US Proposes Rules to Bar Transfer of Americans' Data to China, Russia, Other Sanctioned Countries

Ransomware forces Casio to delay earnings report, Buffalo cop indicted for Genesis Market role, Ransomware hackers leak Nidec data, Breach of Transak affects 92K users, Google ad might hide crypto wallet drainer, Roundcube client used to deliver malware, DDoS attacks pelt Japan firms, much more

Australian Man Wanted by the FBI Busted in Italy for Scamming Vulnerable People

Internet Archive suffers third cyber incident, DHS doc warns of Chinese energy battery storage, Russia sets sites on Georgian critical infrastructure, LLM attack sends chat PII to hackers, E2EE cloud storage platforms could expose data, Tapioca token offers $1m to hacker, much more

Best Infosec-Related Long Reads for the Week of 10/12/24

Internet Archive fights back, Washington's in-demand disinformation researcher, How the right gutted disinformation research, Geolocation tool peddled to cops might be unreliable, Cheerful Czech bistro owner is a top spyware supplier, more

FBI Busts Alabama Man for SIM-Swap Attack on SEC X Account

ESET denies compromise after Israeli business infected with wiper, Globe Life faces extortion after June breach, Radiant Capital loses $50M in breach, Group-IB dishes details on Cicada3301, Microsoft loses logs for some cloud products, Fake Google Meet pages used in new malware campaign, much more

Prosecutors Charge Two Brothers With Operating the Anonymous Sudan Attack-for-Hire Service

Notorious hacker USDoD busted in Brazil, Iranian hackers use brute force attacks to crack passwords, China wants Intel products security reviews, Hong Kong busts pig butchering scam ring members, SecureWorks says faux DPRK worker hacked his hiring company, Volkswagen probes attack, much more

Microsoft: Russia, China, and Iran Turn to Cybercriminals for Spying, Hacking

WeChat has lousy cryptography protocols, Finnish Customs takes down Sipulitie darknet market, NCSC rolls out cyber protection for schools, EDRSilencer mutes EDR tools, Prosecutors want five years in prison for Bitfinex hack launderer, Damning report on Stallman released, much more

Cisco Is Probing Data Breach After IntelBroker Leak

China rejects Volt Typhoon accusations, Internet Archive Back online after attacks, Russian hackers target UK ambulances, Meta blocks fake accounts ahead of Moldova election, Passkeys getting easier to adopt, Chinese researchers claim quantum encryption break, Iran claims Israeli cyberattacks, more

Best Infosec-Related Long Reads for the Week of 10/05/24

Hiding facial recognition use from defendants, Private intel companies start to rival nation-state spy agencies, Iceland is a locus of online identity shielding, The first Western instance of election deepfakes, Counting harm reductions from government cyber initiatives

Lawmaker Concerns Mount Over Salt Typhoon's Access to Wiretapping Requests

US and UK unveil kid's safety group, Ukraine cops bust man who ran Runet VPN, EU adopts IoT cyber requirement legislation, Fidelity says 77K customers' PII were stolen, Crypto whale lost $36M in phishing incident, Number of malicious packages soar, Mozilla issues emergency patch, much more

Miserable Miscreants Targeted Internet Archive's Wayback Machine, Stole 31 Million Records

China's SweetSpecter sent phishing emails to ChatGPT staff, FTC requires Marriott and Starwood to bolster cybersecurity, India's Star Health and Allied Insurance confirm cyberattack, Crypto kid thief's parents subject to botched kidnapping, Bitfinex was sole victim of RazzleKhan couple, much more

Ukrainian Hackers Hit Russian Media and Courts in One-Two Punch

Former Uber CSO seeks new trial, MSFT plugs at least 117 security holes in Patch Tuesday updates, Kia and Hyundai sell in-car conversations to AI companies, First cyber bill debuts in Oz, Russian-speaking GoldenJackal group targets air-gapped systems, Cyberattack disrupts Casio's systems, much more

Hackers Breached American Water Works Systems, Forced Some Systems Offline

Hackers stole Moneygram customer data during September incident, ADT reports second breach in two months, Qantas says two partner employees stole customer flyer points, Medical tests exposed in First Nations breach, Raccoon Stealer admin pleads guilty, Fake token promoted on LEGO site, much more