Data Breach Today

SEPTEMBER 8, 2023

In the aftermath of mergers and acquisitions among healthcare entities - and the resulting IT integration and cost-cutting moves - gaps in technology and skills and other gaps often put organizations at higher risk for attacks and other security incidents, said Jack Danahy of NuHarbor Security.

Risk 273

Risk Security IT 273

Data Breach Today

MARCH 13, 2024

The vast healthcare ecosystem disruption caused by the recent attack on Change Healthcare, which affected more than 100 of the company's IT products and services, underscores the concentrated cyber risk when a major vendor suffers a serious cyber incident, said Keith Fricke, partner at tw-Security.

Risk 273

Risk Security IT 273

Data Breach Today

MAY 2, 2024

New CEO Brian Roche on Application Management and the Role of AI in Managing Risk New Veracode CEO Brian Roche discusses the importance of artificial intelligence in managing application risk, the integration of startup Longbow Security into Veracode's ecosystem, and the convergence of traditional application security with cloud security.

Artificial Intelligence 264

Artificial Intelligence Security Cloud Risk 264

Data Breach Today

NOVEMBER 1, 2023

DHS Secretary Alejandro Mayorkas Urges Congress to Reauthorize Key Security Powers.

Risk 263

Risk Security Cybersecurity 263

Data Breach Today

FEBRUARY 20, 2021

Automakers Should Employ Security-By-Design to Thwart Cyber Risks Autonomous vehicle manufacturers are advised to adopt security-by-design models to mitigate cybersecurity risks, as artificial intelligence is susceptible to evasion and poisoning attacks, says a new ENISA report.

Risk 300

Risk Artificial Intelligence Manufacturing Security 300

The Last Watchdog

OCTOBER 4, 2023

In a keynote address, Omdia’s Eric Parizo, managing prinicipal analyst, and Andrew Braunberg, principal analyst, unveiled an approach they coined as “proactive security.” RBVM solutions don’t merely identify vulnerabilities, it quantifies and prioritizes them, making risk management more strategic. This is a useful way to look at it.

Risk 223

Risk Security Cloud Marketing 223

Data Breach Today

SEPTEMBER 20, 2023

Successful AI Implementation Requires a Secure Foundation, Attention to Regulations The private sector's frenzy to incorporate generative AI into products is leading companies to overlook basic security practices, a Google executive warned Tuesday.

Risk 305

Risk Security Cloud 305

Data Breach Today

OCTOBER 27, 2021

Why do so many HIPAA -covered entities and their vendors do such a poor job managing security risk and safeguarding patient's protected health information? Many critical factors come into play, say Roger Severino, ex- director of HHS OCR, and Bob Chaput, founder of security consultancy Clearwater.

Risk 282

Risk Security 282

Data Breach Today

JULY 12, 2023

Acquisition Will Help Safe Security Customers See, Manage, Communicate About Risk Safe Security purchased the creators of the industry's only open standard for cyber risk quantification to improve the visibility, management and communication of risk.

Risk 130

Risk Security Communications 130

Data Breach Today

APRIL 8, 2024

Researchers Say Illegal Access to Private AI models Can Enable Cross-Tenant Attacks Security researchers have discovered two critical vulnerabilities in the Hugging Face AI platform that exposed potential gaps for attackers seeking unauthorized access and manipulation of customer data and models.

Risk 169

Risk Access Security 169

Data Breach Today

DECEMBER 19, 2023

CISA Failed to Include High-Risk Vulnerabilities in Known Exploit List, Report Says The Cybersecurity and Infrastructure Security Agency maintains an exhaustive list that the U.S.

Risk 274

Risk Cybersecurity Security IT 274

Data Breach Today

SEPTEMBER 13, 2022

Federal Authorities Urge Healthcare Sector Entities to Take Caution A host of emerging technologies - including artificial intelligence, 5G cellular, quantum computing, nanomedicine and smart hospitals - offer the potential to revolutionize healthcare, but organizations must carefully evaluate the security risks, federal authorities warn.

Artificial Intelligence 243

Artificial Intelligence Risk Security 243

Data Breach Today

AUGUST 10, 2023

Legacy infusion pumps commonly available for purchase on the secondary market often contain wireless authentication and other sensitive data that the original medical organization owners failed to purge, warned researcher Deral Heiland, citing a recent study conducted by security firm Rapid7.

Marketing 239

Marketing Risk Security Authentication 239

Data Breach Today

APRIL 21, 2021

Agency Says Exploits Pose 'Unacceptable Risk' The U.S. Cybersecurity and Infrastructure Security Agency has issued an emergency directive requiring executive branch agencies to mitigate by Friday the risks posed by a zero-day vulnerability and three other recently patched flaws in Pulse Connect Secure VPN products.

Risk 286

Risk Security Cybersecurity 286

Data Breach Today

MARCH 22, 2024

See Also: When Every Identity is at Risk, Where Do You Begin? Introducing CyberArk’s Identity Security Clinic. Where experts dissect and diagnose your

Security 265

Security Risk 265

Data Breach Today

SEPTEMBER 15, 2023

Also; The 'Quantum Divide'; Global AI Regulatory Trends In the latest weekly update, four editors at ISMG discuss important cybersecurity and privacy issues, including how to keep assets secure in the quantum era, when common usernames pose a cybersecurity threat, and how to strike the right balance between regulation and innovation in AI.

