Thu.Jan 04, 2024

article thumbnail

Hospitals Sue LockBit, Ask Cloud Firm to Return Stolen Data

Data Breach Today

NY Hospital Group Claims Cybercriminals Kept Data on Boston-Based Firm's Servers An upstate New York hospital group has filed a lawsuit against cybercriminal group LockBit in a legal maneuver aimed at forcing a Boston-based cloud services firm to turn over patient data LockBit had stolen from the entities last summer and allegedly stored on the tech company's servers.

Cloud 314
article thumbnail

New iPhone Exploit Uses Four Zero-Days

Schneier on Security

Kaspersky researchers are detailing “an attack that over four years backdoored dozens if not thousands of iPhones, many of which belonged to employees of Moscow-based security firm Kaspersky.” It’s a zero-click exploit that makes use of four iPhone zero-days. The most intriguing new detail is the targeting of the heretofore-unknown hardware feature, which proved to be pivotal to the Operation Triangulation campaign.

Libraries 131
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Breach Roundup: DOJ Fines XCast $10M for Illegal Robocalls

Data Breach Today

Also: Mandiant X Account Hijacked in Cryptocurrency Scam This week, hackers took over Mandiant's X account, authorities charged a Nigerian hacker with stealing $7.5 million from charities, the DOJ fined XCast $10 million for illegal robocalls, and attackers exploited an SMTP smuggling flaw in a phishing email campaign.

Phishing 297
article thumbnail

Experts found 3 malicious packages hiding crypto miners in PyPi repository

Security Affairs

Researchers discovered three malicious packages in the PyPI repository targeting Linux systems with a cryptocurrency miner. Fortinet researchers discovered three malicious packages in the open-source PyPI repository. The three packages named modularseven, driftme, and catme were designed to target Linux systems to deploy a crypto miner. The packages have the same author, known as “sastra”, who created a PyPI account shortly before uploading the first of them.

Mining 121
article thumbnail

Get Better Network Graphs & Save Analysts Time

Many organizations today are unlocking the power of their data by using graph databases to feed downstream analytics, enahance visualizations, and more. Yet, when different graph nodes represent the same entity, graphs get messy. Watch this essential video with Senzing CEO Jeff Jonas on how adding entity resolution to a graph database condenses network graphs to improve analytics and save your analysts time.

article thumbnail

Cryptohack Roundup: Orbit Chain's $81M New Year's Eve Hack

Data Breach Today

Also: Crypto Hack Losses in 2023 Decreased by Over 50% This week, Orbit Chain lost $81 million in a New Year's Eve hack, Indonesian police shuttered bitcoin mining operations, dYdX named its attacker, $324,000 users fell victim to 2023 crypto phishing scams, Singapore's prime minister had a deepfake problem, and 2023 crypto losses decreased by over 50%.

Mining 293

More Trending

article thumbnail

Russian Sandworm Group Spied on Kyivstar Networks for Months

Data Breach Today

Nation-State Hackers Blamed for Severing Communications to 24 Million Citizens Ukraine's security intelligence chief said Russian hackers had been responsible for severing internet access and mobile communications from telecom operator Kyivstar in December, after compromising the firm's network months ago. He said the "disastrous" cyberattack had wiped "almost everything.

article thumbnail

Hacker hijacked Orange Spain RIPE account causing internet outage to company customers

Security Affairs

An internet outage impacted Orange Spain after a hacker gained access to the company’s RIPE account to misconfigure BGP routing. The hacker, who uses the moniker ‘Snow’, gained access to the RIPE account of Orange Spain and misconfigured the BGP routing causing an internet outage. The customers of the company were not able to access the internet for several hours on January 3 as a result of the attack.

Passwords 116
article thumbnail

Accenture Buys 6point6 to Expand Cyber Portfolio in UK

Data Breach Today

UK Tech Firm Specializes in Cloud, Data and Cybersecurity Solutions Accenture has finalized its acquisition of U.K. tech consultancy firm 6point6, which specializes in cybersecurity, cloud and digital transformation solutions. The acquisition will add 6point6's 400 staffers to Accenture in support of its business in the U.K. market.

article thumbnail

Crooks hacked Mandiant X account to push cryptocurrency scam

Security Affairs

The X account of cybersecurity giant Mandiant was hacked, attackers used it to impersonate the Phantom crypto wallet and push a cryptocurrency scam. Crooks hacked the X account of cybersecurity firm Mandiant and used it to impersonate the Phantom crypto platform and share a cryptocurrency scam. Today Mandiant had their Twitter account stolen. 2024 starting strong pic.twitter.com/gHagm2o36q — vx-underground (@vxunderground) January 3, 2024 The X account of the Google-owned firm Mandiant has

article thumbnail

Peak Performance: Continuous Testing & Evaluation of LLM-Based Applications

Speaker: Aarushi Kansal, AI Leader & Author and Tony Karrer, Founder & CTO at Aggregage

Software leaders who are building applications based on Large Language Models (LLMs) often find it a challenge to achieve reliability. It’s no surprise given the non-deterministic nature of LLMs. To effectively create reliable LLM-based (often with RAG) applications, extensive testing and evaluation processes are crucial. This often ends up involving meticulous adjustments to prompts.

article thumbnail

How AI Is Transforming Payment Risk and Fraud at Genpact

Data Breach Today

Genpact VP of Payments Kristine Demareski on Harnessing Generative AI There are many potential uses for generative AI at financial services firms, but few are more promising than those in the areas of risk and fraud, said Kristine Demareski, vice president of payments at Genpact, which is already harnessing AI to increase efficiencies in analysts' decision-making.

