Latest

Endpoint Security

European Council Adopts Cyber Resilience Act

Akshaya Asokan  •  October 10, 2024

The European Council adopted Thursday security-by-design regulation that makes patching and vulnerability updates mandatory for connected devices. The regulation will ensure that "products with digital components are made secure throughout the supply chain and throughout their lifecycle."

Breach Notification

New York State Enacts New Cyber Requirements for Hospitals

Marianne Kolbasuk McGee  •  October 10, 2024

General hospitals in New York State must now report cyber incidents to state regulators within 72 hours under new cybersecurity requirements that went into effect on Oct. 2. The hospitals have until next fall to comply with a long list of other security mandates, including appointing a CISO.

Artificial Intelligence & Machine Learning

GenAI Impact on Election Disinformation Limited, Says OpenAI

Rashmi Ramesh  •  October 10, 2024

Foreign threat actors are using generative artificial intelligence to influence U.S. elections, but their impact is limited, said OpenAI. Threat actors from China, Russia, Iran, Rwanda and Vietnam maliciously used AI tools to support influence operations.

Artificial Intelligence & Machine Learning

Relyance AI Raises $32M to Take on AI Governance Challenges

Michael Novinson  •  October 10, 2024

Relyance AI raised $32 million in Series B funding to grow its data governance platform. The funds will be used to scale operations, enhance real-time data visibility, and support enterprises in complying with complex global privacy regulations, ensuring responsible AI adoption across industries.

Cybercrime

Breach Roundup: Global Signal Exchange to Curb Online Fraud

Anviksha More  •  October 10, 2024

This week, the Global Signal Exchange hopes to dent online crime, a Fidelity data breach, phishing platform targets Microsoft 365 users, October Patch Tuesday, Pavel Durov said he's always cooperated with police, Highline Public Schools and CreditRiskMonitor updates, ADT and Casio suffered breaches

Blockchain & Cryptocurrency

Cryptohack Roundup: Australia Nabs Crypto in Ghost Takedown

Rashmi Ramesh  •  October 10, 2024

This week, Australia seized crypto from alleged Ghost mastermind, Taiwan drafts new AML rules, IcomTech founder sentenced, U.S. looks to recover stolen crypto, EigenLayer's erroneous fund transfer, FTX's bankruptcy plan approved, Bitfinex hack update and regulatory push for a lawsuit against Nvidia.

Cybercrime

Internet Archive Data Breach Exposes 31 Million Accounts

Mathew J. Schwartz  •  October 10, 2024

The nonprofit Internet Archive has been hit by hackers, who stole usernames and for 31 million accounts, including email addresses and bcrypt-hashed passwords. In recent days, the digital archive has also suffered defacement and repeat denial-of-service attacks.

Governance & Risk Management

How CKW Is Building a Smart Energy Grid

Sandhya Michu , Brian Pereira  •  October 10, 2024

Swiss utility giant Centralschweizerische Kraftwerke has transformed its legacy operational communication network with a hybrid multiservice platform. Yann Gosteli, head of secondary systems at CKW, shares how the company has built an operationally efficient network infrastructure.

Incident & Breach Response

Marriott Pays $52M to Settle US States' Breach Litigation

David Perera  •  October 9, 2024

The world's largest hotel chain agreed Wednesday to pay $52 million and submit to 20 years of third-party monitoring of its cybersecurity program to settle a rash of data breaches affecting millions of guests. The sizeable payout is part of a settlement reached with 50 U.S. attorneys general.

Breach Notification

County 911 Service Notifying 180,000 About Breach in July

Marianne Kolbasuk McGee  •  October 9, 2024

An Oklahoma county provider of medical, fire, police and other 911 emergency services is notifying 180,000 individuals that their health information may have been compromised in a recent ransomware attack. The incident affects patients receiving emergency medical care as far back as 2011.

Fraud Management & Cybercrime

Human Security Raises $50M+ to Take on Click-Fraud Defense

Michael Novinson  •  October 9, 2024

Human Security's recent $50 million growth funding, led by WestCap, will drive the development of click-fraud defense and enhance advertising integrity solutions. CEO Stu Solomon aims to leverage the funding for scaling the engineering and data science teams, addressing emerging fraud threats.

Governance & Risk Management

Ivanti CSA Customers Targeted in New Zero-Day Attacks

Anviksha More  •  October 9, 2024

Internet appliance maker Ivanti warned customers Tuesday that attackers are actively exploiting new vulnerabilities in Cloud Services Appliance instances by chaining three security flaws with a zero-day patched in September. The company advised customers to update to version 5.0.