry of Public Security announced that they had made key arrests in Yangon and Mandalay, and that 20 "telecom network fraud crime group leaders and key members" had been arrested and were being handed over the China. These included Chen Mouwei ( 陈某卫 ) and Yang Mou ( 杨某 ). The press release at that time said that Chen and Yang had "relied on the Four Great Families" of Myanmar's Kokang region, as well as criminal groups "such as Xu Laofa ( 徐老发 )" in order to "control armed forces, set up telecom fraud dens, and carry out telecom network fraud crimes targeting Chinese citizens. They were also said to be suspected of intentional homicide, intentional injury and other serious violent crimes. The Crouching Tiger Villa arrests - December 30, 2024 "Tracking down and investigating the truth! The story of the investigation into the Mingjia criminal group in northern Myanmar. Chinese people are being "traded" in northern Myanmar.On December 30, 2024, China's Supreme People's Procuratorate published the first round of charges under the headline "Exposing the Northern Myanmar Mingjia Criminal Group's Fraud, Murder, and Drug-related Activities" ( 揭露缅北明家犯罪集团诈骗杀人涉毒解密数宗罪 ). At that time, the Wenzhou Municipal court in Zhejiang Province charged 39 defendants, calling the Mingjia criminal group "one of the four major families in northern Myanmar.
They interviewed many victims, who told stories of the promises made to them by the "snakeheads" (a Chinese term for a human trafficker) and the reality they faced when they arrived. One victim, Li Mouqian, from Guangdong, was sold to the Ming family and told he could buy his freedom for 300,000 Yuan. At Crouching Tiger Villa, he was expected to make 100 phone calls per day and to land three new victims of cyber scams each day. If he failed to do so, he was beaten. When he tried to escape with a colleague, he was beaten with steal pipes and his accomplice in the escape was beaten to death.
The Ming family at that time was led by Ming Zhenzhen (明珍珍 ), the granddaughter of their founder Ming Xuechang (明学昌). Xuechang had been a part of Myanmar's Shan State legislature, representing the Kokang Self-Administered Zone as a member of the Union Solidarity and Development Party. He was also in charge of the local police. He controlled a personal army of at least 2,000 men. During a previous cross-border police action against Ming Xuechang, he shot himself rather than being captured, and died in the hospital leaving his granddaughter in charge.
Between July 2023 and December 2024, the Chinese Ministry of Public Security managed to repatriate 53,000 telecom and internet fraud suspects from northern Myanmar.
The post Scam Compound Operators: Members of The Four Great Families sentenced to death in China appeared first on Security Boulevard.
How Critical is NHI Security for Your Organization? How often have we pondered the security measures surrounding Non-Human Identities (NHIs)? With machine identities continue to proliferate across digital, understanding and securing these entities is paramount for organizations across various sectors. But what exactly are NHIs, and why do they demand such focused attention? Understanding NHIs: […]
The post How Secure Are Your Non-Human Identities? appeared first on Entro.
The post How Secure Are Your Non-Human Identities? appeared first on Security Boulevard.
How Can Organizations Effectively Leverage Scalable NHIs for Business Growth? Digital presents a myriad of challenges for businesses striving to maintain robust cloud security while fostering continued growth. Organizations frequently face the daunting task of securing machine identities, which are often more complex and numerous than their human counterparts. This brings us to a crucial […]
The post Scaling NHIs in Fast-Growing Industries appeared first on Entro.
The post Scaling NHIs in Fast-Growing Industries appeared first on Security Boulevard.
How Secure Are Your Non-Human Identities? Have you ever wondered what it truly means to secure a machine identity? With technology ceaselessly permeates every aspect of our professional lives, the answer to this question becomes crucial, especially when dealing with Non-Human Identities (NHIs) and secrets management. NHIs are not just another checkbox in your cybersecurity […]
The post Is Your Secrets Management Foolproof? appeared first on Entro.
The post Is Your Secrets Management Foolproof? appeared first on Security Boulevard.
Software is the backbone of modern business, but it's also a major source of risk, with Mandiant's M-Trends 2025 report revealing that 33% of all breaches begin with a vulnerability exploit. For many developers and security teams, the constant pressure of finding and fixing vulnerabilities feels like a losing battle. Our 2025 Software Under Siege report confirms why: the average application faces 17 new vulnerabilities every month, while development teams can typically only remediate six in the same period. This growing backlog is made worse by traditional security tools that are often noisy, slow, and can't keep up with the rapid pace of development. The biggest pain point is knowing which vulnerabilities are actually exploitable in your running application and which are just theoretical, buried deep in your codebase but never called. According to our research, the average production application has nearly 30 serious, exploitable vulnerabilities and is targeted by 81 confirmed, viable attacks each month that evade perimeter defenses. This "signal vs. noise" problem leads to wasted time and effort chasing down issues that pose no real threat, while the truly dangerous ones might be missed.
