Cybersecurity

Ransomware Payments Decreased in 2022 as Criminals Used Other Extortion Tactics

A report from Recorded Future found that, even as ransomware continues to pose a global challenge for individuals and organizations, threat actors are increasingly using other methods to steal sensitive data and demand payments from victims.

Cybersecurity

Report Spotlights Medical Infrastructure, Utilities as Primary Cyber Targets

A report from TransUnion documented the industries that most suffered from cyberattacks in the end of 2022, and recommended mitigation measures.

Cybersecurity

Cyber Criminals Are Increasingly Exploiting Cloud Environments, Report Finds

A new CrowdStrike report found that hackers and digital adversaries are relying less on malware, and more on unpatched vulnerabilities and data weaponization.

Cybersecurity

US Marshals Service Hacked in ‘Major Incident’

This is the second time the agency has been hacked in recent years, adding to a growing number of agencies that have experienced cybersecurity incidents.

Cybersecurity

CISA Seeks Private Sector Support for Cybersecurity Risk Management

The agency is looking to identify contractors capable of offering services for its Insights Branch, which provides technical cyber risk reduction.

Cybersecurity

CISA Tells Agencies What to Prioritize to Meet Cybersecurity Log Mandate

The guidance document also explains how CISA and the FBI will work with agencies to investigate cybersecurity incidents.

Cybersecurity

CISA Urges 'Increased Vigilance' for Cyber Threats on Anniversary of Russia’s Invasion of Ukraine

As Russia’s full-scale war in Ukraine reaches its one-year anniversary, CISA has warned that the U.S. and European nations “may experience disruptive and defacement attacks against websites in an attempt to sow chaos and societal discord.”

Cybersecurity

House Dems Call for Info on Racially-Motivated Cyber Attacks

Several House lawmakers tasked DHS and CISA with providing information on “racially- or ethnically- motivated” violent attacks on the U.S. electrical sector.

Ideas

Won’t Get Fooled Again?

COMMENTARY | In the world of cybersecurity, the more things change the more they stay the same. 

Cybersecurity

Report: Pentagon Personnel Use Unauthorized, Unsafe Apps on Work Devices

The Defense Department’s inspector general found that unsanctioned apps downloaded onto government-issued mobile devices “could pose operational and cybersecurity risks to DOD information and information systems.”

Cybersecurity

Report Reveals How US Has 'Not Advanced the Ball' on Top Cyber Risks

The top cybersecurity risks of 2023 include a shortage of trained cyber professionals, international strife and continued vulnerabilities in critical infrastructure services, according to a new report from the Bipartisan Policy Center.

Cybersecurity

CISA, South Korean Agencies Issue Joint Warning on North Korean Ransomware

The new cybersecurity advisory spotlights North Korean-backed actors targeting healthcare networks with ransomware.

Cybersecurity

US and UK Join Forces to Sanction Russian Hackers

Members of cybercrime group Trickbot, which favors deploying ransomware on critical infrastructure, were handed sanctions in the first-of-its-kind collaboration between U.S. and U.K. agencies.

Cybersecurity

GAO's Critical Infrastructure Cyber Recommendations Go Largely Unaddressed

A new watchdog review found that federal agencies overseeing critical infrastructure have only implemented 43% of recommendations made since 2010.

Cybersecurity

Cyberattacks on Energy's National Labs Draw Lawmaker Scrutiny

The attacks, allegedly conducted by Russian-based adversaries, occurred during August and September 2022, potentially exposing sensitive U.S. scientific research.

Digital Government

Republicans Announce New Congressional Cyber Subcommittee Leadership

A New York Republican is taking over a powerful House Homeland Security subcommittee tasked with overseeing efforts to improve federal network security and the nation’s cyber defense agency.

Digital Government

Justice 'Hacked the Hackers' of Hive Ransomware, Stopping $130M in Demands

It took national and international cooperation to thwart the group, who targeted more than 1,500 victims.

Cybersecurity

What’s in a Word? FCC’s Proposed Data Breach Rule Redefines Key Terms

The public now has the opportunity to provide insight on the value and impact such redefinitions would have on incident reporting.