A Russian national has been arrested in Arizona on charges alleging that he was involved in multiple LockBit ransomware attacks against victims in the U.S., Asia, Europe and Africa. The LockBit ransomware gang, which first emerged in 2020, operates on a ransomware-as-a-service model where affiliates use already developed ransomware to execute attacks. In its time, LockBit ...

The number of victims targeted by the Clop ransomware gang’s targeting of a critical vulnerability in Progress Software Corp.’s MOVEit file transfer software continues to grow, with the revelation today that the victims now include several U.S. government agencies. Although a full list of agencies targeted was not disclosed by Cybersecurity & Infrastructure Agency officials ...

Artificial intelligence security and trust software firm Cranium.ai Corp. has today announced the launch of Cranium AI Card, a tool designed to help organizations gather and share information about the trustworthiness and compliance of their AI models. AI Card has been designed to address issues of trustworthiness, security and regulatory compliance associated with AI models. The tool offers a transparent and ...

Risk-based patch management startup Action1 Corp. has today announced that it has raised $20 million in new funding for research and development, focusing specifically on implementing zero-knowledge architecture into its platform. Founded in 2018, Action1 pitches itself as the No. 1 risk-based patch management platform for distributed networks. The company’s platform assists organizations in discovering, prioritizing and ...

Cybersecurity startup Valence Security Inc. today announced AI Assistant, a new service integrating generative AI and OpenAI LP technologies into its Collaborative SaaS Security Remediation Platform. The company argues that understanding and managing security for various software-as-a-service applications can be daunting for security teams. The distinctive aspects of each application, such as terminology, permissions, data models and security ...

A new report from cloud forensics and incident response platform startup Cado Security Ltd. has detailed and warned that an emerging Romanian threat actor named Diicot, formerly known as Mexals, is running a new campaign involving previously unreported brute-forcing malware payloads. Diicot, previously known for conducting cryptojacking campaigns and offering malware-as-a-service, has been active since at least 2020. ...

The Overture Maps Foundation today announced the release of the Overture Data Schema and the Overture Global Entity Reference System to aid in creating and navigating open map data. Although the name may not be well-known, the Overture Maps Foundation was established by Amazon Web Services Inc., Microsoft Corp., Meta Platforms Inc. and GPS navigator maker TomTom NV in December ...

Cyberthreat intelligence data provider Cybersixgill today announced the launch of Cybersixgill IQ, a new generative artificial intelligence solution designed to redefine cyberthreat intelligence. Cybersixgill IQ draws on extensive intelligence data from Cybersixgill, officially named SixGill Inc., including hard-to-access deep and dark web sources, enabling users at various security maturity levels to access and benefit from cyberthreat intelligence, known as ...

A new report today from business email compromise cybersecurity startup Abnormal Security Corp. details how threat actors are increasingly harnessing the power of generative artificial intelligence to produce more convincing phishing and malware attacks. The report covers how cybercriminals exploit AI platforms like OpenAI LP’s ChatGPT and Google Bard to craft impeccably written, error-free emails that could be ...

Threat intelligence startup Silent Push Inc. today officially launched and announced it has raised $10 million in seed funding from Ten Eleven Ventures LLC. Co-founded by former FireEye Inc. Vice President Ken Bagnall and FireEye Research Labs Director John Jensen, Silent Push has been designed to operate a standalone solution or integrate into existing security ...