A Ukrainian national charged with operating the Raccoon Infostealer malware-as-a-service (MaaS) has recently made an appearance in a US court after being extradited from the Netherlands.  Mark Sokolovsky, 28, was arrested in March 2022 after the FBI and law enforcement agencies in Italy and the Netherlands dismantled the Raccoon Infostealer infrastructure.  In October 2022, Sokolovsky was indicted in the US for his involvement in the distribution of the Raccoon Infostealer malware to millions of computers worldwide.

A KAUST research team has developed a Machine Learning (ML) approach that addresses a major medical research challenge by integrating an ensemble of privacy-preserving algorithms. The challenge is using the power of Artificial Intelligence (AI) to accelerate genomic data discovery while protecting individuals' privacy. According to KAUST's Xin Gao, omics data typically contains a large amount of private information, such as gene expression and cell composition. This information can often be linked to a person's disease or health status.

Los Alamos National Laboratory (LANL) researchers are using Artificial Intelligence (AI) to address significant shortcomings in large-scale malware analysis, improving the classification of Microsoft Windows malware and taking more steps towards improved cybersecurity measures. Through their method, the team set a new world record for classifying malware families. The team's approach achieves realistic malware family classification using semi-supervised tensor decomposition methods and selective classification, specifically the reject option.

Faculty and students from CyLab, Carnegie Mellon University's security and privacy research institute, will present on various topics at the 31st Annual Network and Distributed System Security (NDSS) Symposium. CyLab has compiled a list of papers co-authored by its members that will be presented at the event. One of the papers is titled "Group-based Robustness: A General Framework for Customized Robustness in the Real World." Machine Learning (ML) models have been found to be vulnerable to evasion attacks that perturb model inputs and cause misclassifications.

According to the Cybersecurity and Information Systems Information Analysis Center (CSIAC), the average code sample has 6,000 defects per million lines of code, with the Software Engineering Institute (SEI) at Carnegie Mellon University (CMU) discovering that 5 percent of these defects become vulnerabilities. This turns into about three vulnerabilities per 10,000 lines of code. The question is whether ChatGPT can help improve this ratio.

Cyberattacks are increasing, posing a risk of stolen personal data for 400 million users and prompting US governments to introduce Breach Notification Laws (BNLs). These laws require companies to notify consumers if their data has been breached. However, in a paper recently published in The Review of Law & Economics, Brad Greenwood, an information systems professor at George Mason University's Donald G Costello College of Business, and his co-author Paul M. Vaaler of the University of Minnesota discovered that BNLs had little to no effect on security and protection in general.

Google launched the AI Cyber Defense Initiative to use Artificial Intelligence (AI) to improve cybersecurity and reverse the "Defender's Dilemma". Magika, an AI-powered tool for file type identification to detect malware, is being open-sourced as part of this initiative. Google also announced a new AI for Cybersecurity group consisting of 17 startups from the US, UK, and the EU. The group will help bolster the transatlantic cybersecurity ecosystem by introducing internationalization strategies, AI tools, and the skills to use them.

Threat actors are using Amazon Web Services Simple Notification Service (AWS SNS) and a custom bulk-messaging spam script called SNS Sender in an ongoing "smishing" campaign that impersonates the US Postal Service. Like businesses, threat actors are moving their workloads to the cloud instead of handling them through traditional web servers. This shift poses a significant business risk to organizations whose legitimate cloud instances have been compromised by attackers trying to piggyback on their AWS capabilities.

Multiple cryptocurrency sector companies are being targeted in an ongoing malware campaign involving a newly discovered Apple macOS backdoor called RustDoor. Bitdefender first documented RustDoor, describing it as a Rust-based malware that can upload files, gather information about the infected machines, and more. It is distributed under the guise of a Visual Studio update. Prior evidence revealed at least three different variants of the backdoor. This article continues to discuss new findings regarding the RustDoor Apple macOS backdoor.

Security researchers have discovered that the Alpha ransomware payload and modus operandi overlap with the now-defunct NetWalker ransomware operation. NetWalker was a Ransomware-as-a-Service (RaaS) active between October 2019 and January 2021. Law enforcement took down its dark web sites, forcing its operators to go silent. The Alpha ransomware, not to be confused with ALPHV/BlackCat, first appeared in February 2023, but its operators kept a low profile, did not promote on hacker forums, and did not launch many attacks.