To effectively secure your applications, you need a solution that goes beyond the old-school methods. Let's take a look at the evolution of application security testing, from static and dynamic analysis to the more modern approach of interactive testing.
The post Beyond SAST and DAST Tools: Using IAST to Pinpoint Exploitable Application Vulnerabilities appeared first on Security Boulevard.
Creators, Authors And Presenters: Lisa LeVasseur and Bryce Simpson, Internet Safety Labs
Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Enigma ’23 Conference content on the organization’s’ YouTube channel.
The post USENIX 2025: PEPR ’25 – Safetypedia: Crowdsourcing Privacy Inspections appeared first on Security Boulevard.
via the <city>-pizza analysis, comic artistry & exceedingly low-humidity wit of Randall Munroe, creator of XKCD
The post Randall Munroe’s XKCD ‘’-Style Pizza” appeared first on Security Boulevard.
Creator, Author and Presenter: Primal Wijesekera, ICSI And UC Berkeley
Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Enigma ’23 Conference content on the organization’s’ YouTube channel.
The post USENIX 2025: PEPR ’25 – Demystifying The Android Telehealth Ecosystem appeared first on Security Boulevard.
金のうんこ！ Breaking: Big beer brewer belatedly believes bitten by ransomware—and likely a data breach.
The post Asahi Hack Update: Beer-Free Day #5 Dawns in Japanese Ransomware Crisis appeared first on Security Boulevard.
3 min readOpen-source software giant Red Hat has confirmed that one of its GitLab instances, dedicated to consulting engagements, was breached. The attackers, a group calling itself “Crimson Collective,” claim to have taken nearly 28,000 private repositories and roughly 800 Customer Engagement Reports (CERs). CERs often contain detailed records of client environments – network diagrams, configuration data, […]
The post Red Hat’s GitLab Breach and the Cost of Embedded Credentials appeared first on Aembit.
The post Red Hat’s GitLab Breach and the Cost of Embedded Credentials appeared first on Security Boulevard.
A company's cybersecurity is only as strong as the weakest link in its supply chain. What was once a rare occurrence is now a top concern for businesses. Yes, we're talking about Supply Chain Attacks.
In August 2025, a new supply chain attack emerged, targeting the Salesloft Drift integration with Salesforce, a platform widely used by many enterprises for sales, CRM, and support workflows. This incident stresses the importance of understanding how supply chain attacks work, the risks they pose, and how organizations can protect their infrastructure against them.
The post How to Protect Your Business from Supply Chain Attacks: Lessons from the Salesforce Breach appeared first on Security Boulevard.
In September 2025, we saw a worm-style supply chain attack hit npm packages, a major ransomware incident in Brazil’s healthcare sector, an insider breach at a U.S. bank, and Cloudflare dealing with fallout from a vendor compromise. In this blog, we’ll walk through four of the biggest incidents from the latest ColorTokens Threat Advisory, explain […]
The post What a Rogue Package, a Ransomware Hit, and One Mistake Say About Cyber Risk Right Now appeared first on ColorTokens.
The post What a Rogue Package, a Ransomware Hit, and One Mistake Say About Cyber Risk Right Now appeared first on Security Boulevard.
A new LayerX report shows how a single malicious URL can exploit Perplexity’s Comet AI browser via prompt injection, potentially exposing sensitive data and connected applications.
The post Report Details Security Weakness in Comet AI Browser from Perplexity appeared first on Security Boulevard.
A report by Okta researchers says the notorious North Korea IT worker scams, which have focused on U.S. tech and crypto firms, is now going global, targeting other industries like healthcare and finances in a growing number of countries that include Great Britain, Canada, and Germany.
The post North Korea Remote Worker Scam Goes Global, Expands Target Industries appeared first on Security Boulevard.
Modern supply chains run on code, models, and email. The last one is still the easiest way to start a very bad day.
The post When One Phish Poisons the Pipeline: Supply Chain Phishing on the Rise appeared first on Security Boulevard.
Discover the best vulnerability management tools for the future, focusing on enterprise SSO, CIAM, and single sign-on providers. Enhance your cybersecurity strategy today.
The post Top Vulnerability Management Tools for the Future appeared first on Security Boulevard.
Learn about key processes and tools for enterprise vulnerability management, including vulnerability scanning, risk prioritization, and remediation strategies.
The post Enterprise Vulnerability Management: Key Processes and Tools appeared first on Security Boulevard.
The shift from IP-based ACLs to identity-aware microsegmentation is key to zero-trust. Learn how to build resilient, intent-based policies that survive re-IP.
The post Beyond IPs: Why Your Next Firewall Ruleset Will be Written in Identity appeared first on Security Boulevard.
