Data Breach Today

MARCH 28, 2024

Guidance Calls for Agencies to Appoint Chief AI Officers, Set Up Governance Boards The Office of Management and Budget issued the first-ever governmentwide guidance for mitigating risks associated with the federal use of artificial intelligence, including specific actions agencies must complete within a year to help ensure the responsible use of emerging (..)

Risk 294

Risk Artificial Intelligence Government 294

Data Breach Today

NOVEMBER 14, 2023

Agency Underscores Risks From Ransomware, State-Aligned Hacking, China and AI The risk of critical infrastructure hacking in the United Kingdom likely grew in the last year, says the national cybersecurity agency, citing a slew of high-profile ransomware attacks.

Risk 285

Risk Ransomware Cybersecurity 285

Data Breach Today

MARCH 13, 2024

The vast healthcare ecosystem disruption caused by the recent attack on Change Healthcare, which affected more than 100 of the company's IT products and services, underscores the concentrated cyber risk when a major vendor suffers a serious cyber incident, said Keith Fricke, partner at tw-Security.

Risk 284

Risk Security IT 284

Data Breach Today

DECEMBER 18, 2023

regulators for the first time detailed the risks artificial intelligence poses to the financial system and classified the technology as an "emerging vulnerability." The Financial Stability Oversight Council in its annual report flagged AI's ability to introduce "certain risks."

Risk 304

Risk Artificial Intelligence IT 304

Data Breach Today

SEPTEMBER 4, 2023

Britain's Global AI Summit to Focus on Governance, Risk, International Standards The U.K. Goals of the event include detailing AI risks and opportunities, building effective frameworks for using AI safely, and setting international standards to manage AI risks and enforce norms.

Risk 287

Risk Artificial Intelligence Government IT 287

Data Breach Today

MARCH 14, 2024

Senator Urges Government to Tell Public About Little-Known Manufacturer Reset Codes Experts told ISMG that Chinese-made locks and commercial safes could pose national security risks when used by major U.S.

Risk 299

Risk Manufacturing Security Government 299

Data Breach Today

OCTOBER 27, 2023

We expect that 1,000s of other websites are vulnerable to the attack," wrote Salt Security, "putting billions of additional internet users at risk."

Risk 297

Risk Access Security 297

Data Breach Today

DECEMBER 19, 2023

A Preparedness Team Will Warn of Current, Future Dangers in the Firm's AI Models OpenAI on Monday released a framework it says will help assess and protect against the "catastrophic risks" posed by the "increasingly powerful" AI models it develops. "We

Risk 280

Risk IT 280

Data Breach Today

JANUARY 4, 2024

Genpact VP of Payments Kristine Demareski on Harnessing Generative AI There are many potential uses for generative AI at financial services firms, but few are more promising than those in the areas of risk and fraud, said Kristine Demareski, vice president of payments at Genpact, which is already harnessing AI to increase efficiencies in analysts' (..)

Risk 289

Risk Financial Services 289

Data Breach Today

AUGUST 21, 2024

He explains how his team is integrating cybersecurity frameworks to address both digital and physical risks, focusing on disinformation campaigns and election integrity.

Risk 277

Risk Security Cybersecurity IT 277

Data Breach Today

SEPTEMBER 7, 2023

Senate Hearing Examines Misuse of Advanced AI Systems, Risks With Chinese Nationals The rise of artificial intelligence makes it easier for adversaries to harm the U.S. and introduces new risks around malicious insiders with loyalties to China, experts say during a Senate hearing.

Risk 284

Risk Artificial Intelligence IT 284

Data Breach Today

SEPTEMBER 18, 2024

Recent mega data breaches involving third-party vendors - such as the Change Healthcare cyberattack - are intensifying the spotlight on critical security risk management and governance issues for business associates and other suppliers, said regulatory attorney Rachel Rose.

Risk 266

Risk Data breaches Government Security 266

Data Breach Today

DECEMBER 19, 2023

CISA Failed to Include High-Risk Vulnerabilities in Known Exploit List, Report Says The Cybersecurity and Infrastructure Security Agency maintains an exhaustive list that the U.S.

Risk 286

Risk Cybersecurity Security IT 286

Data Breach Today

MAY 2, 2024

Deserialization Vulnerability Allows for Remote Code Execution A high-risk flaw in R statistics programming language could lead to a supply chain hack, warn security researchers who say they uncovered a deserialization flaw. Security researchers have long known that hackers sneak malicious code into serialized data.

Risk 263

Risk Security 263

Data Breach Today

NOVEMBER 20, 2024

Military Says Ship-to-Shore Cranes Made in China Include Dangerous Security Flaws The United States Coast Guard is continuing to warn of significant security risks embedded in ship-to-shore cranes developed by companies with ties to Beijing while issuing new sensitive requirements for ports operating Chinese-made cranes across the country.

Risk 269

Risk Military Security 269

Data Breach Today

SEPTEMBER 8, 2023

In the aftermath of mergers and acquisitions among healthcare entities - and the resulting IT integration and cost-cutting moves - gaps in technology and skills and other gaps often put organizations at higher risk for attacks and other security incidents, said Jack Danahy of NuHarbor Security.

