Thu.Aug 29, 2024

article thumbnail

Breach Roundup: Ex-Verizon Worker Cops to Spying for China

Data Breach Today

Also: Turn in Volodymyr Kadariya, Get $2.5 Million from Uncle Sam This week, an ex-Verizon employee pleaded guilty, SonicWall fixed critical flaws,South Korean hackers exploited a zero-day, U.S. retailer Dick's Sporting Goods was breached, the U.S. government offered a big reward, Grok AI will send election queries to Vote.gov, and HIPAA is 28 years old.

Retail 314
article thumbnail

Russia-linked APT29 reused iOS and Chrome exploits previously developed by NSO Group and Intellexa

Security Affairs

Russia-linked APT29 group was spotted reusing iOS and Chrome exploits previously developed by surveillance firms NSO Group and Intellexa. Google TAG (Threat Analysis Group) researchers observed the Russia-linked group APT29 (aka SVR group , BlueBravo , Cozy Bear , Nobelium , Midnight Blizzard , and The Dukes ). using exploits previously used by surveillance software vendors NSO Group and Intellexa.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Florida Department of Health Informs RansomHub Hack Victims

Data Breach Today

Cybercriminal Group Claims to Have Published 100 Gigabytes of Agency's Stolen Data Two months after RansomHub claimed to have published 100GBs of its stolen data on the dark web, the Florida Department of Health is notifying citizens that their sensitive information has been compromised. The attack affected the vital statistics system used to issue birth and death certificates.

IT 173
article thumbnail

Google, Apple, and Discord Let Harmful AI 'Undress' Websites Use Their Sign-On Systems

WIRED Threat Level

Single sign-on systems from several Big Tech companies are being incorporated into deepfake generators, WIRED found. Discord and Apple have started to terminate some developers’ accounts.

Privacy 135
article thumbnail

Prevent Data Breaches With Zero-Trust Enterprise Password Management

Keeper Security is transforming cybersecurity for people and organizations around the world. Keeper’s affordable and easy-to-use solutions are built on a foundation of zero-trust and zero-knowledge security to protect every user on every device. Our next-generation privileged access management solution deploys in minutes and seamlessly integrates with any tech stack to prevent breaches, reduce help desk costs and ensure compliance.

article thumbnail

Cryptohack Roundup: SEC Sends Wells Notice to OpenSea

Data Breach Today

Also: WazirX Seeks Moratorium to Restructure Debt After Hack This week, the SEC sent OpenSea a Wells notice, WazirX sought protection from creditors, Ryan Salame reconsidered his guilty plea, objections to the FTX bankruptcy reorganization plan were filed, U.S. police recovered pig-butchering scam funds, and Colombia accused Worldcoin of privacy violations.

Privacy 173

More Trending

article thumbnail

CrowdStrike Debuts Safeguards, Seeks to Blunt Outage Impact

Data Breach Today

CEO George Kurtz on New Recovery Techniques and Controls Implemented Post-Incident CEO George Kurtz said CrowdStrike has blunted the business impact from the massive July 19 outage and is implementing changes to prevent a repeat occurrence. CrowdStrike is boosting the resilience of its Falcon platform through improved content visibility and control and enhanced quality assurance.

IT 173
article thumbnail

Corona Mirai botnet spreads via AVTECH CCTV zero-day 

Security Affairs

An instance of the Corona Mirai botnet spreads via AVTECH CCTV zero-day and multiple previously known vulnerabilities. Akamai’s Security Intelligence and Response Team (SIRT) has detected a botnet campaign exploiting multiple previously known vulnerabilities and a newly discovered zero-day, tracked as CVE-2024-7029 (CVSS score: 8.7), in AVTECH CCTV cameras.

article thumbnail

NIS2 Directive: Focusing on Critical Infrastructure Security

Data Breach Today

Compliance Expert on Readiness, Compliance and Rapid Incident Reporting The NIS2 Directive focuses on addressing gaps and strengthening the security of network and information systems across the European Union. NIS2 mandates rapid incident reporting and holds senior management accountable for cybersecurity, shifting responsibilities to the board level.

