Latest

Cryptocurrency Fraud

Analysis: Feds Crack Down on Cryptocurrency Scams

Anna Delaney  •  February 26, 2021

The latest edition of the ISMG Security Report features an analysis of a federal crackdown on ICO cryptocurrency scams. Also featured: An update on the SonicWall hack investigation and the use of digital IDs to verify COVID-19 testing.

Fraud Management & Cybercrime

France Warns of Stolen Healthcare Credentials

Marianne Kolbasuk McGee  •  February 23, 2021

French authorities are warning the country's healthcare sector of the discovery of a glut of stolen credentials, apparently belonging to hospital workers, that were found for sale on the dark web. The alert comes amid a recent rise in ransomware attacks on hospitals and other healthcare entities.

Fraud Management & Cybercrime

IRS Warns of Fresh Fraud Tactics as Tax Season Starts

Scott Ferguson  •  February 19, 2021

As tax season begins, the Internal Revenue Service is warning that it's seeing signs of fraudsters spoofing the agency's domains and incorporating its logos and language into phishing campaigns.

Fraud Management & Cybercrime

Roses are Red, Romance Scammers Increasingly Make You Blue

Mathew J. Schwartz  •  February 12, 2021

The ongoing lockdown may be complicating the path of Cupid's arrows. But as another Valentine's Day rolls around, authorities are warning that romance scammers - and other types of fraudsters - are alive and well and have been increasingly preying on unsuspecting victims around the world.

►

Endpoint Security

Cybersecurity Leadership: Asset Discovery and Visibility

Tom Field  •  February 8, 2021

In the wake of COVID-19-accelerated transformation and the SolarWinds hack, the importance of understanding your organization's digital exposure is more critical than ever. In this latest Cybersecurity Leadership panel, CEOs and CISOs discuss asset discovery and attack surface vulnerability.

Endpoint Security

Good News: Cryptocurrency-Enabled Crime Took a Dive in 2020

Mathew J. Schwartz  •  January 25, 2021

Good news on the cybercrime front: "Cryptocurrency-related crime fell significantly in 2020," compared to 2019, reports blockchain analysis firm Chainalysis. Unfortunately, in the same timeframe, ransomware profits surged 311%, stoking calls for a crackdown on ransom payments.

Fraud Management & Cybercrime

Fraudsters Are Using Google Forms to Evade Email Filters

Prajeet Nair  •  January 23, 2021

Fraudsters are using Google forms to target retail, telecom, healthcare, energy and manufacturing companies in an apparent reconnaissance campaign to identify targets for a possible follow-up business email compromise attack.

Fraud Management & Cybercrime

Analysis: How Will Biden Address Cybersecurity Challenges?

Anna Delaney  •  January 22, 2021

The latest edition of the ISMG Security Report features an analysis of the cybersecurity challenges the Biden administration must address. Also featured: payments security advice from Verizon; the outlook for the lifting of restrictions tied to the COVID-19 pandemic.

Governance & Risk Management

The Final HIPAA Actions Under Trump Administration

Marianne Kolbasuk McGee  •  January 20, 2021

On the final full day of the Trump administration, HHS prepared to publish proposed changes to the HIPAA Privacy Rule this week. Plus, it revealed plans to ease off on HIPAA enforcement when organizations use certain web-based applications to schedule COVID-19 vaccinations.

►

Governance & Risk Management

COVID-19 First Anniversary: It's About Vaccines & Variants

Tom Field  •  January 20, 2021

As the U.S. marks its first anniversary of fighting COVID-19, pandemic expert Regina Phelps says the next several, critical weeks come down to two vital words: vaccines and variants. "Those are going to determine our destiny for the long and foreseeable future," she says.

Governance & Risk Management

Privacy Fines: Total GDPR Sanctions Reach $331 Million

Mathew J. Schwartz  •  January 19, 2021

Privacy watchdogs in Europe have imposed fines totaling more than $330 million since the EU's General Data Protection Regulation went into full effect in May 2018, according to law firm DLA Piper. Over the past year, regulators received 121,000 data breach notifications, up 19% from the year before.

Fraud Management & Cybercrime

COVID-19 Vaccine Themes Persist in Fraud Schemes

Prajeet Nair  •  January 18, 2021

Researchers at the security firm Proofpoint are tracking several fraud schemes leveraging COVID-19 vaccine-themed emails. The schemes include business email compromise scams, messages with malicious attachments and phishing emails designed to harvest credentials.