Cybersecurity is a national security priority. That’s why Microsoft is setting the standard with security built-in. And our 8,000 threat hunters analyze 65 trillion+ signals daily, partnering with federal agencies to protect their digital estate. We help strengthen cybersecurity at scale—from identity, data, and apps to endpoints, infrastructure, and networks—so you can focus on what matters: your mission. Visit aka.ms/FedCyber today to get started.
We're always looking for ways to improve the N2K CyberWire network to give you an intelligence-driven news experience. Please take a few minutes to tell us about your network experience and share your feedback by completing our 2024 Audience Survey, and you will have a chance to win a $100 Amazon gift card. Take the survey.
The US Cybersecurity and Infrastructure Security Agency (CISA) and the FBI have released a joint advisory on the Black Basta ransomware-as-a-service operation, stating that BlackBasta affiliates have breached more than five hundred organizations since the ransomware surfaced in April 2022. The advisory notes that the threat actors "have encrypted and stolen data from at least 12 out of 16 critical infrastructure sectors, including the Healthcare and Public Health (HPH) Sector." The agencies add, "Healthcare organizations are attractive targets for cybercrime actors due to their size, technological dependence, access to personal health information, and unique impacts from patient care disruptions."
CNN cites sources as saying a Black Basta affiliate was responsible for the attack against the Ascension healthcare network last week.
SpyCloud has the world's largest repository of recaptured dark web data. Simply enter your email and we’ll check your corporate domain against hundreds of billions of recaptured darknet assets, from credentials to PII – for free. See your darknet footprint, including breach exposures and malware-exfiltrated data that puts your business at risk of account takeover and ransomware. Check your exposure now.
Europol is investigating a breach of its Platform for Experts knowledge-sharing portal, BleepingComputer reports. Europol stated, "Europol is aware of the incident and is assessing the situation. Initial actions have already been taken. The incident concerns a Europol Platform for Expert (EPE) closed user group. No operational information is processed on this EPE application. No core systems of Europol are affected and therefore, no operational data from Europol has been compromised."
The cybercriminal threat actor IntelBroker claims to have stolen documents containing classified data, including "information on alliance employees, FOUO source code, PDFs, and documents for recon and guidelines." Europol hasn't disclosed what type of information was breached.
Launching a new product or service? Looking for alternative ways to recruit cyber talent? Want your company or leadership team members to be seen as an industry thought leader? Be heard by over 350,000 subscribers on the N2K CyberWire network. Whether through sponsored advertising, executive events, or exclusive interviews, we offer off-the-shelf and bespoke packages to help you reach your goals. Let’s work together.
Firstmac Limited, Australia's largest non-bank lender, has disclosed a breach affecting customers' names, home addresses, email addresses, phone numbers, dates of birth, external bank account information, and driver’s license numbers, SecurityAffairs reports. Firstmac notes that the leaked bank account information can't be used to initiate transactions, but customers should still be on the lookout for suspicious activity. SecurityAffairs notes that the criminal extortion group Embargo last week posted 500 GB of data allegedly stolen from Firstmac.
Today's issue includes events affecting Australia, China, the United Kingdom, and the United States.
Dell API abused to steal 49 million customer records in data breach (BleepingComputer) The threat actor behind the recent Dell data breach revealed they scraped information of 49 million customer records using an partner portal API they accessed as a fake company.
'Russian' hackers deface potentially hundreds of local British news sites (The Record) An infiltrator posted a breaking news story titled "PERVOKLASSNIY RUSSIAN HACKERS ATTACK" on websites owned by Newsquest Media Group.
Kosovo’s government reportedly faces Kremlin-backed cyberattacks (The Record) Kosovo Foreign Minister Donika Gervalla-Schwarz said that Russia is targeting the country after it agreed to provide military equipment to Ukraine “in its justified defense against Russian genocidal aggression.”
Reality Defender Wins RSAC Innovation Sandbox Competition (Dark Reading) In a field thick with cybersecurity startups showing off how they use AI and LLMs, Reality Defender stood out for its tool for detecting and labeling deepfakes and other artificial content.
US and China to Hold Discussions on AI Risks and Security (BankInfoSecurity) Senior White House officials will hold a series of high-level conversations with Chinese counterparts on the security and risks associated with advanced artificial
For a complete running list of events, please visit the Event Tracker.
SANS Security West San Diego 2024 (San Diego (and virtual), California, USA, May 9 - 14, 2024) At SANS Security West San Diego 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!
Space Cyber Executive Course and Conference (Glasgow, Scotland, UK, May 13 - 17, 2024) The first Executive Space Course to be offered in Scotland by the International Space University (ISU) will be hosted and developed in partnership with the University of Strathclyde Business School (SBS). The programme will have cybersecurity as its central theme and includes postgraduate level micro credentials. The Course will be followed by a two-day conference with the theme “Space: Securing our Entrepreneurial Future".
Insider Threat Program Development, Management & Optimization Live Web Based Training Course (Virtual, May 14 - 15, 2024) This highly sought after and very comprehensive training course, will ensure that the Insider Threat Program (ITP) Manager and other key stakeholders that support the ITP (Insider Threat Analyst, FSO, CSO, CISO, Human Resources, CIO - IT, Network Security, Counterintelligence Investigators, Behavioral Science Professionals, Legal Etc.), have the Core / Advanced Knowledge, Blueprint, Resources needed for developing, managing or optimizing an ITP. Students will be provided with an ITP Management Toolkit that provides an abundance of educational resources, templates and checklists for ITP development, management and optimization. All materials will be provided to the student in electronic format (Via Download) before the training. Our student satisfaction levels are in the exceptional range. Over 900+ individuals have attended this training course and received ITP Manager Certificates.
SANS Leadership & Cloud Security – Crystal City 2024 (Arlington (and virtual), Virginia, USA, May 20 - 24, 2024) At SANS Leadership & Cloud Security – Crystal City 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!
Cybersec Europe 2024 (Brussels, Belgium, May 29 - 30, 2024) Cyber attacks are an ever-growing threat in today's tech environment. Cybersec Europe 2024 is the platform for experienced cyber security experts as well as next-gen start-ups to share knowledge with peers for jointly coping with the cybersecurity challenges. Businesses and institutions of all sectors learn how to enhance cyber resilience and protect their core.
