Iran spars with France over dissident filmmaker's Cannes triumph
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Tahawul Tech
an hour ago
- Tahawul Tech
UAE health sector targeted in sophisticated ransomware attack, says Sophos official
Mayuresh Kothari of Sophos explains how a Conti offshoot is exploiting healthcare networks — and why proactive incident response is essential. Recent cyberattacks on the UAE's health sector have exposed the growing threat posed by ransomware groups targeting critical infrastructure. The latest incident, linked to the emerging Gunra group—believed to be a reconstitution of the dismantled Conti gang—used double extortion tactics involving the theft and encryption of sensitive personal and medical data. According to Mayuresh Kothari, Advisory Solution Principal at Sophos, the attackers exploited legitimate administrative tools to evade detection and launch a highly disruptive campaign. In this interview with Kothari explores the threat landscape, the importance of engaging expert incident response teams, and why proactive cybersecurity planning is essential. He also outlines how Sophos is helping organisations in the Middle East improve readiness through integrated solutions and local investment. Interview Excerpts: Could you provide an overview of the recent cyberattacks targeting the UAE health sector? Based on publicly available information from X (formerly Twitter) and claims made by the threat group on leak sites, this incident appears to be a form of double extortion. The threat actor was able to first circumvent the security controls to establish presence in the network before starting to identify critical data, exfiltrate it out and lastly, encrypt. Since the threat actor claims to have stolen millions of records containing PII, PCI, and healthcare data, the potential consequences of this exposure are serious. The ransom demand includes payment for both data decryption and to prevent the public release of the stolen information. Can you share more information about the threat group responsible? The threat actor group known as Gunra has been active since early this year. Indicators suggest that this group has emerged from the remains of the Conti ransomware group, which was recently disrupted by law enforcement agencies. At Secureworks, we have classified Conti under the codename Gold Ulrick. Their modus operandi involves leveraging windows administrator tools to hide malicious activities prior to conducting extortion operations. What actions should organisations under attack take to effectively mitigate the impact of incidents like these? This is a complex issue without a simple solution. To begin with, impacted organisations should engage professional incident response (IR) teams with comprehensive expertise in all aspects of managing such incidents. For instance, Secureworks, now part of Sophos, offers specialised services tailored to these needs. When an organization engages us during an active incident, we begin by identifying the root cause or patient zero of the attack and then remove the threat actor and any associated artifacts. We also provide guidance to prevent future attacks. Our support extends to ransom negotiation, regulatory and communication advice around disclosure or with regulators, and establishing a long-term response program. Is this the only approach, or are there preventative measures organisations can implement today to proactively defend against such threats? Cybersecurity is a multi-faceted discipline that organisations must approach as an ongoing program, one that is regularly reviewed, tested, improved, and repeated. Numerous frameworks today help assess the maturity and effectiveness of such programs. However, cybersecurity is always a team effort. It cannot be done in isolation. The foundation begins with strong preventative and policy enforcement controls. Take Sophos Endpoint Protection and Firewalls, for example. With nearly 40 years of experience delivering cutting-edge security controls, our approach known as Synchronised Security provides integrated, highly efficient protection. However, prevention is just the starting point. We must always hope for the best but prepare for the worst. That's where detection-based mechanisms become essential such as Vulnerability Management, Endpoint Detection and Response (EDR), and Managed Detection and Response (MDR). And even then, the process isn't complete. 'Cybersecurity must be treated as a continuous program. This is where our Proactive Incident Response services lead the way, ensuring organisations are not just reacting to threats, but actively preparing for them.' What do you mean by Proactive Incident Response? Isn't incident response typically a reactive process?Incident Response (IR) is not just the act of responding to a threat after it occurs. It also involves preparing for potential incidents in advance. This means having plans in place, conducting regular testing, and clearly defining the initial steps to be taken in the event of an attack. To put it into perspective, think of how emergency response works in the real world. Many workplaces designate first responders who wear high visibility jackets and helmets so they can be easily identified during an emergency. These individuals are trained to use fire extinguishers, guide people to exits, and manage the initial response to a crisis. Cyber IR functions in the same way. Proactive services often delivered through a retainer focuses on this preparedness. It involves training internal first response teams on the actions to take during an incident: how to contain the threat, prevent its spread, and reduce the risk of data exfiltration. Beyond training, proactive retainers help organisations establish and review their incident response plans, define industry-specific playbooks, and conduct both technical and non-technical exercises. These activities help security teams identify gaps in their current processes and improve their overall readiness. How does Sophos differentiate itself from other vendors offering similar solutions? We are uniquely positioned to provide end-to-end solutions with tried and test capabilities across endpoint, network, cloud and services. Our secure by design and practice approach has consistently delivered results, and we remain committed to supporting the region through continued investment. Our latest initiative is the launch of a dedicated data center in the UAE, which will enable us to meet local data residency requirements while continuing to provide world-class security solutions tailored to our customers' needs.
