$7 billion in cryptocurrency has been illicitly laundered through cross-chain crime, with the North Korea-linked Lazarus Group attributed to the theft of about $900 million between July 2022 and July 2023. According to the blockchain analytics company Elliptic, cryptocurrency crime is shifting to chain- or asset-hopping typologies as mixers continue to face seizures and sanctions scrutiny.

The US cybersecurity agency CISA and the NSA have recently issued new guidance on addressing the most common cybersecurity misconfigurations in large organizations.  CISA and NSA noted that misconfigurations impact many organizations, including those that have achieved a mature security posture.  CISA and NSA argued that these misconfigurations illustrate a trend of systemic weaknesses and underline the importance of adopting secure-by-design principles during the software development process.

In August, Group-IB found GoldDigger, an Android Trojan, targeting over 50 financial organizations in Vietnam. Since June, when Group-IB's intelligence unit discovered more than ten fake websites spoofing Google Play Store pages, the Trojan has been active. GoldDigger aims to steal banking credentials. It uses the Accessibility Service to steal personal information and intercept SMS messages when installed and activated. The malware avoids detection by masquerading as a fake Android app, spoofing a Vietnamese government portal and an energy company in at least two variants.

2023 saw double the total of software supply chain attacks that occurred in 2019-2022. In 2023, Sonatype logged 245,032 malicious packages. One out of every eight open-source downloads now contains known and avoidable risks. Almost all (96 percent) vulnerabilities can still be prevented. In 2023, 2.1 billion open-source software (OSS) downloads with known vulnerabilities could have been avoided due to the availability of a better, patched version. Suboptimal open-source consumption habits are the primary cause of open-source risk.

MGM Resorts International recently announced that a cyberattack that disrupted its operations last month would cause a $100 million hit to its third-quarter results as it works to restore its systems.  MGM also noted that it expects to incur less than $10 million as a related one-time cost in the quarter ended on Sept. 30.  A hacking group named AlphV claimed it was involved in the breach.  MGM has declined to comment whether it was asked for or paid any ransom.

Researchers at Carnegie Mellon University's (CMU) CyLab Security and Privacy Institute have been working on privacy nutrition labels for over a decade to easily show technology users how their data is being collected and used. In recent years, Apple has required app developers to disclose this information through privacy labels displayed in the iOS App Store. However, recent research has revealed that app developers struggle to create accurate privacy labels.

Cybersecurity researcher Jeremiah Fowler discovered and reported an unsecured database containing over three million records to vpnMentor. The documents were related to internal invoices, communications, and customers' stored Customer Relationship Management (CRM) files. Additional investigation revealed that the database belonged to the global B2B CRM provider known as Really Simple Systems. Cloud-based CRM systems enable organizations to manage customer interactions, store documents, and more, from anywhere.

Cybersecurity experts call for a new, more collaborative, and transparent strategy to combat cyberattacks. Although 99 percent of attempted cyberattacks are thwarted, the remaining 1 percent cause economic harm and significant reputational, legal, and personal damages. Associate Professor Mamello Thinyane, the Optus Chair of Cybersecurity and Data Science at the University of South Australia, emphasizes that individuals, businesses, and governments must all share the responsibility.

A government entity in Guyana has been targeted as part of Operation Jacana, a cyber espionage campaign. The activity, discovered by ESET in February 2023, involved a spear-phishing attack that resulted in the launch of a previously undocumented C++ implant called DinodasRAT. The cybersecurity company noted that it could link the intrusion to a known threat actor or group, but attributed with medium confidence to China-nexus adversary due to the use of PlugX, also known as Korplug, a Remote Access Trojan (RAT) commonly used by Chinese hacking groups.

Jack Chapman, VP of Threat Intelligence at Egress, has emphasized that chatbots or Large Language Models (LLMs) have lowered the barrier for entry to cybercrime, making it possible for less-skilled threat actors to construct well-written phishing campaigns and generate malware. However, according to Chapman, one of LLMs' most concerning but least discussed applications is reconnaissance for highly targeted attacks. Within seconds, a chatbot can scrape the Internet for open-source information about a target. This information can then be used as a pretext for social engineering campaigns.