Data Breach Today

OCTOBER 9, 2023

Emergency Responder Among Several Recent Cisco Product Vulnerability Advisories Cisco has released urgent fixes to a critical vulnerability affecting an emergency communication system used to track callers' location in real time. A developer inadvertently hard-coded credentials in Cisco Emergency Responder software, opening a permanent backdoor for unauthenticated attackers.

Communications 298

Communications 298

Krebs on Security

OCTOBER 9, 2023

The fake USPS phishing page. Recent weeks have seen a sizable uptick in the number of phishing scams targeting U.S. Postal Service (USPS) customers. Here’s a look at an extensive SMS phishing operation that tries to steal personal and financial data by spoofing the USPS, as well as postal services in at least a dozen other countries. KrebsOnSecurity recently heard from a reader who received an SMS purporting to have been sent by the USPS, saying there was a problem with a package destined

Phishing 263

Phishing Analytics Passwords Government 263

Data Breach Today

OCTOBER 9, 2023

Updates Expected Wednesday for Open-Source Command-Line Tool, Library Maintainers of the widely used open-source command-line tool cURL and libcurl library that supports key network protocols said two upcoming vulnerabilities are set to be disclosed this week. One flaw is probably "the worst curl security flaw in a long time," said curl founder Daniel Stenberg.

Libraries 292

Libraries Security 292

The Last Watchdog

OCTOBER 9, 2023

Clean Code’ is a simple concept rooted in common sense. This software writing principle cropped up some 50 years ago and might seem quaint in today’s era of speedy software development. Related: Setting IoT security standards At Black Hat 2023 , I had the chance to visit with Olivier Gaudin , founder and co-CEO, and Johannes Dahse , head of R&D, at SonarSource , a Geneva, Switzerland-based supplier of systems to achieve Clean Code.

IoT 180

IoT Security IT 180

Advertisement

Many organizations today are unlocking the power of their data by using graph databases to feed downstream analytics, enahance visualizations, and more. Yet, when different graph nodes represent the same entity, graphs get messy. Watch this essential video with Senzing CEO Jeff Jonas on how adding entity resolution to a graph database condenses network graphs to improve analytics and save your analysts time.

Analytics

Data Breach Today

OCTOBER 9, 2023

Hackers Claim to Have 20 Million Pieces of Code; Ancestry Data Leaked on Dark Web Genetics testing firm 23andMe is investigating a data leak of ancestry DNA information for certain customers whose usernames and passwords were previously hacked on other websites. The company suspects a massive credential stuffing attack on individual accounts using recycled passwords and no MFA.

Passwords 285

Passwords 285

Data Breach Today

OCTOBER 9, 2023

Cloud Security Alliance's Troy Leach on AI in Cloud, Fintech Industry Firms using large language models that power gen AI-powered tools must consider security and privacy aspects such as data access, output monitoring and model security before jumping on the bandwagon, said Troy Leach of Cloud Security Alliance. "Everything is going to be AI as a service," Leach predicted.

Cloud 268

Cloud Privacy Access Security 268

The Last Watchdog

OCTOBER 9, 2023

Atlanta, GA, Oct. 9, 2023 — Jonathan Shihao Ji, a computer science professor at Georgia State University, has received a $10 million grant from the Department of Defense (DoD) to address critical problems in artificial intelligence (AI) and robotics with a focus on human-robot interaction, 3D virtual environment reconstruction, edge computing and trustworthy AI In recent years, AI has become more and more prevalent in our world, powering search engines, voice assistants and self-driving c

Artificial Intelligence 100

Artificial Intelligence Cloud Communications Privacy 100

Data Breach Today

OCTOBER 9, 2023

Petition Signed by 65 Parliamentarians and 31 Civil Society Organizations More than five dozen British lawmakers across political parties and privacy organizations called for an "immediate stop" to real-time facial recognition in the United Kingdom. Live facial recognition faces a ban in Europe and its use by police is banned in a handful of U.S. jurisdictions.

Privacy 268

Privacy IT 268

Hunton Privacy

OCTOBER 9, 2023

On September 29, 2023, the Centre for Information Policy Leadership at Hunton Andrews Kurth (“CIPL”) released a new paper on its Ten Recommendations for Global AI Regulation. The paper is part of CIPL’s Accountable AI project and follows several earlier contributions including Artificial Intelligence and Data Protection in Tension (October 2018), Hard Issues and Practical Solutions (February 2020), and Artificial Intelligence and Data Protection: How the GDPR Regulates AI (March 2020).