Security 162
article thumbnail

Adm. Grace Hopper’s 1982 NSA Lecture Has Been Published

Schneier on Security

The “ long lost lecture ” by Adm. Grace Hopper has been published by the NSA. (Note that there are two parts.) It’s a wonderful talk: funny, engaging, wise, prescient. Remember that talk was given in 1982, less than a year before the ARPANET switched to TCP/IP and the internet went operational. She was a remarkable person. Listening to it, and thinking about the audience of NSA engineers, I wonder how much of what she’s talking about as the future of computing—minia

IT 128
article thumbnail

Optimizing The Modern Developer Experience with Coder

Many software teams have migrated their testing and production workloads to the cloud, yet development environments often remain tied to outdated local setups, limiting efficiency and growth. This is where Coder comes in. In our 101 Coder webinar, you’ll explore how cloud-based development environments can unlock new levels of productivity. Discover how to transition from local setups to a secure, cloud-powered ecosystem with ease.

article thumbnail

US Moves Toward Expanding Reg E to Address Payment Fraud

Data Breach Today

Fraud Expert Ken Palla on Recent Legislative Efforts and Regulatory Scrutiny Recent developments suggest the U.S. is taking a more serious approach to holding faster payments platforms accountable for scams. It's unlikely any changes will occur before the November U.S. election, but the move toward more regulation is a good start, said Ken Palla, retired MUFB Bank director.

IT 162
article thumbnail

Fewer, High-Profile Ransomware Attacks Are Yielding Higher Ransoms

KnowBe4

Analysis of cryptocurrency payments made on the blockchain highlights shifts in the size and frequency of ransomware attacks and may paint a bleak picture for the remainder of the year.

article thumbnail

Powerful Spyware Exploits Enable a New String of ‘Watering Hole’ Attacks

WIRED Threat Level

Suspected Russian hackers have compromised a series of websites to utilize sophisticated spyware exploits that are eerily similar to those created by NSO Group and Intellexa.

Security 119
article thumbnail

Iran’s APT42 Targets WhatsApp Users With Spear-Phishing Attacks

KnowBe4

Researchers at Meta have published details on Iranian spear-phishing attacks targeting WhatsApp accounts. The activity is attributed to APT42, a threat actor tied to Iran’s Islamic Revolutionary Guard Corps (IRGC).

Phishing 120
article thumbnail

15 Modern Use Cases for Enterprise Business Intelligence

Large enterprises face unique challenges in optimizing their Business Intelligence (BI) output due to the sheer scale and complexity of their operations. Unlike smaller organizations, where basic BI features and simple dashboards might suffice, enterprises must manage vast amounts of data from diverse sources. What are the top modern BI use cases for enterprise businesses to help you get a leg up on the competition?

article thumbnail

Building trust in AI: Key strategies for data protection and ethical use 

OpenText Information Management

Artificial intelligence (AI) has become an everyday buzzword, and for good reason: it's significantly changing the way businesses operate and thrive. AI tools are proving to be highly actionable and effective, driving significant improvements in productivity and efficiency. In a recent assessment, Forbes found that 64% of businesses are boosting their productivity with AI while 53% use AI to improve production processes.

ROT 107
article thumbnail

Windows 11 update adds easier Android file sharing, faster voice dictation, and more

Collaboration 2.0

The new update is optional, so you must head to Windows Update on your PC to install it. Here's how and why you might want to.

IT 98
article thumbnail

Driving business excellence: How a leading financial firm achieved seamless ERP integration for superior data governance

Collibra

As financial services organizations continue to advance their data governance programs, they begin to reap substantial rewards in compliance, risk management and business insights. However, gaps can arise that hinder the full realization of these benefits. For one leading financial services firm, a significant gap emerged in integrating their ERP (Enterprise Resource Planning) data into their data governance framework, creating challenges for business intelligence (BI) teams who lacked the tran

article thumbnail

The hottest headphones of 2024 are $50 off ahead of Labor Day

Collaboration 2.0

The Sonos Ace were released just two months ago, and they're seeing their first discount during Labor Day sales.

