Mathew J. Schwartz

Executive Editor, DataBreachToday & Europe, ISMG

Schwartz is an award-winning journalist with two decades of experience in magazines, newspapers and electronic media. He has covered the information security and privacy sector throughout his career. Before joining Information Security Media Group in 2014, where he now serves as the executive editor, DataBreachToday and for European news coverage, Schwartz was the information security beat reporter for InformationWeek and a frequent contributor to DarkReading, among other publications. He lives in Scotland.

North Korea Exploited Windows Zero-Day to Deploy Fudmodule

Mathew J. Schwartz • August 20, 2024

North Korea's Lazarus hacking team, which focuses on cryptocurrency theft and espionage, has once again been exploiting a zero-day vulnerability in Microsoft Windows to install antivirus-suppressing malware dubbed Fudmodule to aid its intrusions.

Background Check Firm National Public Data Confirms Breach

Mathew J. Schwartz • August 19, 2024

Background check firm Jericho Pictures, which does business as National Public Data, is notifying 1.3 million individuals that their personal information was stolen via a December 2023 breach of its systems. The stolen information was listed for sale on a cybercrime market beginning in April.

Russian Sentenced to 3 Years for Selling Stolen Identities

Mathew J. Schwartz • August 16, 2024

Russian national Georgy Kavzharadze, 27, has been sentenced to serve 40 months in U.S. prison after pleading guilty to earning over $200,000 by selling stolen U.S. bank account access credentials via the illicit Slilpp stolen-credential marketplace.

Revoked DigiCert Digital Certificates: 27% Not Yet Replaced

Mathew J. Schwartz • August 15, 2024

Thousands of organizations appear to still be struggling to comply with a forced, mass revocation of thousands of digital certificates issued by DigiCert using a buggy verification mechanism. Researchers recently said 27% of the 83,267 revoked certificates have yet to be redeployed by customers.

The Upside-Down, Topsy-Turvy World of Ransomware

Mathew J. Schwartz • August 14, 2024

How many ransomware victims pay their attackers a ransom precisely to avoid having their names listed - or their stolen data dumped - on a ransomware group's data leak blog? We don't know, but leak site posts don't correlate well with security firms' telemetry data.

FBI Seizes Servers Powering Dispossessor Ransomware Group

Mathew J. Schwartz • August 13, 2024

The FBI said it led the disruption of a ransomware group called Dispossessor, aka Radar, that amassed victims in dozens of countries. An international dismantling of the group's alleged infrastructure seized servers in the U.S., the U.K. and Germany, as well as multiple domain names.

Trump Leak Likely a Harbinger of More Interference to Come

Mathew J. Schwartz • August 12, 2024

Cybersecurity experts are urging election campaign officials and policymakers to revisit their defenses in the wake of the Trump campaign confirming it was breached and that internal documents were stolen and leaked as part of an apparent foreign disinformation campaign.

Delta Versus CrowdStrike and Microsoft: Accusations Fly

Mathew J. Schwartz • August 9, 2024

Delta Air Lines' war of words against CrowdStrike and Microsoft over its extended IT outage continue to escalate, with the airline threatening litigation to recover $500 million in lost revenue and expenses. CrowdStrike and Microsoft have pledged to vigorously fight any such litigation.

Feds Drop Probe Into Progress Software Over MOVEit Zero-Day

Mathew J. Schwartz • August 8, 2024

Progress Software said the U.S. Securities and Exchange Commission has dropped its probe into the business, launched after attackers exploited a zero-day flaw in its MOVEit secure file transfer software to steal data pertaining to over 2,770 organizations and 95 million individuals.

Ransomware Leads to $30M in Lost Income at Sonic Automotive

Mathew J. Schwartz • August 6, 2024

Ransomware attacks are continuing to lead to losses, to the tune of $30 million for automotive retail giant Sonic Automotive due to the attack disrupting car dealership software service provider CDK Global, and separately $17 million for printed circuit board assembly maker Key Tronic.

CrowdStrike Rejects Delta's Negligence Claims Over IT Outage

Mathew J. Schwartz • August 5, 2024

CrowdStrike has dismissed claims of negligence leveled at it by Delta Air Lines, which is threatening to sue after a faulty security software update led to days of IT disruption. In response, the cybersecurity vendor is asking why Delta's competitors recovered so much more quickly.

Ever More Toxic Ransomware Brands Breed Lone Wolf Operators

Mathew J. Schwartz • August 1, 2024

Following the demise or disruption of both the LockBit and BlackCat - aka Alphv - ransomware groups, more attackers than ever before are choosing to work as lone wolves rather than under the banner of increasingly toxic brands - due to the risk they pose, ransomware watchers report.

Bad Certificate Revocation: DigiCert Offers Temporary Pause

Mathew J. Schwartz • July 31, 2024

DigiCert said it will temporarily pause - on request - for up to three days the forced revocation of some digital certificates it issued that failed to comply with strict validation rules. The CA/Browser Forum requires any certificate with validation problems to be revoked within 24 hours.

Microsoft Azure Cloud Service Fails to Withstand DDoS Attack

Mathew J. Schwartz • July 31, 2024

Microsoft blamed a widespread Azure cloud computing platform service outage, including Microsoft 365 problems, on its failure to stop a distributed denial-of-service attack after "an error in the implementation of our defenses amplified the impact of the attack rather than mitigating it."

Study: Average Cost of a Data Breach Rises to $4.9 Million

Mathew J. Schwartz • July 30, 2024

Data breaches continue to grow more costly, with the average cost of a breach hitting an all-time high of $4.9 million, driven by greater business disruption and post-breach customer support and remediation expenses, according to the latest annual Cost of a Data Breach Report from IBM.

«
1
2 (current)
3
4
…
73
»

«
1
2 (current)
3
4
…
73
»