Air Europa asks customers to cancel credit cards for data breach

In a surprising twist of events, an airline that recently fell victim to a cyberattack is urging its customers to take immediate action by canceling their existing credit cards and applying for new ones. The breach resulted in the compromise of sensitive data, including Card Verification Value (CVV) numbers, card numbers, and their expiration dates.

The affected company, Air Europa, a prominent Spanish airline, is strongly advising certain customers to pursue card replacements. The breach has raised concerns about potential vulnerabilities, leaving these customers susceptible to threats such as card spoofing and cyber fraud.

Fortunately, the airline’s vigilant IT staff acted swiftly to contain the incident, thereby preventing extensive disruptions for millions of its valued customers. Air Europa reassures its customers that, at present, there is no concrete evidence of the stolen card details being misused online. Nevertheless, due to the persistent threat, the company is taking the proactive step of recommending a complete credit card replacement.

Adding to the urgency of the situation, the Spanish Organization of Consumers and Users (OCU) has issued a stern warning. It is poised to take rigorous actions against the airline if it fails to safeguard its customers’ information effectively. This is not the first time the OCU has taken such measures; in 2021, it imposed a substantial fine of €600,000 on Air Europa for its failure to protect the data of 500,000 customers in a 2018 data breach. With this recent breach, the OCU is poised to follow suit, potentially pushing for governmental and aviation authority intervention to revoke the company’s operational license if it fails to safeguard its customers’ credit card data in the future.

The post Air Europa asks customers to cancel credit cards for data breach appeared first on Cybersecurity Insiders.

October 11, 2023 at 08:22PM

Read More

Ransomware news headlines trending on Google

The HelloKitty Ransomware, a malicious software that has been causing havoc since 2020, is making headlines on Google News for a rather peculiar reason. An individual identifying as Gookee has taken responsibility for leaking the source code of this specific version of ransomware on a Russian-speaking cyber forum. Gookee has gone a step further by announcing their willingness to create more ransomware if they receive financial support. What’s intriguing is that Gookee, who also goes by the alias Kapuchin0, claims to be in the process of developing a more potent encryption tool, set to be released by the end of this year. This marks the first instance of a hacker openly admitting to enhancing their encryption capabilities, a surprising revelation.

ALPHV Ransomware perpetrators have recently targeted Florida’s First Judicial Circuit Court, resulting in the theft of sensitive information, including social security numbers and certain employee CVs. According to reports from Bleeping Computer, these cybercriminals also made off with network maps pertaining to the court’s computer network and both local and remote login credentials. ALPHV, also known as BlackCat, is a notorious criminal group known for infiltrating government networks in the United States. Florida Court has now fallen victim to a sophisticated attack orchestrated by criminals operating from Vietnam but allegedly funded by an Asian nation.

In other news, a UK-based company named Volex, which specializes in manufacturing products for data centers and electric vehicles, has fallen victim to a ransomware attack. A ransomware gang has successfully breached Volex’s server systems and is now demanding a substantial sum in exchange for decrypting the compromised data. While the identity of the threat actor remains undisclosed, an insider at the company has confirmed that the attack indeed involved a ransomware variant. As a precaution, Volex has initiated a business continuity plan to minimize the potential risks associated with this incident.

The post Ransomware news headlines trending on Google appeared first on Cybersecurity Insiders.

October 11, 2023 at 04:56PM

Read More

Top 9 AI Certifications for the year 2023

Artificial Intelligence (AI) has emerged as a highly sought-after field in the job market. Many professionals are now considering courses in AI to solidify their careers in various industries like technology, manufacturing, and healthcare, as AI promises a promising future. For those unsure of where to begin, here is an overview of the top 10 AI certifications that can help you develop a strong understanding and expertise in various AI domains, including computer vision, robotics, machine learning, and natural language processing (NLP).

1. AI for Everyone – Offered by Coursera, this 10-hour course, guided and certified by DeepLearning.ai, explores the fundamentals of AI. For a fee of $49, participants gain insights into AI concepts, its practical implementation in businesses, and its societal impact.

