Security News

Formal ban on ransomware payments? Asking orgs nicely to not cough up ain't working
2024-01-03 08:30

"I think more people are coming to accept that a ban, while problematic, may ultimately be the only solution to the ransomware problem," he told The Register. For example, the Biden administration deciding to make ransom payments illegal as of February 1 would be "Problematic, given the lack of overall resilience and maturity across the economy, particularly when you think about all those soft targets the report identifies," Stifel told The Register, echoing the conclusion [PDF] reached by the Ransomware Task Force.

DOJ Slams XCast with $10 Million Fine Over Massive Illegal Robocall Operation
2024-01-03 07:21

The U.S. Department of Justice (DoJ) on Tuesday said it reached a settlement with VoIP service provider XCast over allegations that it facilitated illegal telemarketing campaigns since at least...

Cybersecurity challenges emerge in the wake of API expansion
2024-01-03 06:00

As the technological landscape increasingly integrates AI, Cindric anticipates a profound impact on the evolution of APIs, emphasizing the growing importance of API security, authentication, and the challenges posed by zombie endpoints. APIs have been growing at a CAGR of 25% for the past few years, but that growth doubled in 2023, all thanks to AI. We predict that AI-based APIs will continue to drive API growth in 2024 as they go hand in hand.

Emerging cybersecurity trends and expectations for 2024
2024-01-03 05:30

In this Help Net Security video, John Dwyer, Head of Research at IBM X-Force, discusses how 2024 is poised to be an incredibly impactful year for cyber attacks, driven by world events and access...

Facts and misconceptions about cybersecurity budgets
2024-01-03 05:00

Managing and allocating budgets for cybersecurity and IT has become an increasingly critical aspect of organizational strategy. A well-structured cybersecurity budget is crucial for staying ahead of emerging threats and minimizing potential risks.

29 malware families target 1,800 banking apps worldwide
2024-01-03 04:30

Mobile banking is outpacing online banking across all age groups due to its convenience and our desire to have those apps at our fingertips, according to Zimperium. The research uncovered that 29 malware families targeted 1,800 banking applications across 61 countries last year.

Legal, compliance and privacy leaders anxious about rapid GenAI adoption
2024-01-03 04:00

Rapid GenAI adoption is the top-ranked issue for the next two years for legal, compliance and privacy leaders, according to Gartner. "Legal leaders should adapt preexisting, well-established and widely distributed risk monitoring and management practices until new processes can be implemented. For example, they might modify data inventories and records of processing activities of privacy impact assessments to track GenAI usage."

Steam drops support for Windows 7 and 8.1 to boost security
2024-01-02 20:39

Steam is no longer supported on Windows 7, Windows 8, and Windows 8.1 as of January 1, with the company recommending users upgrade to a newer operating system. "As of January 1 2024, Steam will officially stop supporting the Windows 7, Windows 8 and Windows 8.1 operating systems," reads the support article.

Google password resets not enough to stop these info-stealing malware strains
2024-01-02 19:58

Security researchers say info-stealing malware can still access victims' compromised Google accounts even after passwords have been changed. A zero-day exploit of Google account security was first teased by a cybercriminal known as "PRISMA" in October 2023, boasting that the technique could be used to log back into a victim's account even after the password is changed.

Orbit Chain loses $86 million in the last fintech hack of 2023
2024-01-02 19:46

Orbit Chain has experienced a security breach that has resulted in a loss of $86 million in cryptocurrency, particularly Ether, Dai, Tether, and USD Coin. Orbit Chain is a blockchain platform designed to function as a multi-asset hub, supporting interoperability between various blockchains, decentralized applications, and services.