Data Theft Drove 94% of Cyberattacks in 2024

Data Theft Drove 94% of Cyberattacks in 2024

Data theft accounted for 94% of all cyber attacks worldwide in 2024, according to new research, as cybercriminals increasingly combine data exfiltration with encryption in ransomware campaigns. Beyond encryption, ransomware attackers now threaten to leak or sell a company’s data on the dark web if victims refuse to pay. Stolen information often includes personally identifiable data and proprietary intellectual property. The findings come from BlackFog’s 2024 Ransomware Trend Report, which analysed ransomware activity across hundreds…

Read More

US Sanctions Chinese Cybersecurity Firm for Ransomware Attack

US Sanctions Chinese Cybersecurity Firm for Ransomware Attack

The U.S. has sanctioned Sichuan Silence, a Chinese cybersecurity firm involved in ransomware attacks targeting critical infrastructure in 2020. One of its employees, Guan Tianfeng, has also been charged individually. Guan, a security researcher, discovered a zero-day vulnerability in a firewall product developed by U.K.-based security firm Sophos. He exploited the vulnerability, designated CVE 2020-12271, using a SQL injection attack that retrieved and remotely executed a script from a malicious server. Guan and his co-conspirators…

Read More

The Countdown Has Begun: Getting Started on Your Post-Quantum Journey

The Countdown Has Begun: Getting Started on Your Post-Quantum Journey

If you’re involved in network security, you’ve likely heard about the threat of quantum computers and the need for post-quantum cryptography (PQC). What you may not be so familiar with is the immediacy of the risk. “Q-Day” is coming — a moment when cryptanalytically relevant quantum computing (CRQC) will be able to break all public-key cryptography systems in operation today. Malicious actors are harvesting encrypted data that they anticipate decrypting once Q-Day arrives. Known as…

Read More