2. Certified Artificial Intelligence Scientist (CAIS) – The United States Artificial Intelligence Institute offers this certification program, which spans from 4 to 25 weeks. It includes study materials such as books and videos for a fee of $900. This course is ideal for individuals holding bachelor’s or master’s degrees in AI, machine learning, data science, project management, business intelligence, business analytics, or programming languages.

3. Computer Science for Artificial Intelligence – Hayward University provides a 5-month course priced at $460, aimed at individuals with basic AI knowledge. This program covers topics such as machine learning, AI principles, designing AI systems, and integrating AI into Python programs.

4. IBM AI Engineering Professional Certificate – Designed for those with intermediate experience in AI, this IBM course spans 2 months and requires about 10 hours of weekly commitment. It includes video lectures, readings, and materials from Coursera for a fee of $49. Course content covers topics like machine learning with Python, deep learning, neural networks, computer vision, image processing, and AI capstone projects.

5. Fundamentals of Google AI for Web-Based Machine Learning – Google offers this course, featuring video content over a 3-month period, for a fee of $498.

6. AI Graduate Certificate – The Stanford School of Engineering offers this certificate program, which can be completed in 1-3 years. Priced at $23,000+, it provides study resources and free recordings of Stanford AI courses. It’s suitable for beginners, and depending on the individual’s learning pace, it can be completed in as little as 16 months.

7. Microsoft Certified Azure AI Engineer – Microsoft offers this 115-hour course for a fee of $165. However, only residents of the United States are eligible to take the exam. Individuals interested in this course can also explore an exam demo through the company’s sandbox resources.

8. Artificial Intelligence Business Strategies and Applications – The University of California, Berkeley, provides this 2-month course for a fee of $2,800. It caters to individuals with intermediate AI knowledge and delivers course materials through video lectures, reading materials, and case studies.

9. Artificial Intelligence A-Z 2023 – Udemy offers this 17-hour course, providing reading and video resources. It is suitable for beginners with a basic understanding of high school math and Python. The course can be accessed for $16.58 per month or a total course fee of $140.

These certifications offer a diverse range of AI knowledge and skills, catering to different experience levels and interests. Choosing the right one depends on your background and career goals in the exciting field of artificial intelligence.

The post Top 9 AI Certifications for the year 2023 appeared first on Cybersecurity Insiders.

October 10, 2023 at 08:25PM

Read More

Credential stuffing cyber attack leads to data breach of genetic info of Jewish Community

In a recent digital assault that stands out from the usual credential stuffing attacks leading to data breaches, hackers specifically targeted a particular sect of Jewish members. This unprecedented incident occurred on the servers of the renowned biotechnology company, 23andMe, which specializes in genetic testing and genealogy-related services. The attack took place in September of this year, resulting in the theft of data related to Ashkenazi Jewish heritage members.

On October 6th, 23andMe made the details of this cyber incident public, acknowledging that information from selected customer profiles using their DNA Relatives Feature had been compromised. The hackers gained access to sensitive data, including first and last names, email addresses, phone numbers, dates of birth, locations, and the genetic histories of Ashkenazi Jewish members, encompassing their ancestral details.

In today’s digital age, many individuals opt for online services that provide genetic and ancestral information for a premium fee. This recent data breach serves as a stark reminder that not all personal details should be shared online, especially when cybercriminals are on the prowl.

A subsequent technical analysis revealed that the attack was initiated using recycled login credentials. Cybercriminals exploited leaked information from previous data breaches to gain unauthorized access to a separate website. Given that many online companies employ a single-password system for multiple linked services, a single password leak can result in a significant online security breach.

To defend against credential stuffing attacks, it is advisable to implement two-factor authentication or multi-factor authentication when logging into online services. 23andMe has initiated a forensic investigation into the incident and is urging its users to change their passwords promptly.

Typically, such data is sold for a price, with rates starting at $1,000 for 100 profiles and increasing to $5,000 for 1,000 profiles. The price doubles for the next 10,000 profiles and so forth. A forum specializing in data breaches has claimed possession of data related to over 1 million Ashkenazi profiles. This data includes haplogroup details, phenotype information, photographs, precise origin estimates, individual data sets, and hundreds of potential relatives’ information, much of which constitutes raw data.