Paper 123

Paper Artificial Intelligence GDPR Risk 123

Speaker: Aarushi Kansal, AI Leader & Author and Tony Karrer, Founder & CTO at Aggregage

Software leaders who are building applications based on Large Language Models (LLMs) often find it a challenge to achieve reliability. It’s no surprise given the non-deterministic nature of LLMs. To effectively create reliable LLM-based (often with RAG) applications, extensive testing and evaluation processes are crucial. This often ends up involving meticulous adjustments to prompts.

IT

Security Affairs

OCTOBER 9, 2023

Flagstar Bank announced a data breach suffered by a third-party service provider exposed the personal information of over 800,000 US customers. Flagstar Bank is warning 837,390 US customers that their personal information was exposed after threat actors breached the third-party service provider Fiserv. Flagstar Bank is an American commercial bank headquartered in Troy, Michigan , it is a wholly owned subsidiary of New York Community Bank.

Data breaches 120

Data breaches Sales Ransomware Cybersecurity 120

Dark Reading

OCTOBER 9, 2023

Thousands of devices, including D-Link and Zyxel gear, remain vulnerable to takeover despite the availability of patches for the several bugs being exploited by IZ1H9 campaign.

116

116

Security Affairs

OCTOBER 9, 2023

IBM observed a credential harvesting campaign that is targeting Citrix NetScaler gateways affected by the CVE-2023-3519 vulnerability. IBM’s X-Force researchers reported that threat actors are conducting a large-scale credential harvesting campaign exploiting the recent CVE-2023-3519 vulnerability (CVSS score: 9.8) in Citrix NetScaler Gateways.

Authentication 117

Authentication Passwords Cybersecurity Security 117

Dark Reading

OCTOBER 9, 2023

It's past time to reimagine how to best nurture talent and expand recruiting and training to alleviate the shortage of trained cybersecurity staff. We need a diverse talent pool trained for tomorrow's challenges.

Cybersecurity 108

Cybersecurity IT 108

Advertisement

Geopolitical risk is now at the top of the agenda for CEOs. But tracking it can be difficult. The world is more interconnected than ever, whether in terms of economics and supply chains or technology and communication. Geopolitically, however, it is becoming increasingly fragmented – threatening the operations, financial well-being, and security of globally connected companies.

Risk

WIRED Threat Level

OCTOBER 9, 2023

The same chaotic day FTX declared bankruptcy, someone began stealing hundreds of millions of dollars from its coffers. A WIRED investigation reveals the company’s “very crazy night” trying to stop them.

IT 108

IT Blockchain Security 108

Dark Reading

OCTOBER 9, 2023

Following the publication of the critical Linux security vulnerability, security specialists released PoC exploits to test the implications of CVE-2023-4911.

Security 114

Security 114

CGI

OCTOBER 9, 2023

As organizations move fast toward the use of generative AI, much has been written about common considerations to keep in mind when exploring and implementing this promising technology. Yet, what is often missing in this dialogue are two important considerations in the journey to generative AI: knowledge sovereignty and sustainability.

98

98

KnowBe4

OCTOBER 9, 2023

A new report from Secureworks has found that business email compromise (BEC) remains “one of the most financially damaging online crimes overall for orgs” in 2023. The security firm’s 2023 State of the Threat report says BEC “exceeds even ransomware in aggregate, mainly because it is so prolific, even if individual financial losses from BEC may be lower than individual losses from ransomware.

Phishing 94

Phishing Ransomware Authentication Communications 94

Advertisement

Apache Cassandra is an open-source distributed database that boasts an architecture that delivers high scalability, near 100% availability, and powerful read-and-write performance required for many data-heavy use cases. However, many developers and administrators who are new to this NoSQL database often encounter several challenges that can impact its performance.

Security

Dark Reading

OCTOBER 9, 2023

Security sensors are common in the home for both prevention and response in the event something goes wrong. But in the cloud, have you taken the same approach?

Cloud 98

Cloud Security 98

KnowBe4

OCTOBER 9, 2023

As insurers become more educated on what a “secure organization” looks like, they are tightening their requirements that puts the onus on organizations to be more secure.

