Jane Jordan’s Post

The LockBit ransomware gang has now claimed responsibility for the attack on Capital Health by listing the healthcare company on its data leak extortion portal. https://lnkd.in/guYYM6AS

GitLab has released security updates to address two critical vulnerabilities, including one that could be exploited to take over accounts without requiring any user interaction. https://lnkd.in/e-cwGgTG

The threat actors associated with the Medusa ransomware have ramped up their activities following the debut of a dedicated data leak site on the dark web in February 2023 to publish sensitive data of victims who are unwilling to agree to their demands. https://lnkd.in/efb6d2Vs

Please use the sharing tools found via the share button at the top or side of articles. Copying articles to share with others is a breach of FT.com T&Cs and Copyright Policy. Email licensing@ft.com to buy additional rights. Subscribers may share up to 10 or 20 articles per month using the gift article service. More information can be found at https://lnkd.in/exHfNxPt. https://lnkd.in/eKWCDHDQ For an industry that has long been known as one of the most resilient, well-resourced and highly regulated in terms of cyber security, the hacking of ICBC revealed the alarming fragility of interconnected financial systems — and the lack of sophisticated contingency planning for a crisis. https://lnkd.in/eG388ecD

On October 31, the Counter Ransomware Initiative (CRI), a U.S.-led group of 50 countries, pledged to sign an international agreement that their governments would never pay ransomware to cyber criminals. https://lnkd.in/g9V6_5Td

Cybersecurity researchers have discovered a new Java-based "sophisticated" information stealer that uses a Discord bot to exfiltrate sensitive data from compromised hosts. https://lnkd.in/gvZEj_sv

Cybersecurity researchers have disclosed a security flaw in the Opera web browser for Microsoft Windows and Apple macOS that could be exploited to execute any file on the underlying operating system. https://lnkd.in/dKJ7VcGg

Following on from the Securities and Exchange Commission (SEC) X (formerly Twitter) hack, US lawmakers are pushing for the SEC to review its cybersecurity practices after it was discovered there was no multi-factor authentication active at the time of the hack. https://lnkd.in/ecckB6Cj

In the first half of 2023, cyberattacks targeting the aviation industry surged by 24% worldwide – a trend due to accelerate in 2024 as AI enhances phishing campaigns. https://lnkd.in/eZAuvjUD

What follows is a roundup of experts chiming in on what to watch out for and how to build an effective ransomware prevention and mitigation playbook for 2024. https://lnkd.in/e4vXbe3h