MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data

The U.S. Department of Justice (DoJ) on Wednesday announced charges against a 50-year-old U.S. and Israeli national for allegedly defrauding ransomware victims by secretly paying the attackers to obtain decryptors while claiming to use proprietary tool… Continue reading MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data→

Posted in Uncategorized

Pricing your bad days and how to build an economic model for security decisions

Ivan Milenkovic, VP Risk Technology EMEA at Qualys, explains how security leaders can build an economic model that puts money behind their decisions. He suggests starting with a few loss scenarios, then working down to the assets that drive them. He co… Continue reading Pricing your bad days and how to build an economic model for security decisions→

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm

The npm package known as “tensorlake,” a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud supply chain attack.

The malicious version 0.5.144 “cont… Continue reading Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm→

Posted in Uncategorized

Who watches the AI watching your street?

Yusaku Fujii, a professor at Gunma University in Japan, has designed audits and penalties to stop operators from misusing AI that analyzes street camera footage. His system adds an independent record-keeper and unannounced spot checks to the AI’s… Continue reading Who watches the AI watching your street?→

How AI can fix cybersecurity compliance: From dashboards to continuous execution

Most compliance work goes into proving security, not improving it. That isn’t because the rules are unreasonable. Regulators, customers, and cyber insurers are right to expect organizations to implement hundreds of technical and administrative co… Continue reading How AI can fix cybersecurity compliance: From dashboards to continuous execution→

The people who know passkeys best are still typing passwords

Yubico and Okta asked 1,890 technology and security professionals across nine countries how they sign in to work accounts. The most common answer was a username and password, at 43%, from a group in which 87% said they were familiar with passkeys. High… Continue reading The people who know passkeys best are still typing passwords→