Duncan Riley
Latest from Duncan Riley
Black Basta ransomware group suspected in Ascension data theft incident
U.S. healthcare provider Ascension has provided more details of its “cyber security event” last month, admitting that data was stolen, with some reports also suggesting that the Black Basta ransomware gang was behind the attack. One of the largest nonprofit and Catholic health systems in the U.S. and also the second-largest operator of hospitals in ...
SailPoint launches AI-powered application onboarding for enhanced identity security
Identity security company SailPont Technologies Inc. today launched a new artificial intelligence-powered application onboard capability to enable customers to integrate critical business applications seamlessly. The new capability, offered as part of the SailPoint Identity Security Cloud, has been designed to simplify the process of integrating critical business applications. Through the automation of the onboarding process, ...
Microsoft’s Brad Smith acknowledges past security failures, outlines new initiatives
Microsoft Corp. President Brad Smith said before a House Committee on Homeland Security hearing today that the company acknowledges its past security shortcomings and detailed new initiatives to bolster defenses. The testimony came as a former employee claimed that Microsoft ignored his warnings about vulnerabilities in Active Directory, which ultimately led to the hack of ...
Report finds enterprise SIEM tools are underperforming in cyberthreat detection
A new report out today from artificial intelligence-powered security engineering startup CardinalOps Ltd. has found that enterprise security information and event management tools are falling short in detecting cyberthreats. The report, based on the analysis of 3,000 detection rules and 1.2 million log sources from major SIEMs, including Splunk Inc., Microsoft Sentinel, IBM QRadar and ...
Black Basta suspected of using patched Windows flaw in recent cyberattacks
A new report released today by the Threat Hunter Team at Symantec warns that attackers linked to the Black Basta ransomware gang may be exploiting a recently patched Windows privilege escalation vulnerability. The vulnerability, designated CVE-2024-26169, is found in the Windows Error Reporting Service and if exploited, can permit attackers to elevate their privileges. The vulnerability was ...
Tile’s parent company Life360 discloses data breach and extortion threat
Life360 Inc., the company that owns the Tile location tracking company, has disclosed that it has recently become a victim of a “criminal extortion attempt” relating to stolen data. Similarly to Apple Inc. and its AirTag, Tile produces small Bluetooth-enabled devices that help users locate and track items such as keys, wallets and bags. The ...
Terraform Labs and co-founder Do Kwon agree to $4.47B settlement with SEC
Terraform Labs Pte. Ltd. and its co-founder, Do Kwon, have agreed to pay $4.47 billion to settle a lawsuit brought against them by the U.S. Securities and Exchange Commission following the collapse of its TerraUSD and Luna token in 2022. The details of the settlement were listed in a court filing, which states that Terraform ...
Rust Foundation and industry leaders launch Safety-Critical Rust Consortium
The Rust Foundation, which supports the development of the popular open-source Rust programming language, joined with several prominent organizations today to launch of the Safety-Critical Rust Consortium, a new organization that aims to promote the responsible use of Rust in safety-critical software. Along with the Rust Foundation, the Rust Consortium’s founding members include Ada Core Technologies ...
Cofense warns of rising remote-access trojan infections as malware becomes more sophisticated
A new report released today by phishing detection and response solutions company Cofense Inc. is warning that a remote access trojan first detected in 2020 is currently running wild and being increasingly used in phishing malware campaigns. The RAT in question is called STR RAT and is mostly delivered directly via email as opposed to an embedded ...
Pyte secures $5M to expand secure computation in regulated industries
Secure computation platform startup Pyte announced today that it has raised $5 million in new funding to commercialize its technology in new industries, with a primary focus on highly regulated sectors such as financial services and healthcare. Founded in 2020, Pyte offers security data collaboration solutions that allow organizations to collaborate on sensitive data while ...









