What's up with the cyber world?

Following the CrowdStrike BSOD chaos, over 150 phishing domains surfaced within days. Attackers were quick to exploit the widespread panic, launching targeted campaigns.

The Black Hat 2024 Summit in Las Vegas drew over 20,000 attendees, featuring keynotes from Jeff Moss and Katie Moussouris. Highlights included AI-driven attacks and defenses, zero-day exploits, supply chain security, and quantum cryptography. Over 100 sessions explored evolving threats and proactive defense strategies for the cybersecurity landscape.

NullBulge, an hacktivist group active since early 2024, targets AI apps and gaming platforms. While claiming to protect artists, they use sophisticated malware like LockBit for data theft and extortion, focusing on supply chain attacks. They made headlines when they leaked Disney's internal Slack conversations.

The Securities and Exchange Board of India (SEBI) issued new cybersecurity directives, effective January 2025, requiring enhanced security monitoring. A Cyber Capability Index will assess the cybersecurity maturity of both domestic and international entities operating in India's financial markets

Cybercriminals are leveraging deepfake-technology for precision-targeted social engineering attacks. In recent months, there has been an alarming trend in the use of deepfake voice and video to manipulate financial transfers.

Employees of crypto firm Unicoin were locked out of Google products for four days, with investigations suggesting insider involvement. Experts say this incident could reflect the growing trend of crypto companies unknowingly hiring hackers linked to the North Korean government.

A sharp uptick in supply chain attacks was revealed in July and August. Threat actors are doubling down on third-party vendors, exploiting trust relationships to breach core networks.

NIST has finalized three quantum-resistant encryption standards designed to protect against future quantum computer threats. These standards, focused on encryption and digital signatures, mark a significant step in safeguarding critical data and securing digital communications against potential quantum cyberattacks.