Explore

Identity Resilience Becomes Crucial for Third-Party and Supply Chain Cyber Security

Identity Resilience Becomes Crucial for Third-Party and Supply Chain Cyber Security

Identity Resilience Becomes Crucial for Third-Party and Supply Chain Cyber Security

AI-Driven Deepfake Incidents Surge Amidst Overall Identity Fraud Decline, Posing New Challenges for Cybersecurity

AI-Driven Deepfake Incidents Surge Amidst Overall Identity Fraud Decline, Posing New Challenges for Cybersecurity

Cyberattacks and online criminal activities are becoming increasingly sophisticated, with a notable shift towards AI-driven impersonation and deepfake incidents. While overall identity fraud has seen a decrease in some regions, the complexity and skill level of attacks are rising. According to Sumsub, an international identity verification and anti-fraud platform, deepfake incidents surged by 269% year-on-year. This indicates a move from low-effort, high-volume scams to highly targeted, high-skill attacks. Cybercriminals are leveraging AI to create convincing deepfake impersonations and phishing attacks, primarily targeting financial transactions, gamers, and users of dating sites. This trend highlights an ongoing 'arms race' between cyber villains utilizing advanced AI and financial institutions and cybersecurity firms working to develop more robust anti-fraud measures.

US Alarmed by North Korean Scheme to Infiltrate American Companies with Fake IT Workers

US Alarmed by North Korean Scheme to Infiltrate American Companies with Fake IT Workers

US authorities are expressing alarm over an evolving North Korean scheme that involves placing fake IT workers in global companies, including those in the United States. North Korean cyber teams are recruiting foreign developers, particularly from countries like Nigeria, South Africa, India, and Iran, to help their operatives bypass recruitment processes and secure remote technology jobs. These foreign facilitators are reportedly paid around $500 per month to assist North Korean candidates in obfuscating their identities, acting as 'interview associates' on camera, and helping them pass recruitment checks. The North Korean IT workers then secure foreign contracts and funnel their earnings back to Pyongyang, with estimates suggesting this scheme generates between $600 million and $800 million annually. This money is believed to be a significant source of funding for North Korea's sanctioned programs, including weapons development. The US State Department and Department of Justice, along with several foreign...

Atlantic Council Expert Highlights Blurred Lines Between State-Sponsored and For-Hire Hackers

Atlantic Council Expert Highlights Blurred Lines Between State-Sponsored and For-Hire Hackers

Beau Woods, an expert at the Atlantic Council, has described the distinction between state-sponsored hackers and hackers-for-hire as a 'blurred line.' This observation comes amidst discussions about the evolving landscape of cyber threats, where the motivations and affiliations of malicious actors are increasingly complex. State-sponsored groups, often backed by national governments, pursue advanced persistent threat activities to advance national interests, such as espionage or pre-positioning for future conflicts. Examples include China's Volt Typhoon, which has compromised U.S. critical infrastructure. In contrast, hackers-for-hire sell their services to various clients, including corporations for industrial espionage, private individuals, or even governments seeking outsourced offensive cyber capabilities. The confusion arises because some for-hire firms count governments among their clients, and some state-sponsored groups utilize individuals who also engage in financially motivated independent work. ...

Department of Homeland Security Initiates $440 Million Governmentwide Biometric Device Procurement Competition

Department of Homeland Security Initiates $440 Million Governmentwide Biometric Device Procurement Competition

The U.S. Department of Homeland Security (DHS) has launched a governmentwide competition for biometric capture devices and related equipment, with a total value exceeding $440 million. This multiple-award contract is structured into five categories: fingerprint, face, iris, palm, and multimodal biometrics. DHS intends to issue at least three indefinite-delivery, indefinite-quantity (IDIQ) awards in each category, enabling various federal agencies, including DHS components, to procure necessary equipment over the contract's duration. The solicitation aims to address historical issues of fragmented purchasing, inconsistent standards, and a lack of economies of scale across federal agencies in acquiring biometric technology. The procurement is managed by DHS, which oversees the Office of Biometric Identity Management and operates critical identity systems for border security, immigration, and law enforcement. Proposals for this contract are due by September 18, with awards anticipated later in the month.

