DHS: Guidance for AI in critical infrastructure

News November 24, 2021

Proposed Bill Would Require Public Disclosure of Ransomware Payments

2 min read - Two U.S. congresswomen introduced a bill that would require ransomware victims to publicly disclose ransom payments to the federal government. Introducing the ‘Ransom Disclosure Act’ In early October, Senator Elizabeth Warren (D-Mass.) and Representative Deborah Ross (D-N.C.) introduced a bill…

News November 17, 2021

Over 10M Android Users Infected by GriftHorse Trojan

2 min read - A mobile premium services campaign infected over 10 million Android users with the GriftHorse Trojan. More Than 200 Malicious Apps in Play Discovered by Zimperium, the GriftHorse Trojan operation used more than 200 Trojan apps to target Android users all…

News November 10, 2021

Phishing-as-a-Service: Research Exposes BulletProofLink Gang

2 min read - It’s a growing trend among attackers to offer their products as a service, just as regular companies do. In September, Microsoft researchers found that the BulletProofLink phishing-as-a-service (PhaaS) enterprise was taking this to the next level. It comes with over…

News November 3, 2021

Phishing: Attackers Use DocuSign to Send Malicious Links

2 min read - Attackers are abusing the electronic agreement management company DocuSign to send phishing links and documents. Inside the Phishing Attempt First, a malicious actor registers a free account with DocuSign or compromises another user’s account. They then upload a file to…

News October 27, 2021

Triada Trojan Conceals Itself in WhatsApp Mod

2 min read - A variant of the Triada Trojan concealed itself within a WhatsApp mod for Android devices, Kaspersky found in August. What Is Triada? Threat actors hid Triada within the WhatsApp mod FMWhatsapp 16.80.0. The security firm also found the Trojan modification,…

News October 13, 2021

More Generation Zs Are Falling for Online Scams

2 min read - It’s sometimes easy to think phishing or vishing scams only work on people who aren’t very savvy online. Namely, there’s a sense that Generation Z (born after 1997) and Millennials (born between 1981 and 1996) have good enough cyber awareness…

News October 6, 2021

CISA Creates JCDC Agency for U.S. Cyber Defense Operations Plans

2 min read - The Cybersecurity and Infrastructure Security Agency (CISA) announced the creation of a new agency on Aug. 6 to lead the development and execution of U.S. cyber defense plans. CISA dubbed the new agency the Joint Cyber Defense Collaborative (JCDC). Its…

News September 29, 2021

High-Severity Vulnerabilities Now Take Nearly 250 Days to Remediate, Survey Finds

2 min read - Businesses and agencies today are spending an average of about 250 days to remediate high-severity risks, NTT Application Security found. This length of time gives attackers nearly a year in the target network. From there, they can misuse security weaknesses…

News September 23, 2021

Cloud Security: Report Finds 68% of Malware Delivered From Cloud Apps

2 min read - Cloud apps are now the most common way digital attackers distribute malware. In the second quarter of 2021, researchers found that 68% of malware downloads originated from cloud apps, reported ZDNet. In order to keep your cloud security up, it’s…

News September 16, 2021

Attackers Spread Cobalt Strike Through Backdoor in Common Apps

2 min read - Researchers discovered a new attack campaign targeting online gambling companies in China with one of two malware payloads. In one scenario detected by Trend Micro, the campaign dropped a previously undocumented backdoor written in Python. The security firm dubbed this…