Risk 283
article thumbnail

ICYMI –December in privacy and cybersecurity

Data Protection Report

December tends to be a busy time for everyone, so you may have missed a privacy update or two. We have set out some updates in the form of questions, with links in the answers where you can find more information. (For those making this quiz a competitive event, we have included a tie-breaker/bonus question.) Answers are below. 1. As of December 18, 2023, unless the U.S.

Privacy 109
article thumbnail

Practice Fined $160K for 6 'Right of Access' Complaints

Data Breach Today

Settlement Is HHS OCR's 46th Enforcement Action Based on Health Record Complaints It's a new year, but federal regulators are beating an old HIPAA drum: The Department of Health and Human Services has hit a New Jersey medical practice with a $160,000 settlement in the agency's 46th enforcement action involving HIPAA complaint about right of access to health records.

Access 280
article thumbnail

[Live Demo] Ridiculously Easy Security Awareness Training and Phishing

KnowBe4

Old-school awareness training does not hack it anymore. Your email filters have an average 7-10% failure rate; you need a strong human firewall as your last line of defense.

article thumbnail

How and Why Should You Be Tracking Geopolitical Risk?

Geopolitical risk is now at the top of the agenda for CEOs. But tracking it can be difficult. The world is more interconnected than ever, whether in terms of economics and supply chains or technology and communication. Geopolitically, however, it is becoming increasingly fragmented – threatening the operations, financial well-being, and security of globally connected companies.

article thumbnail

Ransomware Group Steals Australian Courts' Video Recordings

Data Breach Today

Hackers Lock Up Recordings of Court Hearings to Extort Victoria's Court System The court system of Victoria said it had experienced a serious cybersecurity incident in late 2023 that gave hackers access to video recordings of proceedings at multiple courts, including the Supreme Court and the County Court. The hack took place on Dec. 8 and was discovered two weeks later.

article thumbnail

To Beat Russia, Ukraine Needs a Major Tech Breakthrough

WIRED Threat Level

Ukraine’s top general says his country must innovate on the level of inventing gunpowder to “break military parity” with Russia. If it’s successful, it could change the future of war.

article thumbnail

Top 10 AI and Automation Predictions That Will Shape the Future

Information Matters

IDC recently revealed its top 10 worldwide predictions for artificial intelligence, generative AI, and automation that will significantly impact businesses and technology over the next few years with global spending Read more The post Top 10 AI and Automation Predictions That Will Shape the Future appeared first on Information Matters - Where AI Meets Knowledge Management.

article thumbnail

US Supreme Court’s Roberts urges ‘caution’ as AI reshapes legal field via Reuters

IG Guru

Check out the article here. The post US Supreme Court’s Roberts urges ‘caution’ as AI reshapes legal field via Reuters first appeared on IG GURU.

Risk 62
article thumbnail

7 Pitfalls for Apache Cassandra in Production

Apache Cassandra is an open-source distributed database that boasts an architecture that delivers high scalability, near 100% availability, and powerful read-and-write performance required for many data-heavy use cases. However, many developers and administrators who are new to this NoSQL database often encounter several challenges that can impact its performance.

article thumbnail

The Rise of AI Assistants for Academic Research

Information Matters

Artificial intelligence (AI) tools are increasingly making inroads into academic research, promising to be virtual lab partners for scientists and scholars. From searching literature to writing manuscripts, AI-powered software aims Read more The post The Rise of AI Assistants for Academic Research appeared first on Information Matters - Where AI Meets Knowledge Management.

article thumbnail

Annual performance reviews – are there better options?

Ascent Innovations

HR researchers argue that many organizations will replace performance reviews with consistent coaching. The future of work is being redefined by the realities of the current era and the rise of technology in workplace. Some of the workplace HR practices are seeing transformation. For many leaders, performance should be continuously evaluated, and feedback should not be put off; this can mean the end of annual performance reviews, in favor of ongoing, real-time feedback.

article thumbnail

The Rise of Generative AI in Business

Information Matters

Artificial intelligence that can generate original text, images and more is capturing executive attention across sectors. So-called generative AI represents the latest frontier in AI adoption. Nearly all organizations surveyed Read more The post The Rise of Generative AI in Business appeared first on Information Matters - Where AI Meets Knowledge Management.

article thumbnail

Preserving the History of New Brunswick with Community Webs

Archive-It

Guest post by Jacquelyn Oshman, Head of Circulation, New Brunswick Free Public Library This post is part of a series written by members of the Community Webs program. Community Webs advances the capacity for community-focused memory organizations to build web and digital archives documenting local histories and underrepresented voices. For more information, visit communitywebs.archive-it.org.

article thumbnail

Reimagined: Building Products with Generative AI

“Reimagined: Building Products with Generative AI” is an extensive guide for integrating generative AI into product strategy and careers featuring over 150 real-world examples, 30 case studies, and 20+ frameworks, and endorsed by over 20 leading AI and product executives, inventors, entrepreneurs, and researchers.