Breaking news

Infostealer Campaigns Surge Amid Global Credential Breaches

Overview Of A Growing Cyber Threat

Recent investigations have revealed that cybercriminals are intensifying their efforts to steal sensitive information through sophisticated infostealer malware. Aggregating credentials from 30 distinct datasets, experts estimate that approximately 16 billion login credentials – from platforms including Apple, Google, and Facebook – have been exposed. This alarming finding underscores a shifting landscape in digital security.

Advanced Evasion And The New Face Of Cybercrime

Volodymyr Diachenko, co-founder of SecurityDiscovery, reports that these coordinated leaks are the product of infostealers, malware designed to bypass traditional, signature-based security measures. While these datasets may contain duplicates or outdated records, their sheer volume evidences how pervasive sensitive data has become on the internet. The phenomenon has earned infostealers the moniker of a modern “cyber plague.”

The Economics Of Cybercrime

Simon Green, president of Asia-Pacific and Japan at Palo Alto Networks, notes that modern infostealers employ advanced evasion techniques, making them uniquely challenging to detect. Furthermore, the rise of cybercrime-as-a-service models has democratized access to these malicious tools. Underground marketplaces facilitate the trade of stolen credentials and malware kits, effectively lowering the barriers for operators to launch expansive and coordinated attacks.

Corporate And Individual Defense Strategies

Given the increasing prevalence of malware, security experts advise both individuals and corporations to adopt proactive measures. From regular password updates and the implementation of multi-factor authentication for individuals, to the deployment of a “zero trust” architecture by enterprises, enhancing digital defenses is paramount. Recent international efforts, such as Europol’s collaboration with Microsoft to disrupt the ‘Lumma’ infostealer network, illustrate the critical need for coordinated global responses to these threats.

Conclusion

The surge in infostealer activity is a clear indicator of evolving cybersecurity challenges. As billions of credentials continue to circulate the web, both public and private sectors must intensify their cybersecurity measures to counter these sophisticated threats effectively.

Copyright Law Struggles To Keep Up With AI Training

Courts Are Still Applying Old Copyright Rules To AI

AI companies train models on enormous amounts of published material, including books, articles and academic research. Whether using that content without authors’ permission violates copyright law remains unresolved.

Much of the debate centres on fair use, which allows copyrighted material to be used without permission in certain circumstances. Courts consider factors such as the purpose of the use, how much material was involved and its impact on the original market.

Anthropic Case Sets An Important Precedent

A major case involving Anthropic and a group of authors provided one of the clearest rulings so far. Judge William Alsup found that using copyrighted books to train AI models was lawful, comparing the process to people reading and studying literature before creating something new.

Anthropic was nevertheless ordered to pay $1.5 billion in a settlement. The penalty concerned books the company had obtained from illegal online libraries rather than the AI training itself.

For AI companies, that distinction could prove significant because it separates studying copyrighted material from directly copying it.

Competition Could Be The Key Issue

A case involving Thomson Reuters and Ross Intelligence offers a different perspective. A court ruled that Ross could not claim fair use after using Reuters’ copyrighted material to develop a competing AI-powered legal research platform.

The decision suggests courts may be less willing to consider AI training fair use when copyrighted content is used to build a product that directly competes with the original.

For authors, an unresolved question is whether AI-generated content should be considered competition for the works used to train these models.

The Law Has Yet To Catch Up

US copyright law predates generative AI by decades, leaving courts to apply old principles to new technology. Questions also remain over copyright protection for AI-generated works. In Thaler v. Perlmutter, a court ruled that material created entirely by AI cannot receive copyright protection.

Major AI companies remain involved in copyright litigation, and different courts could reach different conclusions. For now, there is no universal rule: the legality of AI training will depend on the circumstances of each case and how courts ultimately interpret copyright and fair use.

The Future Forbes Realty Global Properties
eCredo
Uol
Aretilaw firm

Become a Speaker

Become a Speaker

Become a Partner

Subscribe for our weekly newsletter