Mastercard and Google Pay Pilot Biometric Authentication for Online Payments

Mastercard and Google Pay Pilot Biometric Authentication for Online Payments

Mastercard and Google Pay Pilot Biometric Authentication for Online Payments

What Famous SQL injection incidents in US history Actually Looks Like in a Real Incident

What Famous SQL injection incidents in US history Actually Looks Like in a Real Incident

A look inside some of the largest data breaches in U.S. history, breaking down how a simple flaw called SQL injection led to devastating consequences.

Scammers Exploit SMS Gateways to Send Texts from Users' Own Numbers, Posing Phishing and Malware Risks

Scammers Exploit SMS Gateways to Send Texts from Users' Own Numbers, Posing Phishing and Malware Risks

Scammers are increasingly using SMS gateway services to send text messages that appear to originate from the recipient's own phone number. This tactic is designed to bypass skepticism towards unknown numbers, making the messages seem more legitimate and urgent. A study involving 83 spoofed texts across four test lines over 90 days revealed that 67% of these messages led to credential-harvesting phishing pages, while 22% attempted to install malicious app profiles. These phishing pages are often sophisticated, using valid HTTPS certificates and mimicking legitimate brand designs, with the only reliable indicator of fraud being an incorrect URL domain. The texts typically arrive during peak engagement hours, between 8:00 AM and 11:00 AM or 6:00 PM and 9:00 PM local time, suggesting optimized automated scheduling. The phone numbers targeted by these scams are often obtained from data brokers, data breaches, or online form submissions, indicating that scammers purchase this information rather than hacking indi...

Red Hat and IBM Collaborate on Lightwell Initiative to Strengthen Open Source Software Supply Chain

Red Hat and IBM Collaborate on Lightwell Initiative to Strengthen Open Source Software Supply Chain

Red Hat and IBM Collaborate on Lightwell Initiative to Strengthen Open Source Software Supply Chain

Lockheed Martin Secures $114 Million from U.S. Space Force for GPS Ground Segment Modernization

Lockheed Martin Secures $114 Million from U.S. Space Force for GPS Ground Segment Modernization

Lockheed Martin has received an additional $114 million from the U.S. Space Force to modernize the GPS ground segment. This funding is allocated through two task orders. The first, a $96 million order, focuses on upgrading the current GPS ground system to control the GPS IIIF payload, enabling it to operate next-generation IIIF satellites. The second, a $17.5 million order for the Architecture Evolution Plan (AEP) x86 Phase 1 work, will initiate a three-phase technology refresh of GPS ground hardware and software. These efforts are aimed at strengthening the security and resilience of the GPS enterprise against future threats, ensuring reliable positioning, navigation, and timing (PNT) services for both military and civilian applications.

U.S. States Confront Growing Cybersecurity Gaps in Critical Infrastructure, Report Finds

U.S. States Confront Growing Cybersecurity Gaps in Critical Infrastructure, Report Finds

A new report from the National Association of State Chief Information Officers (NASCIO) and General Dynamics Information Technology (GDIT) reveals that U.S. state governments are increasingly taking on the role of protecting critical infrastructure from cyberattacks. This shift comes as local governments and special districts struggle with limited cybersecurity staffing, aging technology, and rising cyber-physical threats. The report, released on Wednesday, indicates that nearly 90% of state CIOs surveyed consider cyberattacks against critical infrastructure, including water systems, hospitals, transportation, energy, and communication networks, a high concern. While 73% of state CIOs have critical infrastructure cyber protection as part of their whole-of-state cybersecurity plans, resources are not equally distributed. Only 65% of state CIO budgets include critical infrastructure cybersecurity funding for executive branch agencies, compared to just 31% for local governments and special districts. A signif...

Lockheed Martin Secures $114 Million U.S. Space Force Contracts for GPS Modernization

Lockheed Martin Secures $114 Million U.S. Space Force Contracts for GPS Modernization

Lockheed Martin has been awarded two U.S. Space Force (USSF) task orders totaling $113.5 million to modernize the Global Positioning System (GPS) ground segment. These awards aim to accelerate the delivery of secure GPS ground capabilities and enhance their resilience against future threats. One task order, valued at $96 million, focuses on rebuilding the GPS ground system's IIIF payload controls, which is crucial for integrating next-generation IIIF satellites into service. The second award, for $17.5 million, is for the Architecture Evolution Plan (AEP) x86 Phase 1, initiating a three-stage technology refresh of ground hardware and software to ensure more dependable ground operations. This modernization effort is intended to bolster M-Code anti-jamming and signal resilience, providing uninterrupted positioning, navigation, and timing services for both military and civilian users.