For individuals

The legal actions may have a chilling effect on hiring CISOs, who are already in short supply, but may also expose just how budget-constrained most security executives are.

In one sampling, Adaptive Shield reported that only 1% of 5,000 vulnerable companies are still exposed.

The wider availability of turnkey cyberattack kits in the criminal underground is leading to a glut of campaigns using remote access Trojans (RATs).

The parties within the International Counter Ransomware Initiative intend to use information-sharing tools and AI to achieve their goals of cutting off the financial resources of threat actors.

Investigation by the Denver Gazette revealed that the Colorado Department of Higher Education failed to report a widespread ransomware-related data breach to the state attorney general's office within a month of discovering the incident, which is in violation of the state's breach notification law, according to StateScoop.

Dallas County has confirmed having a portion of its network impacted by a cyberattack this month, which has been claimed by the Play ransomware operation, reports The Record, a news site by cybersecurity firm Recorded Future.

Threat actors using private keys and passphrases from LastPass databases stolen in cyberattacks last August and December were reported by ZachXBT and MetaMask developer Taylor Monahan to have been able to exfiltrate $4.4 million worth of cryptocurrency on Oct. 25, BleepingComputer reports.

SiliconAngle reports that phishing attacks have increased by 1,265% between the fourth quarter of 2022 and the third quarter of 2023, while credential phishing attacks have risen by 967% over the same period, with the growth fueled by the increasing adoption of generative artificial intelligence.

More threat actors have been utilizing the Russian automated account creation tool Kopeechka to facilitate cybersecurity scams and fraud, according to The Record, a news site by cybersecurity firm Recorded Future.

Publicly exposed GitHub repositories have been cloned by threat actors looking to exfiltrate Amazon Web Services credentials as part of the EleKtra-Leak cryptojacking operation that commenced in 2020, reports The Register.