The post Credential stuffing cyber attack leads to data breach of genetic info of Jewish Community appeared first on Cybersecurity Insiders.

October 10, 2023 at 10:29AM

Read More

Learn more about FBI warning on Phantom Hacker Campaign sweeping the US

In a concerning turn of events, the FBI has issued a warning regarding the alarming rise of the ‘Phantom Hacker’ campaign that has swept across the entire United States in just half a year, offering cyber-criminals an illicit path to earn a staggering $542 million. This scam primarily targets senior citizens, ensnaring them in a sophisticated and devastating con.

The modus-operandi of these cyber-criminals begins with them posing as banking personnel and creating deceptive webpages that bear no affiliation with legitimate financial institutions. They initiate contact with their unsuspecting victims through messages that suddenly appear on their computer screens, proclaiming that their computer security has been compromised.

These deceptive messages play on the fears of the victims, urging them to divulge sensitive information to rectify the purported malware infestation. In some instances, these criminals impersonate government officials, coercing victims into revealing their bank account details under the guise of safeguarding them from potential scams. However, their true intent is far from noble; they exploit these credentials to drain the victims’ accounts, leaving them in financial turmoil.

In other instances, the scammers assume the guise of tech support representatives from reputable tech companies, convincing their targets to willingly surrender their bank details.

The FBI’s recent report reveals that such scams have reached epidemic proportions this year, with over 19,000 complaints filed in just six months, resulting in staggering losses of approximately $549 million.

So, how can you protect yourself from falling victim to these insidious Phantom Hacker scams?  Here are some crucial tips:

Stay Wary of Unknown Communications: Do not succumb to unknown emails, text messages, or pop-up notifications, and never click on any links embedded in such messages. Refrain from sharing your bank details with anyone claiming to be a bank employee over the phone.

Verify the Source: If you must share sensitive information, always verify the source. In most cases, physically visit your bank or relevant agency to confirm the request with their official personnel.

Gifts and Coupons: Be aware that no legitimate bank offers gifts or coupons in exchange for revealing your bank account details.

Regularly Review Statements: Make it a habit to review your bank statements at least once every three months. This can help you spot any unauthorized transactions promptly.

Implement 2FA: Use two-factor authentication (2FA), such as text or email message-based passwords, to authenticate transactions and enhance your account security.

Stay Informed: Stay informed about the current cyber threat landscape. Read news posts and articles to stay updated, and share this information with your loved ones.

Remote Access: Never grant remote access to your computer to anyone for any reason unless you are certain of their legitimacy.

Strong Passwords: Employ strong passwords that are alphanumeric and include special characters. Ensure they are at least 15 characters in length to enhance security.

Install Antivirus Software: Install a reputable antivirus solution on your device to protect against malware and other cyber threats.

Be Cautious of Romance Scams: Exercise caution when dealing with online relationships, especially those involving requests for money. Many of these stories are fabricated and aimed at extracting money from unsuspecting individuals.

By following these essential precautions, you can fortify your defenses against the ‘Phantom Hacker’ campaign and reduce your vulnerability to cybercriminals. Remember, vigilance and skepticism are your strongest allies in the digital age.

The post Learn more about FBI warning on Phantom Hacker Campaign sweeping the US appeared first on Cybersecurity Insiders.

October 09, 2023 at 08:31PM

Read More

Israel govt websites hit by DDoS Cyber Attack

Over the past 48 hours, Israel has found itself under relentless assault from Hamas militant groups, resulting in a tragic loss of life and substantial property damage. Adding to this already dire situation is the cyber onslaught launched by the notorious Killnet Hacking Group, reportedly backed by Russian Intelligence.

Killnet has made its intentions chillingly clear on its Telegram channel, vowing to intensify its campaign against critical infrastructure in the coming days with potentially devastating consequences.

Typically, Killnet employs distributed denial of service attacks (DDOS) to incapacitate its targets. This involves overwhelming a victim’s server with a barrage of fake traffic generated by bots. The server, unable to distinguish genuine from malicious data packets, buckles under the strain, resulting in a crippling disruption.

