Cybersecurity Brief: Ransomhub Keeps Busy, BEC hits $55B, and Who's to Blame for CrowdStrike
Learn more about how we can help your business prevent attacks like this
Contact Us: https://hubs.ly/Q02JyH5Q0
Pentest ROI Calculator Download: https://hubs.ly/Q02wBB5d0
Ransomhub Crew Keeps Busy
After being burned by ALPHV this summer, the ransomware crew Ransomhub has been on an absolute tear. Since they were forced to double extort Change Healthcare after not receiving the original payment via ALPHV, Ransomhub has created their own Ransomware-as-a-Service with a 90% affiliate rate making them one of the busiest groups out there.
Business Email Compromise Hits $55 Billion
The FBI’s Internet Crime Complaint Center (IC3) has issued a warning about an increase in business email compromise (BEC) schemes, where cybercriminals impersonate executives or employees to deceive companies into transferring funds or sharing sensitive data. These scams often exploit trusted communication channels, making it difficult to detect fraud. The IC3 advises businesses to implement strong verification protocols, such as multi-factor authentication and independent confirmations, to protect against these increasingly sophisticated attacks.
More reading: https://www.ic3.gov/Media/Y2024/PSA24...
Microsoft, EU Regulations, and the Kernel Debate
Should Microsoft, like Apple, restrict kernel access to improve security, or keep it open for competition?
Critics argue Microsoft could still implement better user-space solutions, similar to Apple's Endpoint Security Framework. However, the EU's anti-trust laws require Microsoft to provide equal access to competitors, complicating this issue.
Microsoft’s compliance with the EU fosters openness but raises concerns about system stability and competition.
What’s your take? Open access for innovation or tighter control for security?
More reading: https://blogs.windows.com/windowsexpe...
https://news.microsoft.com/2009/12/16...