Data Breach Today

MAY 2, 2024

Deserialization Vulnerability Allows for Remote Code Execution A high-risk flaw in R statistics programming language could lead to a supply chain hack, warn security researchers who say they uncovered a deserialization flaw. Security researchers have long known that hackers sneak malicious code into serialized data.

Risk 256

Risk Security 256

Data Breach Today

MARCH 26, 2024

Cybersecurity Experts Recommend Defenses to Counter Surge in Such Attacks Calling all high-risk individuals: Ensure you're taking adequate steps to secure your personal devices and accounts, as criminals and nation-state hackers increasingly target them instead of grappling with corporate defenses, warned the U.K.'s

Risk 314

Risk Cybersecurity Security 314

Data Breach Today

SEPTEMBER 8, 2023

In the aftermath of mergers and acquisitions among healthcare entities - and the resulting IT integration and cost-cutting moves - gaps in technology and skills and other gaps often put organizations at higher risk for attacks and other security incidents, said Jack Danahy of NuHarbor Security.

Risk 276

Risk Security IT 276

Data Breach Today

MARCH 13, 2024

The vast healthcare ecosystem disruption caused by the recent attack on Change Healthcare, which affected more than 100 of the company's IT products and services, underscores the concentrated cyber risk when a major vendor suffers a serious cyber incident, said Keith Fricke, partner at tw-Security.

Risk 276

Risk Security IT 276

Data Breach Today

NOVEMBER 1, 2023

DHS Secretary Alejandro Mayorkas Urges Congress to Reauthorize Key Security Powers.

Risk 266

Risk Security Cybersecurity 266

Data Breach Today

FEBRUARY 20, 2021

Automakers Should Employ Security-By-Design to Thwart Cyber Risks Autonomous vehicle manufacturers are advised to adopt security-by-design models to mitigate cybersecurity risks, as artificial intelligence is susceptible to evasion and poisoning attacks, says a new ENISA report.

Risk 304

Risk Artificial Intelligence Manufacturing Security 304

Data Breach Today

OCTOBER 27, 2021

Why do so many HIPAA -covered entities and their vendors do such a poor job managing security risk and safeguarding patient's protected health information? Many critical factors come into play, say Roger Severino, ex- director of HHS OCR, and Bob Chaput, founder of security consultancy Clearwater.

Risk 285

Risk Security 285

Data Breach Today

SEPTEMBER 20, 2023

Successful AI Implementation Requires a Secure Foundation, Attention to Regulations The private sector's frenzy to incorporate generative AI into products is leading companies to overlook basic security practices, a Google executive warned Tuesday.

Risk 309

Risk Security Cloud 309

The Last Watchdog

OCTOBER 4, 2023

In a keynote address, Omdia’s Eric Parizo, managing prinicipal analyst, and Andrew Braunberg, principal analyst, unveiled an approach they coined as “proactive security.” RBVM solutions don’t merely identify vulnerabilities, it quantifies and prioritizes them, making risk management more strategic. This is a useful way to look at it.

Risk 222

Risk Security Cloud Marketing 222

Data Breach Today

MAY 2, 2024

New CEO Brian Roche on Application Management and the Role of AI in Managing Risk New Veracode CEO Brian Roche discusses the importance of artificial intelligence in managing application risk, the integration of startup Longbow Security into Veracode's ecosystem, and the convergence of traditional application security with cloud security.

Artificial Intelligence 267

Artificial Intelligence Security Cloud Risk 267

Data Breach Today

AUGUST 10, 2023

Legacy infusion pumps commonly available for purchase on the secondary market often contain wireless authentication and other sensitive data that the original medical organization owners failed to purge, warned researcher Deral Heiland, citing a recent study conducted by security firm Rapid7.

Marketing 240

Marketing Risk Security Authentication 240

Data Breach Today

SEPTEMBER 13, 2022

Federal Authorities Urge Healthcare Sector Entities to Take Caution A host of emerging technologies - including artificial intelligence, 5G cellular, quantum computing, nanomedicine and smart hospitals - offer the potential to revolutionize healthcare, but organizations must carefully evaluate the security risks, federal authorities warn.

Artificial Intelligence 243

Artificial Intelligence Risk Security 243

Data Breach Today

JULY 12, 2023

Acquisition Will Help Safe Security Customers See, Manage, Communicate About Risk Safe Security purchased the creators of the industry's only open standard for cyber risk quantification to improve the visibility, management and communication of risk.

Risk 130

Risk Security Communications 130

Data Breach Today

DECEMBER 19, 2023

CISA Failed to Include High-Risk Vulnerabilities in Known Exploit List, Report Says The Cybersecurity and Infrastructure Security Agency maintains an exhaustive list that the U.S.

Risk 277

Risk Cybersecurity Security IT 277

Data Breach Today

APRIL 21, 2021

Agency Says Exploits Pose 'Unacceptable Risk' The U.S. Cybersecurity and Infrastructure Security Agency has issued an emergency directive requiring executive branch agencies to mitigate by Friday the risks posed by a zero-day vulnerability and three other recently patched flaws in Pulse Connect Secure VPN products.

Risk 290

Risk Security Cybersecurity 290

Data Breach Today

JULY 18, 2022

A new assessment framework aims to help patients, healthcare providers and others examine the various privacy, security and other risks of digital health technologies, says Tim Andrews of the nonprofit Organization for the Review of Care and Health Applications, which co-developed the framework.

