WIRED: The International Criminal Court Will Now Prosecute Cyberwar Crimes

WIRED: The International Criminal Court Will Now Prosecute Cyberwar Crimes. “In a little-noticed article released last month in the quarterly publication Foreign Policy Analytics, the International Criminal Court’s lead prosecutor, Karim Khan, spelled out that new commitment: His office will investigate cybercrimes that potentially violate the Rome Statute, the treaty that defines the court’s authority to prosecute illegal acts, including war crimes, crimes against humanity, and genocide.”

Lapsus$: Court finds teenagers carried out hacking spree (BBC)

BBC: Lapsus$: Court finds teenagers carried out hacking spree. “A court has found an 18-year-old from Oxford was a part of an international cyber-crime gang responsible for a hacking spree against major tech firms. Arion Kurtaj was a key member of the Lapsus$ group which hacked the likes of Uber, Nvidia and Rockstar Games. A court heard Kurtaj leaked clips of the unreleased Grand Theft Auto 6 game while on bail in a Travelodge hotel.”

The Register: Inside the Black Hat network operations center, volunteers work in geek heaven

The Register: Inside the Black Hat network operations center, volunteers work in geek heaven. “Every summer, pandemics permitting, a group of volunteers gather in a Las Vegas hotel to run one of the more unusual examples of IT infrastructure on the planet: the Black Hat network operations center. With more than 20,000 conference attendees spending the best part of a week attending classes to hone security skills, and talks about the latest exploits, you’d expect the network to be under constant assault. Attacks do happen, but as one of the NOC crew explained to The Register, not as often as you might think.”

Engadget: America’s original hacking supergroup creates a free framework to improve app security

Engadget: America’s original hacking supergroup creates a free framework to improve app security. “Cult of the Dead Cow (cDc), a hacking group known for its activist endeavors, built an open source tool for developers to build secure apps. Veilid, launched at DEF CON on Friday, has options like letting users opt out of data collection and online tracking as a part of the group’s mission to fight against the commercialization of the internet.”

The Register: DEF CON to set thousands of hackers loose on LLMs

The Register: DEF CON to set thousands of hackers loose on LLMs. “The collaborative event, which AI Village organizers describe as ‘the largest red teaming exercise ever for any group of AI models,’ will host ‘thousands’ of people, including ‘hundreds of students from overlooked institutions and communities,’ all of whom will be tasked with finding flaws in LLMs that power today’s chat bots and generative AI.”

Bleeping Computer: North Korean hackers using Chrome extensions to steal Gmail emails

Bleeping Computer: North Korean hackers using Chrome extensions to steal Gmail emails. “Kimsuky (aka Thallium, Velvet Chollima) is a North Korean threat group that uses spear phishing to conduct cyber-espionage against diplomats, journalists, government agencies, university professors, and politicians. Initially focused on targets in South Korea, the threat actors expanded operations over time to target entities in the USA and Europe.”

Kyiv Post: Russian Citizens Wage Cyberwar From Within

Kyiv Post: Russian Citizens Wage Cyberwar From Within. “Earlier today, Oct. 2, Kyiv Post was contacted by hackers who identified themselves as part of the National Republican Army (NRA). As Kyiv Post has reported before, the NRA is an organization of Russian citizens seeking the overthrow of the Putin Government. The NRA hackers explained to Kyiv Post that they had executed an advanced ransomware attack on the network of Unisoftware, a Russian software development company known for the development and implementation of web applications, desktop systems, cloud, and API solutions.”

Ars Technica: Numerous orgs hacked after installing weaponized open source apps

Ars Technica: Numerous orgs hacked after installing weaponized open source apps. “Hackers backed by the North Korean government are weaponizing well-known pieces of open source software in an ongoing campaign that has already succeeded in compromising ‘numerous’ organizations in the media, defense and aerospace, and IT services industries, Microsoft said on Thursday.”

CNN: Hackers actively supporting Iran’s domestic and foreign spying efforts, researchers warn

CNN: Hackers actively supporting Iran’s domestic and foreign spying efforts, researchers warn. “A group of prolific Iranian hackers has likely been key to Iran’s Islamic Revolutionary Guard Corps efforts to track its domestic and foreign adversaries in recent years by targeting US government officials, Iranian dissidents and journalists, according to new research published Wednesday.”

US: Chinese govt hackers breached telcos to snoop on network traffic (Bleeping Computer)

Bleeping Computer: US: Chinese govt hackers breached telcos to snoop on network traffic. “Several US federal agencies today revealed that Chinese-backed threat actors have targeted and compromised major telecommunications companies and network service providers to steal credentials and harvest data. As the NSA, CISA, and the FBI said in a joint cybersecurity advisory published on Tuesday, Chinese hacking groups have exploited publicly known vulnerabilities to breach anything from unpatched small office/home office (SOHO) routers to medium and even large enterprise networks.”