Cyberthreat News – How the Threat Landscape Is Evolving
Cyberthreat News is a great resource for those in the IT and cybersecurity industry. It has a good mix of well written articles as well as more technical content.
The threat landscape is evolving quickly, forcing organizations to adjust their security strategies and tools to keep pace. Attackers are expanding the attack surface by manipulating intelligent systems and exploiting new vulnerabilities. They’re also developing new capabilities, including artificial intelligence (AI) to generate phishing campaigns and malware, and blockchain mixing services that hide the source of stolen funds. Meanwhile, defenders are employing AI to triage alerts, create detection rules and automate response tasks.
Attackers are targeting a wide range of assets, with the most common targets involving financial gain or extortion. These include ransomware, where attackers hold systems hostage until a payment is made, and data breaches that expose personal information such as social security numbers, medical records and credit card details. Attacks also target intellectual property, stealing product designs, proprietary research and other confidential information for theft or dark-web resale.
Attackers are focusing on the enterprise, targeting supply chain vulnerabilities and taking advantage of interconnected digital ecosystems. Examples include the UK Ministry of Defence breach, in which hackers accessed payroll data on more than 270,000 current and former military personnel; Kettering Health ransomware, which disrupted internal systems and phone lines at 14 healthcare centers, forcing patients to delay procedures; and the SAP NetWeaver zero-day attack that exposes hundreds of instances of sensitive data, such as passwords and email addresses, to exploitation.