Risk 285

Risk Security IT 285

Data Breach Today

OCTOBER 27, 2023

The 38-Member Body Comprises Government, Private, Civil Society Representatives The United Nations unveiled Thursday an AI advisory body that looks to analyze risks and make recommendations on international governance for the technology.

Government 286

Government Risk 286

Data Breach Today

NOVEMBER 30, 2023

Crouse Health Reveals It's Among PJ&A Clients Hit by Incident Affecting Millions New York regulators are warning millions of individuals of identity theft risks involving a data theft at a medical transcriber that has now affected patients of at least two major healthcare groups, including Crouse Health and Northwell Health in the state.

Risk 289

Risk IT 289

Data Breach Today

NOVEMBER 1, 2023

Department of Homeland Security Secretary Alejandro Mayorkas urged Congress to take action to prevent loss of critical authorities for the Cybersecurity and Infrastructure Security Agency, warning of severe security risks for chemical facilities seen as attractive targets for terrorist attacks.

Risk 273

Risk Security Cybersecurity 273

Data Breach Today

JULY 4, 2023

Cloud Adoption in Financial Services has Soared - as Has Security Risk Financial services organizations face unique cloud security challenges, due to special regulatory, data security and privacy considerations that don't necessarily apply to other industries.

Risk 270

Risk Financial Services Cloud Privacy 270

Data Breach Today

NOVEMBER 27, 2023

Zscaler Brings Generative AI to Data Protection Bundles, Debuts Standalone AI Tools Zscaler infused generative AI features into its data protection bundles and is introducing AI-powered products that quantify risk and predict breaches, said CEO Jay Chaudhry.

Risk 262

Risk Cloud Security IT 262

The Last Watchdog

FEBRUARY 5, 2024

One critical issue faced by organizations that rely on Exchange Server is the risk of a corrupt Exchange Server database cropping up. Navigating new risks Today, heavy reliance on cloud-centric IT infrastructure and cloud-hosted applications has become the norm. Here are a few ‘dos:’ •Rigorous vulnerability management.

Risk 264

Risk Cloud Communications Education 264

The Last Watchdog

AUGUST 29, 2023

Here’s what you should know about the risks, what aviation is doing to address those risks, and how to overcome them. It is difficult to deny that cyberthreats are a risk to planes. Risks delineated Still, there have been many other incidents since. Fortunately, there are ways to address the risks.

Risk 264

Risk Artificial Intelligence Cybersecurity Compliance 264

Data Breach Today

OCTOBER 14, 2024

Sector Uses Multifactor, Eschews Cloud, Can't Afford Cyber Insurance The oil and gas industry has high levels of cyber awareness and low levels of cyber insurance, says a sectoral assessment from credit rating agency Moody's. The sector has experienced a clutch of high-profile attacks including a high-profile 2021 incident at Colonial Pipeline.

Insurance 297

Insurance Risk Cloud 297

Data Breach Today

OCTOBER 7, 2024

DHS Says Adversaries May Stoke Voter Fraud Fears Long After Election Day The latest Homeland Security threat assessment lists this year’s election cycle as a top concern for 2025 and a potential trigger for domestic terrorism.

Risk 305

Risk Security 305

Data Breach Today

DECEMBER 22, 2023

Majority of Connected Medical Devices Contain Critical Vulnerabilities, FBI Says A new GAO report says federal agencies fail to provide health are providers and patients with enough resources and information to address critical vulnerabilities in a majority of medical devices in the U.S.

Risk 291

Risk Security 291

Data Breach Today

OCTOBER 24, 2024

While ransomware attacks against medical devices don't happen often, disruptive cyber incidents that affect the availability of the IT systems that medical devices rely on are a big concern that needs the industry's critical attention, said Jessica Wilkerson of the FDA.

Ransomware 288

Ransomware Risk IT 288

Data Breach Today

JANUARY 18, 2024

No 'Magic Solution' to Prevent Malicious Use of AI in Elections, OSTP Chief Says Arati Prabhakar, director of the White House's Office of Science and Technology Policy, said during an event at the 2024 World Economic Forum that generative artificial intelligence has the potential to "dramatically accelerate and amplify the erosion of information integrity." (..)

Artificial Intelligence 311

Artificial Intelligence Risk 311

Data Breach Today

JANUARY 11, 2024

Cybersecurity Researchers Detail Defenses Against Attackers Abusing Cloud Services While cybercriminals and advanced persistent threat groups have long abused legitimate internet services both to scale and disguise various types of attacks, a new report warns of a growing challenge posed by the illegitimate use of GitHub and offers essential defenses (..)

Risk 282

Risk Cloud Cybersecurity 282

The Last Watchdog

OCTOBER 3, 2024

Ramachandran Vivek Ramachandran , Founder & CEO of SquareX , warned about the mounting risks: “Browser extensions are a blind spot for EDR/XDR and SWGs have no way to infer their presence. Singapore, Oct. SquareX’s research team publicly demonstrated rogue extensions built on MV3.

Risk 243

Risk Phishing Passwords Security 243