Khaleej Times
6 hours ago
- Khaleej Times
Watch: Sharjah Police share video of car hitting man, remind pedestrians to cross safely
UAE authorities have time and again called on pedestrians to cross at designated areas, introduced strict penalties for jaywalking, and tightened laws on road safety. Yet, some individuals can be seen running across roads in an attempt to get to the other side quicker. Sharjah police released a video of an accident where a man is seen running across the pedestrian crossing as a car approaches, resulting in the collision between the two, and the loss of a life. Although the man is crossing at a designated area, it appears as though he is crossing while the signal indicates green for vehicles. Authorities reminded the public that "almost every report [of an accident] starts with the same cause — unsafe crossing." When crossing in a reckless manner to save a few seconds or minutes, the pedestrian endangers their life and of others on the roads. When accidents occur, they affect not just the victim, but their loved ones, authorities reminded. Watch a video, shared by Sharjah Police, here: A new traffic law which came into effect on March 29 introduced hefty fines and even jail time for jaywalking across the UAE, which refers to crossing from unauthorised areas. Before March, the penalty for jaywalking was Dh400. However, under the new law, jaywalkers could face imprisonment and a fine of Dh5,000 to Dh10,000 if the offence results in a traffic accident. In addition, those who cross from undesignated areas on roads with a speed limit of 80kmph or more will face higher penalties. For such a violation, fines start at Dh10,000 and the individual will be punished with imprisonment for a period of not less than three months, or by one of these two penalties.
Khaleej Times
6 hours ago
- Khaleej Times
Thousands of Israelis rally nationwide to demand end to Gaza war, release of hostages
Thousands of Israelis took part in a nationwide strike on Sunday in support of families of hostages held in Gaza, calling on Prime Minister Benjamin Netanyahu to reach an agreement with Hamas to end the war and release the remaining captives. Demonstrators waved Israeli flags and carried photos of hostages as whistles, horns, and drums echoed at rallies across the country, while some protesters blocked streets and highways, including the main route between Jerusalem and Tel Aviv. 'Today, everything stops to remember the highest value: the sanctity of life,' Anat Angrest, the mother of hostage Matan Angrest, told reporters at a public square in Tel Aviv. Among those who met with families of hostages in Tel Aviv was Israeli Hollywood actress Gal Gadot, known for her role as Wonder Woman and starring in the Fast & the Furious franchise. Ahead of Sunday, some businesses and institutions said they would allow staff to join the nationwide strike, which was called by the hostages' families. While some businesses closed, many also remained open across the country on what is a working day in Israel. Schools are on summer recess and were not affected. A major rally is scheduled to take place in Tel Aviv in the evening. Israeli police said that 38 demonstrators had been detained by 2pm (11am GMT) Some protesters blocking roads scuffled with police, and were carried away by officers. Demonstrations across the country were briefly halted around 4pm local time when air raid sirens sounded in Tel Aviv, Jerusalem and elsewhere, warning of an incoming missile fired from Yemen. The missile was intercepted without incident. On Sunday, Netanyahu told the cabinet: "Those who call today for an end to the war without defeating Hamas are not only hardening Hamas' position and delaying the release of our hostages. They are also ensuring that the horrors of October 7 will repeat themselves over and over again." The prime minister, who leads the country's most right-wing government in history, said his government was determined to implement a decision for the military to seize Gaza City, one of the last major areas of the enclave it does not already control. That decision is widely unpopular among Israelis and many of the hostages' families, who fear an expanded military campaign in Gaza could risk the lives of their loved ones still held captive. There are 50 hostages held in Gaza, of which Israeli officials believe around 20 are still alive. "There is no time – not for the lives wasting away in hell, nor for the fallen who may vanish in the ruins of Gaza," said the Hostages Families Forum, which represents many families of captives held in Gaza, on Sunday. After nearly two years of war in Gaza, ignited by the Hamas-led attack on Israel in October 2023, most of the hostages who have been freed so far emerged as a result of diplomatic talks. Negotiations towards a ceasefire that could have seen more hostages released collapsed in July. The Palestinian group Hamas has said it would only free the remaining hostages if Israel agrees to end the war, while Netanyahu has vowed that Hamas cannot stay in power. The Israeli government has faced sharp criticism at home and abroad, including from some of its closest European allies, over the announcement that the military would soon seize Gaza City. More than 61,000 Palestinians have been killed in Israel's military campaign in Gaza, according to local health officials there. They said on Sunday at least 29 had been killed in the past day. Around 1,200 people were killed and 251 were taken into Gaza during Hamas' attack on Israel. Over 400 Israeli soldiers have been killed in Gaza since then.
