article thumbnail

Financially motivated Earth Lusca threat actors targets organizations worldwide

Security Affairs

A sophisticated threat actor, tracked as Earth Lusca, is targeting government and private organizations worldwide as for financial purposes. The Winnti group was first spotted by Kaspersky in 2013, but according to the researchers the gang has been active since 2007.

article thumbnail

The Week in Cyber Security and Data Privacy: 4 – 10 March 2024

IT Governance

The Internet Crime Report 2023 also reports that four online crimes caused the most financial losses in the US last year: BEC (business email compromise), investment fraud, ransomware, and tech/customer support and government impersonation scams. You can find out more about them on the PCI Security Standards Council’s website.

article thumbnail

The Week in Cyber Security and Data Privacy: 26 February – 3 March 2024

IT Governance

It also has a new focus on governance, which encompasses how organizations make and carry out informed decisions on cybersecurity strategy”. 30 April 2024 – ISO/IEC 27001:2013 certification unavailable Certification bodies must stop offering (re)certification to ISO 27001:2013 by 30 April. NIST CSF 2.0