What adds an intriguing twist to this narrative is Killnet’s stated motivation for these actions. The group openly claims to be seeking retribution against Israel for its support of Ukraine in its conflict with the Russian President dating back to 2022. This leaves readers with a perplexing question: Is the hacking collective aligned with Hamas, or is it purely driven by vengeance, taking advantage of the moment when Israel’s defense forces and government are preoccupied with combating terrorism?

In a move that further muddies the waters, Anonymous Sudan, a cyber-terror organization allegedly linked to Russian interests, has thrown its weight behind Hamas and is actively supporting Killnet in its mission to disable government websites throughout the Middle East.

Adding another layer of complexity, a hacking group known as the “Cyber Army of Russia” has been bombarding American Facebook accounts with a poll survey. This survey aims to gauge public opinion on whether the attacks on government infrastructure are justified or not.

On a contrasting note, India Cyber Force has launched a counteroffensive against Hamas, the militant group governing Gaza, successfully taking down their website. They have garnered support from other hacking groups such as Team UCC Ops, Garuna Ops, and SilenOne.

Meanwhile, a Pakistani hacking group, “Team Insane PK,” has executed a digital assault on an Israeli hydroelectric power station, with plans to disclose the pilfered data in the coming days.

Microsoft, in its annual Digital Defense Report, has identified and is actively monitoring the Storm 1133 campaign. This campaign commenced launching attacks on Telecom, Defense, and Energy sectors during the late hours of Sunday, October 8, 2023. The situation continues to evolve rapidly, with cyberspace becoming an increasingly potent battleground in tandem with the ongoing conflicts in the physical world.

The post Israel govt websites hit by DDoS Cyber Attack appeared first on Cybersecurity Insiders.

October 09, 2023 at 10:16AM

Read More

Cyber Insurance and SOC as a Service – Adapting to New Cybersecurity Challenges

In the modern digital landscape, organizations face an ever-increasing barrage of cyber threats. Cybercriminals continually adapt their tactics, making it challenging for businesses to defend against potential cyber incidents. As a result, cybersecurity risks have become a top concern for businesses of all sizes and industries. While implementing robust cybersecurity measures is essential, another vital component in managing cyber risks is cyber insurance. Cyber insurance provides financial protection and support in the aftermath of a cyber incident, offering a safety net against potential financial losses. In this article, we will delve into the role of cyber insurance in managing cybersecurity risks and how it complements other cybersecurity practices, including Security Operations Center as a Service (SOCaaS).

Understanding Cyber Insurance

Cyber insurance, also known as cyber liability insurance or data breach insurance, is a specialized insurance product designed to mitigate the financial impact of a cyber incident. It covers various aspects, including data breaches, network security failures, business interruption losses, extortion, and legal costs associated with cyber incidents. The coverage can be tailored to meet the unique needs of different organizations, offering a sense of security in an increasingly unpredictable digital landscape.

1. Financial Protection against Cyber Incidents

The primary role of cyber insurance is to provide financial protection in the event of a cyber incident. A cyber incident can lead to substantial financial losses, such as data recovery costs, legal fees, and regulatory fines. Cyber insurance helps alleviate these burdens, ensuring that organizations can recover without enduring crippling financial consequences.

2. Breach Notification and Customer Support

Data breaches often require organizations to notify affected individuals and authorities promptly. Cyber insurance policies may include coverage for the costs associated with notifying customers, providing credit monitoring services, and offering customer support to affected parties. These measures can help maintain customer trust and loyalty in the aftermath of a cyber incident.

3. Legal and Regulatory Support

Cyber incidents can lead to legal actions and regulatory investigations, especially in cases of data breaches involving sensitive customer information. Cyber insurance can cover legal fees and expenses incurred during litigation and regulatory investigations, ensuring organizations have the necessary resources to defend their interests.

4. Business Interruption Coverage

Cyberattacks can disrupt business operations, leading to significant revenue losses. Cyber insurance can include coverage for business interruption losses, compensating organizations for lost income during the downtime caused by a cyber incident.

