US Prepares to Gather AI Foundational Model Developer Info

Rashmi Ramesh • September 9, 2024

The U.S. federal government is preparing to collect reports from foundational artificial intelligence model developers, including details about their cybersecurity defenses and red-teaming efforts. The Department of Commerce said it wants thoughts on how data should be safety collected and stored.

Cyberwarfare / Nation-State Attacks

US NTIA Probes Data Center Security Risks

Latest

Governance & Risk Management

Progress Software Fixes Critical LoadMaster Vulnerability

Prajeet Nair • September 9, 2024

Progress Software released an urgent patch Thursday to fix a critical vulnerability that hackers could exploit to launch remote attacks. The company is no stranger to urgent patching. It was at the center of a Memorial Day 2023 mass hacking incident.

Network Detection & Response

Darktrace CEO Swap: Gustafsson Steps Down; Popelka Steps Up

Michael Novinson • September 9, 2024

Darktrace has promoted COO Jill Popelka to CEO, replacing long-time leader Poppy Gustafsson. As the cybersecurity AI vendor prepares to finalize its sale to Thoma Bravo, Popelka will steer Darktrace into its next phase of growth. Gustafsson will join the board as a non-executive director.

Blockchain & Cryptocurrency

FBI Report Says Cryptocurrency Scams Surged in 2023

Chris Riotta • September 9, 2024

The FBI's Internet Crime Complaint Center on Monday issued a report revealing victims filed more than 69,000 public complaints related to cryptocurrency fraud and $5.6 billion in financial losses in 2023, while investment scams made up the bulk of losses throughout the year.

Breach Notification

Acadian Ambulance Notifying Nearly 3 Million of Data Theft

Marianne Kolbasuk McGee • September 9, 2024

A Louisiana-based ambulance company that provides emergency medical care services in four states is notifying nearly 3 million people that their sensitive health information was potentially stolen in a June hack. Ransomware gang Daixin claims to have published the data on its dark web leak site.

Cyberwarfare / Nation-State Attacks

German Cyber Agency Investigating APT28 Phishing Campaign

Akshaya Asokan • September 9, 2024

The German cyber agency is reportedly investigating a phishing campaign tied to Russian state hacking group APT28 that used a bogus website mimicking an influential think tank. The campaign, which ran for months, used variations of the institute's legitimate IfW-Kiel web domain to lure victims.

Governance & Risk Management

Patch Alert Issued for Veeam Backup & Replication Software

Mathew J. Schwartz • September 9, 2024

Security experts are urging all Veeam Backup & Replication users to immediately update their software to patch a flaw that attackers can remotely exploit to take full control of a system. Experts say ransomware groups likely will target the critical-severity vulnerability for double extortion.

Healthcare

Texas AG Hopes to Upend HIPAA Rules to Investigate Abortions

Marianne Kolbasuk McGee • September 6, 2024

Texas Attorney General Ken Paxton is suing the Biden administration, alleging that "unlawful" HIPAA Privacy Rule regulations are hindering the state's law enforcement investigations into abortion cases and other reproductive health care cases.

Governance & Risk Management

Absolute Purchases Syxsense to Tackle Cyber Vulnerabilities

Michael Novinson • September 6, 2024

Absolute Security has strengthened its platform with the acquisition of Syxsense, adding powerful automated vulnerability management tools to its existing endpoint security capabilities. The move aims to improve security compliance and simplify complex remediation tasks for organizations.

Cybercrime

Feds Warn Health Sector to Patch Apache Tomcat Flaws

Marianne Kolbasuk McGee • September 6, 2024

Federal authorities are alerting healthcare entities of vulnerabilities - including older flaws - that put Apache Tomcat at risk for attacks if left unmitigated. The open-source web server is heavily used in healthcare for hosting electronic health record and other systems and applications.

Cybercrime

Critical GeoServer Flaw Enabling Global Hack Campaigns

Prajeet Nair • September 6, 2024

Cybercriminals are using a critical remote code execution vulnerability in an open-source geospatial data platform to spread malware globally across several industries. GeoServer Project maintainers released a patch on July 1. The vulnerability has a CVSS score of 9.8 out of 10.

Artificial Intelligence & Machine Learning

Underground Demand for Malicious LLMs Is Robust

Rashmi Ramesh • September 6, 2024

The underground market for illicit large language models is a lucrative one, said academic researchers who called for better safeguards against artificial intelligence misuse. "This laissez-faire approach essentially provides a fertile ground for miscreants to misuse the LLMs."

Cyber Insurance

Moody's Ratings: Cyber Insurance Competition Up, Prices Down

Mathew J. Schwartz • September 6, 2024

Competition has been increasing in the cyber insurance market, leading to a "moderate" decrease in insurance premiums after several years of rate increases. So reports Moody's Ratings, which said that the changes were driven by an influx of new players that is likely to continue.