Latest

Endpoint Security

European Council Adopts Cyber Resilience Act

Akshaya Asokan  •  October 10, 2024

The European Council on Thursday adopted security-by-design regulation that makes patching and vulnerability updates mandatory for connected devices. The regulation will ensure that "products with digital components are made secure throughout the supply chain and throughout their life cycle."

Fraud Management & Cybercrime

Operation Cronos Is Disrupting LockBit, Says UK Official

Akshaya Asokan  •  October 10, 2024

A British cybersecurity official touted Operation Cronos, an international operation against LockBit, saying multiple strikes aimed at the ransomware-as-a-service have disrupted its ability to recruit hackers. The operation has resulted in indictments, sanctions, and server takedowns.

Artificial Intelligence & Machine Learning

GenAI Impact on Election Disinformation Limited, Says OpenAI

Rashmi Ramesh  •  October 10, 2024

Foreign threat actors are using generative artificial intelligence to influence U.S. elections, but their impact is limited, said OpenAI. Threat actors from China, Russia, Iran, Rwanda and Vietnam maliciously used AI tools to support influence operations.

Artificial Intelligence & Machine Learning

Relyance AI Raises $32M to Take on AI Governance Challenges

Michael Novinson  •  October 10, 2024

Relyance AI raised $32 million in Series B funding to grow its data governance platform. The funds will be used to scale operations, enhance real-time data visibility, and support enterprises in complying with complex global privacy regulations, ensuring responsible AI adoption across industries.

Governance & Risk Management

SSA Struggling to Modernize Fraud Prevention Tech, GAO Warns

Chris Riotta  •  October 10, 2024

The Social Security Administration is facing criticism for failing to update its fraud prevention technology, leaving financial institutions and federal authorities at risk of missing synthetic identity scams, according to a new Government Accountability Office report.

Cybercrime

Breach Roundup: Global Signal Exchange to Curb Online Fraud

Anviksha More  •  October 10, 2024

This week, the Global Signal Exchange hopes to dent online crime, a Fidelity data breach, phishing platform targets Microsoft 365 users, October Patch Tuesday, Pavel Durov said he's always cooperated with police, Highline Public Schools and CreditRiskMonitor updates, ADT and Casio suffered breaches

Cybercrime

Internet Archive Data Breach Exposes 31 Million Accounts

Mathew J. Schwartz  •  October 10, 2024

The nonprofit Internet Archive has been hit by hackers, who stole usernames and for 31 million accounts, including email addresses and bcrypt-hashed passwords. In recent days, the digital archive has also suffered defacement and repeat denial-of-service attacks.

Incident & Breach Response

Marriott Pays $52M to Settle US States' Breach Litigation

David Perera  •  October 9, 2024

The world's largest hotel chain agreed Wednesday to pay $52 million and submit to 20 years of third-party monitoring of its cybersecurity program to settle a rash of data breaches affecting millions of guests. The sizeable payout is part of a settlement reached with 50 U.S. attorneys general.

Breach Notification

Australia May Require Businesses to Report Ransom Payments

Jayant Chakravarti  •  October 9, 2024

Ransom payments are typically tightly held secrets between cybercriminals and their victims, but the Australian government has introduced a cybersecurity bill in Parliament that would require larger businesses to report ransom payments to the government.

Artificial Intelligence & Machine Learning

US DOJ Developing Guidelines for AI Use in Law Enforcement

Chris Riotta  •  October 9, 2024

The U.S. Department of Justice is drafting new guidelines for law enforcement on the use of artificial intelligence and facial recognition tools to enhance public safety while safeguarding civil rights and ensuring ethical deployment, a senior official said Wednesday.

Breach Notification

County 911 Service Notifying 180,000 About Breach in July

Marianne Kolbasuk McGee  •  October 9, 2024

An Oklahoma county provider of medical, fire, police and other 911 emergency services is notifying 180,000 individuals that their health information may have been compromised in a recent ransomware attack. The incident affects patients receiving emergency medical care as far back as 2011.

Governance & Risk Management

Ivanti CSA Customers Targeted in New Zero-Day Attacks

Anviksha More  •  October 9, 2024

Internet appliance maker Ivanti warned customers Tuesday that attackers are actively exploiting new vulnerabilities in Cloud Services Appliance instances by chaining three security flaws with a zero-day patched in September. The company advised customers to update to version 5.0.