Content by Dan Gunderman

PayPal to Hire Dozens of Cryptocurrency Security Experts

Dan Gunderman  •  August 4, 2021

PayPal plans to hire more than 100 cryptocurrency experts, including those with expertise in compliance and anti-money laundering, as the online payments service expands its digital money transferring service and adds a "super app" wallet.

Chinese APT Groups Targeted Asian Telecoms

Dan Gunderman  •  August 3, 2021

Chinese APT groups compromised networks of telecom providers across Southeast Asia in an effort to harvest customers' sensitive communications, according to Cybereason. As in other Chinese cyberattacks, these APT campaigns exploited flaws in Microsoft Exchange servers.

NIST Works to Create AI Risk Management Framework

Dan Gunderman  •  July 31, 2021

Citing a need to secure artificial intelligence technologies, NIST is working to create risk management guidance around the use of AI and machine learning, the agency has announced. NIST is seeking feedback to address governance challenges.

Patching Woes: Most Frequently Exploited CVEs Listed

Dan Gunderman  •  July 30, 2021

A joint cybersecurity advisory issued by several agencies this week highlighting the ongoing exploits of longstanding software vulnerabilities illustrates the woeful state of patch management, security experts say.

Dutch Police Arrest 2 Tied to Phishing Operation

Dan Gunderman  •  July 22, 2021

Dutch police made two arrests this week in an effort to break up the alleged fraud-as-a-service syndicate known as "Fraud Family," which they say developed, sold and rented phishing frameworks to fraudsters who stole financial information.

US Indicts 4 Chinese Nationals for Lengthy Hacking Campaign

Dan Gunderman  •  July 19, 2021

The U.S. has indicted four Chinese nationals working with the nation's Ministry of State Security in connection with an alleged hacking campaign conducted from 2011 to 2018 that targeted universities and government entities to obtain trade secrets, medical research and other intellectual property.

US Blacklists 6 Russian Organizations Over Security Concerns

Dan Gunderman  •  July 17, 2021

The Department of Commerce is restricting trade with four Russian IT and cybersecurity firms, along with two other entities, over concerns that these organizations pose a threat to U.S. national security.

How Mespinoza Ransomware Group Hits Targets

Dan Gunderman  •  July 16, 2021

The gang behind the ransomware strain known as Mespinoza, aka PYSA, is targeting manufacturers, schools and others, mainly in the U.S. and U.K., demanding ransom payments as high as $1.6 million, according to Palo Alto Networks' Unit 42, which says the group leverages open-source tools.

Malspam Campaign Targets Kaseya Victims

Dan Gunderman  •  July 9, 2021

Spammers posing as software vendor Kaseya are waging a malspam campaign to target users of the company's VSA remote IT management software that was hit by a ransomware attack, the security firm Malwarebytes reports.

Kaseya Announces New Service Restoration Date

Dan Gunderman  •  July 8, 2021

Thousands of organizations that rely on Miami-based Kaseya's VSA software to remotely manage systems are going to have to wait longer to regain the ability to use it, company CEO Fred Voccola explains in a Thursday video.

Kaseya Raced to Patch Before Ransomware Disaster

Dan Gunderman  •  July 8, 2021

Global software vendor Kaseya worked in earnest for three months to resolve flaws in its VSA monitoring and management software but ultimately lost the race, Dutch researchers say. A timeline released on Wednesday gives insight into what happened before a devastating mass ransomware attack.

Kaseya Sees Service Restoration Delay After Ransomware Hit

Dan Gunderman , Doug Olenick  •  July 7, 2021

Cue delays for customers of Kaseya waiting for their software-as-a-service and on-premises software to get emergency fixes and be restored, following the July 4 holiday weekend ransomware attack, which hit about 60 IT managed service provider customers and up to 1,500 of their collective managed service clients.

Capital One Breach Suspect Faces New Criminal Charges

Dan Gunderman  •  July 1, 2021

The Justice Department has filed seven new criminal charges against Paige Thompson, who is suspected of hacking Capital One in 2019, compromising the data of 100 million Americans, including exposing hundreds of thousands of Social Security numbers. If convicted, She now faces a possible 20-year sentence.