NioCorp BEC scam, Australian IVF breach, SEC’s cyber unit
Feb 21, 2025
auto_awesome
A minerals company suffers a hefty $500,000 loss due to a Business Email Compromise scam. Meanwhile, an Australian IVF provider faces a cyber incident, raising concerns over data security. The SEC is reforming its strategy, replacing its cryptocurrency fraud unit with a focus on emerging technologies for better investor protection. Additionally, deceptive job ads pose new threats to developers, linked to a North Korea campaign targeting GitHub users.
NIOCorp Developments suffered a $500,000 loss due to a deceptive business email compromise, highlighting vulnerabilities in corporate email systems.
The SEC is shifting its focus to cyber and emerging technologies, reflecting the need for heightened regulatory responses to evolving cyber threats.
Deep dives
Minerals Company Suffers Major Financial Loss
A minerals company, NIOCorp Developments, experienced a significant financial setback due to a business email compromise scam, losing $500,000 intended for a vendor. The attackers gained access to the company's information systems, including its email setup, and redirected the funds without detection. In response to this security breach, NIOCorp has alerted regulators and is actively investigating the incident to assess the full extent of the damage. The company is implementing remedial actions to secure their systems and prevent future occurrences of such attacks.
New Cyber Unit Established by SEC
The Securities and Exchange Commission has announced the formation of a new Cyber and Emerging Technologies Unit, replacing its previous crypto assets and cyber unit. This shift aims to enhance focus on cyber-related misconduct that impacts investors, with an emphasis on fraud involving advanced technologies such as artificial intelligence, social media, and blockchain. This strategic change reflects the evolving landscape of cyber threats and the need for regulatory bodies to adapt their approaches to combat sophisticated cybercrime. Analysts see this as a proactive measure to address growing concerns around the safety of digital investments.
Australian IVF provider investigating cyber incident
SEC replaces cryptocurrency fraud unit with emerging tech team
Thanks to today's episode sponsor, Scrut Automation
Scrut Automation allows compliance and risk teams of any size to establish enterprise-grade security programs. Their best-in-class features like process automation, AI, and over 75 native integrations reverse compliance debt and help manage risk proactively as your business grows. Visit scrut.io to schedule a demo or learn more. That’s www.scrut.io.
Find the stories behind the headlines at CISOseries.com.
Get the Snipd podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered podcast player
Listen to all your favourite podcasts with AI-powered features
Discover highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share & Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered podcast player
Listen to all your favourite podcasts with AI-powered features
Discover highlights
Listen to the best highlights from the podcasts you love and dive into the full episode