Monday , January 27 2025

International Counter-Ransomware Initiative
40 countries to sign a agreement not to pay ransom

40 countries will sign a pledge to stop paying ransoms demanded by cybercriminal groups at the International Counter-Ransomware Initiative summit in Washington, D.C.

Anne Neuberger, Deputy National Security Adviser for Cyber and Emerging Technology at the White House, suggested that this initiative is a response to the increasing global threat of ransomware attacks. She stated that the United States has been targeted in around 46% of these incidents.

UnitedHealth confirms 190 million impacted by 2024 data breach

UnitedHealth confirmed that the ransomware attack on its Change Healthcare unit last February impacted about 190 million Americans, nearly double...
Read More
UnitedHealth confirms 190 million impacted by 2024 data breach

Registration Open For BCS CTF 2025

So, to test your cyber security skill, here is another chance to do that. Bangladesh computer society (BCS) is going...
Read More
Registration Open For BCS CTF 2025

New Ransomware Tactics Target VMware ESXi Via SSH Tunneling

Sygnia's recent report highlights the changing strategies of ransomware groups targeting VMware ESXi appliances. These attackers exploit vital virtual infrastructure...
Read More
New Ransomware Tactics Target VMware ESXi Via SSH Tunneling

Palo Alto Firewalls Found Vulnerable to Secure Boot Bypass

An exhaustive evaluation of three firewall models from Palo Alto Networks has uncovered a host of known security flaws impacting...
Read More
Palo Alto Firewalls Found Vulnerable to Secure Boot Bypass

CISA Releases 6 ICS Advisories Detailing Security Issues

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) released 6 advisories for Industrial Control Systems (ICS), highlighting vulnerabilities in various...
Read More
CISA Releases 6 ICS Advisories Detailing Security Issues

Account Credentials for Security Vendors Found on Dark Web: Cyble Report

# "While many leaked security credentials belong to customers, some exposed sensitive accounts suggest that security vendors too have been...
Read More
Account Credentials for Security Vendors Found on Dark Web: Cyble Report

Four Critical Ivanti CSA Vulnerabilities Exploited: CISA , FBI warns

The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have released a joint Cybersecurity Advisory...
Read More
Four Critical Ivanti CSA Vulnerabilities Exploited: CISA , FBI warns

GitLab Releases Patch (CVE-2025-0314) for XSS Exploit

GitLab has released update for high severity cross-site scripting (XSS) flaw. Versions 17.8.1, 17.7.3, and 17.6.4 for both Community Edition...
Read More
GitLab Releases Patch  (CVE-2025-0314) for XSS Exploit

CVE-2025-20156
Cisco Fixes Meeting Management Allowing Privilege Escalation

Cisco has released a security advisory concerning a critical privilege escalation vulnerability (CVE-2025-20156) in its Meeting Management software. With a...
Read More
CVE-2025-20156  Cisco Fixes Meeting Management Allowing Privilege Escalation

Delay patching leaves about 50,000 Fortinet firewalls to zero-day attack

Fortinet customers must apply the latest updates, as almost 50,000 management interfaces remain vulnerable to the latest zero-day exploit. The...
Read More
Delay patching leaves about 50,000 Fortinet firewalls to zero-day attack

ALSO READ:

Ransomware Attacks Up More Than 95% Over 2022

Starting Wednesday, international discussions during the summit will also focus on strategies to block the funds used by ransomware groups to finance their operations, Reuters first reported.

“Ransomware is an issue that knows no borders,” Anne Neuberger, the White House’s deputy national security adviser for cyber and emerging technology, told reporters during a briefing on Monday. “And as long as there’s money flowing to ransomware criminals … the problem will continue to grow.”

The Counter-Ransomware Initiative is taking steps to enhance its members’ ability to combat these attacks, in addition to its no-ransoms pledge.

Members of the initiative will use artificial intelligence to analyze blockchains — immutable digital ledgers of payment activity — to help identify ransomware payments flowing through cryptocurrency platforms. They will also maintain a shared blacklist of ransomware gangs’ cryptocurrency wallets, making it easier for members to identify illicit payment flows and alert their domestic cryptocurrency firms to block or freeze those transactions. And members will pledge to help each other respond to any ransomware attacks affecting government agencies or vital sectors like health care, energy and communications.

Two new information sharing platforms will help members exchange data about ransomware operators, their tools, and techniques. Lithuania operates one platform, while Israel and the United Arab Emirates jointly run the other. The platforms serve different purposes and countries are encouraged to use the one they prefer. The U.S. expects each country to share at least one threat information every week.

The group’s agenda for the next year will consist of raising awareness of where these hackers operate, where they’re able to rent or steal access to computer servers and “how to implement accountability on that,” according to the senior administration official.

The biggest antagonists in cyberspace — Russia, China, Iran and North Korea — aren’t members of the initiative and have repeatedly ignored U.S. pleas to stamp out malicious cyber activity emanating from within their borders. There is no clear plan for getting them to crack down on cybercrime.

Source: Reuters, messenger

 

Check Also

D3FENDTM 1.0

MITRE Launches D3FEND 1.0; The Milestone for Cybersecurity Ontology

MITRE launched D3FENDTM 1.0, a cybersecurity framework that provides a vocabulary and understanding of the …