Latest

Healthcare

Texas AG Hopes to Upend HIPAA Rules to Investigate Abortions

Marianne Kolbasuk McGee  •  September 6, 2024

Texas Attorney General Ken Paxton is suing the Biden administration, alleging that "unlawful" HIPAA Privacy Rule regulations are hindering the state's law enforcement investigations into abortion cases and other reproductive health care cases.

Governance & Risk Management

Absolute Purchases Syxsense to Tackle Cyber Vulnerabilities

Michael Novinson  •  September 6, 2024

Absolute Security has strengthened its platform with the acquisition of Syxsense, adding powerful automated vulnerability management tools to its existing endpoint security capabilities. The move aims to improve security compliance and simplify complex remediation tasks for organizations.

Cybercrime

Feds Warn Health Sector to Patch Apache Tomcat Flaws

Marianne Kolbasuk McGee  •  September 6, 2024

Federal authorities are alerting healthcare entities of vulnerabilities - including older flaws - that put Apache Tomcat at risk for attacks if left unmitigated. The open-source web server is heavily used in healthcare for hosting electronic health record and other systems and applications.

Cybercrime

Critical GeoServer Flaw Enabling Global Hack Campaigns

Prajeet Nair  •  September 6, 2024

Cybercriminals are using a critical remote code execution vulnerability in an open-source geospatial data platform to spread malware globally across several industries. GeoServer Project maintainers released a patch on July 1. The vulnerability has a CVSS score of 9.8 out of 10.

Artificial Intelligence & Machine Learning

Underground Demand for Malicious LLMs Is Robust

Rashmi Ramesh  •  September 6, 2024

The underground market for illicit large language models is a lucrative one, said academic researchers who called for better safeguards against artificial intelligence misuse. "This laissez-faire approach essentially provides a fertile ground for miscreants to misuse the LLMs."

Cyber Insurance

Moody's Ratings: Cyber Insurance Competition Up, Prices Down

Mathew J. Schwartz  •  September 6, 2024

Competition has been increasing in the cyber insurance market, leading to a "moderate" decrease in insurance premiums after several years of rate increases. So reports Moody's Ratings, which said that the changes were driven by an influx of new players that is likely to continue.

Endpoint Detection & Response (EDR)

After CrowdStrike Outage: Time to Rebuild Microsoft Windows?

Mathew J. Schwartz  •  September 6, 2024

The global disruption caused by a faulty CrowdStrike software triggering a kernel panic and computer meltdowns has led government agencies, experts and vendors to call for rethinking Windows operating system resiliency, including the deep-level OS access security tools now require.

►

Cybercrime

ISMG Editors: How Arrest of Telegram CEO Affects Encryption

Anna Delaney  •  September 6, 2024

In the latest weekly update, ISMG editors discussed the implications of the recent arrest of Telegram's CEO in Paris for encrypted messaging services, the transformative impact of artificial intelligence in cybersecurity, and the latest regulations designed to curb fraud in electronic payments.

Fraud Management & Cybercrime

RansomHub Claims Theft of Montana Planned Parenthood Data

Marianne Kolbasuk McGee  •  September 5, 2024

Planned Parenthood of Montana, which provides patients with reproductive healthcare services including birth control and abortion, is responding to a hack and a threat by cybercriminal group RansomHub to leak 93 gigabytes of data allegedly stolen from the organization.

Endpoint Security

Kaspersky US Customers Migrate to Pango's UltraAV After Ban

Michael Novinson  •  September 5, 2024

Kaspersky is transferring 1 million U.S. antivirus customers to Pango Group's UltraAV product following the Department of Commerce's ban on Kaspersky software sales or updates. The transition ensures users will continue to receive critical cybersecurity updates and services.

Critical Infrastructure Security

FEMA Has Begun Deploying Cyber Advisers to Disaster Zones

Chris Riotta  •  September 5, 2024

Charles Armstrong, chief information officer of the Federal Emergency Management Agency, told the Billington Cybersecurity Summit his agency has begun deploying cyber advisors to disaster recovery zones to "rapidly and securely" build information technology and operational technology infrastructure.

Cybercrime

Breach Roundup: YubiKey 5 Is Vulnerable to Cloning

Anviksha More  •  September 5, 2024

This week, YubiKey 5 has a flaw, an Ohio city sued a researcher, the Irish regulator ended its GrokAI case, open-source AI tools exposed data, Starlink blocked X in Brazil, FCC banned Kaspersky, Intel addressed a researcher's claim, and Transport of London is still affected by a cyber incident.