Insurance 95

Insurance Education Security Security awareness 95

eSecurity Planet

OCTOBER 9, 2023

A surge of critical vulnerabilities and zero-day exploits has made for a very busy week in IT security, affecting a range of tech giants like Atlassian, Cisco, Apple, Arm, Qualcomm and Microsoft. Among the issues in the last week, Android and Arm faced actively exploited vulnerabilities in GPU drivers. Microsoft released urgent patches for Edge, Teams, and Skype.

Libraries 89

Libraries Ransomware Access Security 89

KnowBe4

OCTOBER 9, 2023

As attackers evolve their toolsets and processes, the significant drop in dwell time signifies a much higher risk to organizations that now have less time to detect and respond to initial attacks.

Ransomware 86

Ransomware Risk Security awareness Security 86

Advertisement

“Reimagined: Building Products with Generative AI” is an extensive guide for integrating generative AI into product strategy and careers featuring over 150 real-world examples, 30 case studies, and 20+ frameworks, and endorsed by over 20 leading AI and product executives, inventors, entrepreneurs, and researchers.

Dark Reading

OCTOBER 9, 2023

The Intellexa alliance has been using a range of tools for intercepting and subverting mobile and Wi-Fi technologies to deploy its surveillance tools, according to an investigation by Amnesty International and others.

IT 91

IT 91

KnowBe4

OCTOBER 9, 2023

While industries like financial services and healthcare tend to dominate in IT attacks, the tables are turned when looking at Operational Technology (OT) cyber attacks – and the energy sector is the clear “winner.

Financial Services 84

Financial Services Cybersecurity IT Phishing 84

IBM Big Data Hub

OCTOBER 9, 2023

Artificial intelligence (AI) can help usher in a new era of human resource management, where data analytics, machine learning and automation can work together to save people time and support higher-quality outcomes. As AI technology moves beyond automation to augmentation, companies may be looking at how AI tools can make the work of human resources (HR) better for employees and job seekers.

Artificial Intelligence 72

Artificial Intelligence Privacy Records Management Analytics 72

KnowBe4

OCTOBER 9, 2023

Exciting news, registration is now open for KB4-CON EMEA! Get ready to dive into the intersection of security culture and cybersecurity at.

Cybersecurity 90

Cybersecurity Security Security awareness 90

Advertisement

If you’re considering migrating from DataStax Enterprise (DSE) to open source Apache Cassandra®, our comprehensive guide is tailored for architects, engineers, and IT directors. Whether you’re motivated by cost savings, avoiding vendor lock-in, or embracing the vibrant open-source community, Apache Cassandra offers robust value. Transition seamlessly to Instaclustr Managed Cassandra with our expert insights, ensuring zero downtime during migration.

IT

Armstrong Archives

OCTOBER 9, 2023

Content Oyununun qaydaları və şərtləri Aviator-ə bənzər başqa hansı oyunları oynaya bilərəm? Lisenziyalı onlayn kazinolar: saytı necə seçmək olar in AZ bukmeker kontorunda addım-addım qeydiyyat Xaricdə təhsil haqqında bloqlar Macarıstanda magistr təhsili Xaricdə təhsil magistratura dərəcəsini hansı ölkədə almaq olar? Xaricdə təhsil arzusuna qovuşanlar Pin-Up Aviator: oyun qaydaları və strategiyaları, slotdan istifadə üçün bonuslar Çempionlar Liqasında ən çox oyun keçirən oyunçular Top Onlayn Oyu

52

52

KnowBe4

OCTOBER 9, 2023

The massive uptick in business email compromise (BEC) is considered one of the costliest attack types, requiring organizations to put employees on notice to stay vigilant.

75

75

Armstrong Archives

OCTOBER 9, 2023

Content Son Yazılar in mərc tətbiqinin xüsusiyyətləri in tətbiqində mərc seçimləri Canlı Mərclər Son əlavələr Ən yaxşı e-İdman bukmekerlər-də mərc etməyin üstünlükləri Azərbaycanda ən çox baxılan 3 müsabiqə və çempionat: e-İdman canlı mərc və canlı yayım iOS üçün 1Win mərc tətbiqi Ekspress mərc edə bilərəm? in tətbiqində idman mərcləri etmək Yeni bir 1Win üzvü kimi bonus əldə edə bilərəm?

Marketing 52

Marketing 52