Risk 240

Risk Privacy Security IT 240

Data Breach Today

MARCH 22, 2024

See Also: When Every Identity is at Risk, Where Do You Begin? Introducing CyberArk’s Identity Security Clinic. Where experts dissect and diagnose your

Security 269

Security Risk 269

Data Breach Today

MARCH 29, 2022

War Alters Resiliency Requirements, Britain's National Cyber Security Center Warns The Russia-Ukraine war has altered the risks facing organizations that use Russian technology or services, including the increased threat of being directly targeted, as well as disruptions caused by any new sanctions, warns Britain's National Cyber Security Center.

Risk 240

Risk Security 240

Data Breach Today

NOVEMBER 1, 2021

HHS OCR: If Old Gear Cannot Be Replaced, Take Other Steps to Protect PHI Federal regulators are reminding healthcare organizations about the critical importance of addressing security risks involving legacy systems and devices - including specialty software and gear - that are often difficult for entities to replace.

Risk 250

Risk Security 250

Data Breach Today

APRIL 8, 2024

Researchers Say Illegal Access to Private AI models Can Enable Cross-Tenant Attacks Security researchers have discovered two critical vulnerabilities in the Hugging Face AI platform that exposed potential gaps for attackers seeking unauthorized access and manipulation of customer data and models.

Risk 173

Risk Access Security 173

Data Breach Today

OCTOBER 26, 2023

DXC Technology, Aquia CISOs on Challenges, Best Practices of Managing Code Bases In the latest "Proof of Concept," DXC Technology IT CISO and CyberEdBoard member Mike Baker and Chris Hughes, co-founder and CISO of Aquia, join ISMG editors to discuss benefits, challenges and misconceptions of adopting open source software in modern code bases - plus (..)

Risk 258

Risk Security IT 258

Data Breach Today

SEPTEMBER 15, 2023

Also; The 'Quantum Divide'; Global AI Regulatory Trends In the latest weekly update, four editors at ISMG discuss important cybersecurity and privacy issues, including how to keep assets secure in the quantum era, when common usernames pose a cybersecurity threat, and how to strike the right balance between regulation and innovation in AI.

Risk 271

Risk Security Cybersecurity Privacy 271

Data Breach Today

DECEMBER 22, 2023

Majority of Connected Medical Devices Contain Critical Vulnerabilities, FBI Says A new GAO report says federal agencies fail to provide health are providers and patients with enough resources and information to address critical vulnerabilities in a majority of medical devices in the U.S.

Risk 282

Risk Security 282

Data Breach Today

AUGUST 14, 2020

With the surge in telehealth use during the COVID-19 pandemic, healthcare organizations must be prepared to deal with cloud security and privacy risks, says Jim Angle of Trinity Health, who is the author of a recent report from the Cloud Security Alliance.

Cloud 259

Cloud Risk Security Privacy 259

Data Breach Today

AUGUST 19, 2022

The extremely diverse architectures and systems within the tens of thousands of very specialized types of medical devices used in clinical settings adds to the complexity healthcare organizations and manufacturers face in managing cybersecurity risk for these products, says Phil Englert of H-ISAC.

Risk 245

Risk Manufacturing Security Cybersecurity 245

Data Breach Today

MAY 25, 2023

Michelle Balderson of OTORIO on How OT Security Is Now Perceived as a Business Risk OT security is being discussed in the board room as attackers adopt the use of AI and automation.

Risk 143

Risk Security 143

Data Breach Today

JULY 26, 2023

While patient safety risks posed by unpatched security vulnerabilities in legacy medical devices often grab headlines, healthcare entities shouldn't underestimate the serious business risks involving other poorly secured IoT and OT gear used in healthcare settings, said Mohammad Waqas of Armis.

IoT 243

IoT Risk Security 243

Data Breach Today

NOVEMBER 27, 2023

Zscaler Brings Generative AI to Data Protection Bundles, Debuts Standalone AI Tools Zscaler infused generative AI features into its data protection bundles and is introducing AI-powered products that quantify risk and predict breaches, said CEO Jay Chaudhry.

Risk 254

Risk Cloud Security IT 254

eSecurity Planet

JANUARY 18, 2024

When assessing the overall security of cloud storage and choosing a solution tailored to your business, it helps to determine its features, potential risks, security measures, and other considerations. It excels in remote access, scalability, and security, with distributed storage options and privacy adherence capabilities.

Cloud 118

Cloud Risk Security Encryption 118

Data Breach Today

JULY 4, 2023

Cloud Adoption in Financial Services has Soared - as Has Security Risk Financial services organizations face unique cloud security challenges, due to special regulatory, data security and privacy considerations that don't necessarily apply to other industries.

Risk 238

Risk Financial Services Cloud Privacy 238

Schneier on Security

APRIL 27, 2023

Stanford and Georgetown have a new report on the security risks of AI—particularly adversarial machine learning—based on a workshop they held on the topic. The understanding of how to secure AI systems, we concluded, lags far behind their widespread adoption.

Risk 101

Risk Security Cybersecurity Government 101

Data Breach Today

MARCH 29, 2023

Lightspin Deal Will Help Prioritize and Remediate Issues for Cloud-Native Resources Cisco plans to purchase its second cloud security startup in two months to deliver context, prioritization and remediation recommendations for cloud native resources.

Cloud 143

Cloud Risk Security IT 143