5. Extortion and Ransomware Coverage

Ransomware attacks have become increasingly prevalent, with cybercriminals demanding ransoms to restore access to encrypted data. Cyber insurance can cover ransom payments or extortion costs, assisting organizations in resolving such incidents without compromising their financial stability.

The Role of SOC as a Service (SOCaaS) in Cyber Insurance

As organizations continue to face sophisticated cyber threats, many are turning to SOCaaS for expert cybersecurity services. SOC as a Service offers continuous monitoring, threat detection, and incident response capabilities to safeguard organizations against cyberattacks. The combination of cyber insurance and SOCaaS plays a crucial role in comprehensive risk management.

1. Proactive Risk Mitigation

SOC as a Service (SOCaaS) plays a vital role in cyber insurance by offering proactive risk mitigation. SOCaaS providers employ advanced technologies and skilled analysts to continuously monitor an organization’s network, systems, and applications in real-time. This early detection and prevention of potential cyber threats can reduce the likelihood of security incidents that may trigger cyber insurance claims.

2. Timely Incident Response

In the event of a cyber incident, SOCaaS providers respond promptly to contain and mitigate the impact of the breach. Their swift actions can minimize the extent of damage and potentially prevent the need for a cyber insurance claim. SOCaaS empowers organizations to act quickly and decisively, limiting financial losses and protecting their reputation.

3. Enhanced Cybersecurity Posture

SOCaaS enhances an organization’s overall cybersecurity posture by continuously identifying vulnerabilities and areas of improvement. By addressing these weaknesses, organizations can lower their overall cyber risk profile, potentially leading to reduced cyber insurance premiums. The collaborative efforts of SOCaaS and cyber insurance create a proactive approach to cybersecurity, ensuring organizations are well-prepared to handle cyber threats.

4. Risk Assessment and Insights

SOCaaS providers can collaborate with cyber insurance companies to conduct risk assessments and provide valuable insights into an organization’s security preparedness. This information can assist insurance underwriters in accurately evaluating an organization’s risk profile and offering appropriate coverage. The data and analysis from SOCaaS contribute to a more comprehensive understanding of an organization’s cyber risk exposure, enabling insurance providers to tailor policies to meet specific needs.

5. Comprehensive Incident Reporting

SOCaaS generates detailed incident reports, documenting the nature and extent of cyber incidents. These reports can serve as essential documentation during the cyber insurance claim process, facilitating a smoother and more efficient resolution. The comprehensive incident reporting from SOCaaS ensures that cyber insurance claims are well-documented and supported by accurate and timely information.

6. Continuous Monitoring and Detection

SOCaaS provides continuous monitoring and threat detection, significantly reducing the time between a cyber incident’s occurrence and its detection. This swift detection is critical for cyber insurance claims, as it allows organizations to respond promptly and minimize the impact of the breach. The proactive monitoring capabilities of SOCaaS bolster an organization’s ability to detect and address cyber incidents quickly and effectively.

7. Regulatory Compliance Support

SOCaaS helps organizations stay in compliance with various regulatory requirements by monitoring and identifying potential security gaps that might result in non-compliance. Adhering to regulatory standards is crucial for maintaining insurance coverage, and SOCaaS ensures that organizations have the necessary security measures in place to meet regulatory obligations.

Conclusion

In the face of ever-evolving cyber threats, businesses must adopt a multi-faceted approach to cybersecurity. Cyber insurance and SOC as a Service (SOCaaS) form a powerful alliance, complementing each other to effectively manage cybersecurity risks. While cyber insurance provides financial protection in the aftermath of a cyber incident, SOCaaS offers proactive monitoring and incident response capabilities to prevent and detect security breaches. Together, these solutions create a robust defense against cyber threats, empowering organizations to navigate the digital landscape with confidence and resilience. As cyber risks continue to evolve, embracing both cyber insurance and SOCaaS becomes imperative for organizations seeking comprehensive cybersecurity risk management.

 

Image by Freepik

The post Cyber Insurance and SOC as a Service – Adapting to New Cybersecurity Challenges appeared first on Cybersecurity Insiders.

October 08, 2023 at 01:11AM

Read More