Risk 268

Risk Security Cybersecurity Privacy 268

Data Breach Today

JULY 18, 2022

A new assessment framework aims to help patients, healthcare providers and others examine the various privacy, security and other risks of digital health technologies, says Tim Andrews of the nonprofit Organization for the Review of Care and Health Applications, which co-developed the framework.

Risk 239

Risk Privacy Security IT 239

eSecurity Planet

JANUARY 18, 2024

When assessing the overall security of cloud storage and choosing a solution tailored to your business, it helps to determine its features, potential risks, security measures, and other considerations. It excels in remote access, scalability, and security, with distributed storage options and privacy adherence capabilities.

Cloud 125

Cloud Risk Security Encryption 125

Data Breach Today

MAY 25, 2023

Michelle Balderson of OTORIO on How OT Security Is Now Perceived as a Business Risk OT security is being discussed in the board room as attackers adopt the use of AI and automation.

Risk 141

Risk Security 141

Data Breach Today

MARCH 29, 2022

War Alters Resiliency Requirements, Britain's National Cyber Security Center Warns The Russia-Ukraine war has altered the risks facing organizations that use Russian technology or services, including the increased threat of being directly targeted, as well as disruptions caused by any new sanctions, warns Britain's National Cyber Security Center.

Risk 239

Risk Security 239

Data Breach Today

AUGUST 14, 2020

With the surge in telehealth use during the COVID-19 pandemic, healthcare organizations must be prepared to deal with cloud security and privacy risks, says Jim Angle of Trinity Health, who is the author of a recent report from the Cloud Security Alliance.

Cloud 258

Cloud Risk Security Privacy 258

Data Breach Today

NOVEMBER 1, 2021

HHS OCR: If Old Gear Cannot Be Replaced, Take Other Steps to Protect PHI Federal regulators are reminding healthcare organizations about the critical importance of addressing security risks involving legacy systems and devices - including specialty software and gear - that are often difficult for entities to replace.

Risk 247

Risk Security 247

Data Breach Today

DECEMBER 22, 2023

Majority of Connected Medical Devices Contain Critical Vulnerabilities, FBI Says A new GAO report says federal agencies fail to provide health are providers and patients with enough resources and information to address critical vulnerabilities in a majority of medical devices in the U.S.

Risk 278

Risk Security 278

Data Breach Today

AUGUST 19, 2022

The extremely diverse architectures and systems within the tens of thousands of very specialized types of medical devices used in clinical settings adds to the complexity healthcare organizations and manufacturers face in managing cybersecurity risk for these products, says Phil Englert of H-ISAC.

Risk 245

Risk Manufacturing Security Cybersecurity 245

Data Breach Today

OCTOBER 26, 2023

DXC Technology, Aquia CISOs on Challenges, Best Practices of Managing Code Bases In the latest "Proof of Concept," DXC Technology IT CISO and CyberEdBoard member Mike Baker and Chris Hughes, co-founder and CISO of Aquia, join ISMG editors to discuss benefits, challenges and misconceptions of adopting open source software in modern code bases - plus (..)

Risk 254

Risk Security IT 254

Data Breach Today

MARCH 29, 2023

Lightspin Deal Will Help Prioritize and Remediate Issues for Cloud-Native Resources Cisco plans to purchase its second cloud security startup in two months to deliver context, prioritization and remediation recommendations for cloud native resources.

Cloud 141

Cloud Risk Security IT 141

Schneier on Security

APRIL 27, 2023

Stanford and Georgetown have a new report on the security risks of AI—particularly adversarial machine learning—based on a workshop they held on the topic. The understanding of how to secure AI systems, we concluded, lags far behind their widespread adoption.

Risk 98

Risk Security Cybersecurity Government 98

Data Breach Today

JULY 26, 2023

While patient safety risks posed by unpatched security vulnerabilities in legacy medical devices often grab headlines, healthcare entities shouldn't underestimate the serious business risks involving other poorly secured IoT and OT gear used in healthcare settings, said Mohammad Waqas of Armis.

IoT 243

IoT Risk Security 243

Data Breach Today

APRIL 18, 2023

Generative AI Can Help Nontechnical Executives Better Understand Security Posture A cyber risk quantification startup backed by ex-Cisco CEO John Chambers has raised $50 million to apply ML technology and build more API adapters.

Risk 141

Risk Security 141

The Last Watchdog

FEBRUARY 5, 2024

One critical issue faced by organizations that rely on Exchange Server is the risk of a corrupt Exchange Server database cropping up. Fortunately, effective tools and wise best practices can help mitigate this this exposure enabling companies to indefinitely leverage Exchange Server as a productive, resilient and secure communications tool.

Risk 265

Risk Cloud Communications Education 265

Data Breach Today

DECEMBER 19, 2023

Okta Says Acquisition Will Expand Its Ability to Detect High-Risk Accounts Okta finalized an agreement to acquire Spera Security, saying the purchase will expand its ability to track risky accounts and access misconfigurations.

Security 286

Security Risk Access IT 286

Data Breach Today

JANUARY 19, 2023

Steve Harvey on Why Boards Want to Understand the Risk Factors, Not Just the Rating Security ratings provide a strong indication of potential risk, but boards increasingly want to drill into the underlying risk factors, says CEO Steve Harvey.

Risk 130

Risk Security Government 130