Sales 98
article thumbnail

The Cloud Development Environment Adoption Report

Cloud Development Environments (CDEs) are changing how software teams work by moving development to the cloud. Our Cloud Development Environment Adoption Report gathers insights from 223 developers and business leaders, uncovering key trends in CDE adoption. With 66% of large organizations already using CDEs, these platforms are quickly becoming essential to modern development practices.

article thumbnail

What is PIAM Part 5: PIAM in Action — Enhancing Security Across Industries

HID Global

Explore how comprehensive PIAM solutions drive workplace experience and security governance across diverse industries, from energy to healthcare.

article thumbnail

My favorite robot vacuum for pet hair is under $450 for Labor Day

Collaboration 2.0

If you're hunting for a robot vacuum to combat pet hair in your home, the Roomba j7+ has dropped well below $500 with this Labor Day deal.

98
article thumbnail

U.K. Unveils £4 Million AI Initiative to Boost Teacher Productivity

Information Matters

The U.K. government has announced a £4 million project aimed at enhancing artificial intelligence’s ability to assist teachers with marking work and planning lessons. This initiative, revealed today, seeks to Read more The post U.K. Unveils £4 Million AI Initiative to Boost Teacher Productivity appeared first on Information Matters - AI in the UK.

article thumbnail

The 75+ best Labor Day 2024 deals: Shop Amazon, Walmart, Best Buy, and more

Collaboration 2.0

Labor Day weekend is nearly here, and major retailers like Amazon and Walmart are already offering great deals on top headphones, TVs, laptops, and more.

Retail 98
article thumbnail

The Tumultuous IT Landscape Is Making Hiring More Difficult

After a year of sporadic hiring and uncertain investment areas, tech leaders are scrambling to figure out what’s next. This whitepaper reveals how tech leaders are hiring and investing for the future. Download today to learn more!

article thumbnail

SODA V, AI-Driven Tool, aims to disrupt the auto market by cutting car development time and costs

Information Matters

In a move set to revolutionize the automotive industry, UK-based tech company SODA.Auto has unveiled SODA V, an AI-driven tool aimed at drastically reducing car development time and costs. The Read more The post SODA V, AI-Driven Tool, aims to disrupt the auto market by cutting car development time and costs appeared first on Information Matters - AI in the UK.

article thumbnail

How to create a bootable Linux USB drive

Collaboration 2.0

If you want to install Linux on a desktop, you'll first have to create a bootable USB drive with your distribution of choice. Don't worry. It's easy.

IT 76
article thumbnail

The latest news from Archive-It, August 2024

Archive-It

by the Archive-It team Archive-it and Community Webs annual meeting recaps The Museum of Contemporary Art in Chicago Harold Washington Library Center Winter Garden (Image: Spiro Bolos, CC BY-SA 2.0) Our team came together in Chicago this month for the annual Community Webs Symposium and Archive-It Partner Meeting. We always look forward to these meetings where we can connect with our partner communities, exchange ideas, and explore new opportunities for digital collection building.

article thumbnail

The best GPS trackers for kids in 2024: Expert recommended

Collaboration 2.0

Parents and parenting experts recommend the top GPS trackers for kids that offer real-time tracking and alerts to give you peace of mind.

76
article thumbnail

Introducing CDEs to Your Enterprise

Explore how enterprises can enhance developer productivity and onboarding by adopting self-hosted Cloud Development Environments (CDEs). This whitepaper highlights the simplicity and flexibility of cloud-based development over traditional setups, demonstrating how large teams can leverage economies of scale to boost efficiency and developer satisfaction.

article thumbnail

The North American Have I Been Pwned Tour

Troy Hunt

It was 2019 that I was last in North America, spending time in San Francisco, Los Angeles, Vegas, Denver, Minnesota, New York and Seattle. The year before, it was Montreal and Vancouver and since then, well, things got a bit weird for a while. It's a shame it's been this long because North America is such an important part of the world for so many of the things we (including Charlotte in this too) do; it's the lion's share of the audience for my content, the companies whose s

article thumbnail

The best free VPNs of 2024: Expert tested

Collaboration 2.0

We tested the best free VPNs from reputable companies that offer solid limited services. Here's what to know, and how to avoid security risks.

Risk 76
article thumbnail

California AI Safety Bill Passes Key Marker

Data Breach Today

Proposed Legislation Divides Tech World, AI Experts, Lawmakers California state lawmakers on Wednesday handed off a bill establishing first-in-the-nation safety standards for advanced artificial intelligence models to their Senate counterparts after weathering opposition from the tech industry and high-profile Democratic politicians.