Thu.Jun 20, 2019

article thumbnail

Oregon Agency's Breach Tally Nearly Doubles

Data Breach Today

State's Department of Human Services Now Says 645,000 Affected The number of individuals affected by a phishing-related breach disclosed in March by the Oregon Department of Human Services has nearly doubled, according to a new notification statement, which offers more details.

Phishing 228
article thumbnail

Quantum-Resistant TLS in Go

Thales Cloud Protection & Licensing

Quantum computing attacks may have already begun. Confidential data is being exchanged using algorithms that will eventually be broken by quantum computers. Even though attackers cannot break the communications today (for we lack sufficiently powerful quantum computers), they can patiently record them for future analysis. Perhaps the most popular way to share confidential data between two remote parties is through a TLS connection.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Troy Hunt: Why Data Breaches Persist

Data Breach Today

More Data, Use of the Cloud and IoT Presage Even More Big, Bad Breaches Bad news for anyone who might have hoped that the data breach problem was getting better. "Anecdotally, it just feels like we're seeing a massive increase recently," says Troy Hunt, the creator of the free "Have I Been Pwned?" breach-notification service. Unfortunately, he says, the problem is likely to worsen.

article thumbnail

Iranian Hackers Launch a New US-Targeted Campaign as Tensions Mount

WIRED Threat Level

Three cybersecurity firms have identified phishing attacks stemming from Iran—that may lay the groundwork for something more destructive.

Phishing 102
article thumbnail

Peak Performance: Continuous Testing & Evaluation of LLM-Based Applications

Speaker: Aarushi Kansal, AI Leader & Author and Tony Karrer, Founder & CTO at Aggregage

Software leaders who are building applications based on Large Language Models (LLMs) often find it a challenge to achieve reliability. It’s no surprise given the non-deterministic nature of LLMs. To effectively create reliable LLM-based (often with RAG) applications, extensive testing and evaluation processes are crucial. This often ends up involving meticulous adjustments to prompts.

article thumbnail

The Need for a 'Zero Trust' Approach

Data Breach Today

Pete Nourse of Veriato Discusses Shifting to a New Mindset The perimeter is now both external and internal, which is why organizations must move to a "zero trust" model, says Pete Nourse of Veriato.

196
196

More Trending

article thumbnail

Florida City Paying $600,000 to End Ransomware Attack

Data Breach Today

Attack Against Municipalities Continue The city of Riviera Beach, Florida, has agreed to pay hackers about $600,000 in bitcoin to end a ransomware attack that crippled the city's IT infrastructure for nearly a month. In another recent incident, Baltimore refused to pay a ransom after an attack and faces $18 million in recovery costs so far.

article thumbnail

Hacking Hardware Security Modules

Schneier on Security

Security researchers Gabriel Campana and Jean-Baptiste Bédrune are giving a hardware security module (HSM) talk at BlackHat in August: This highly technical presentation targets an HSM manufactured by a vendor whose solutions are usually found in major banks and large cloud service providers. It will demonstrate several attack paths, some of them allowing unauthenticated attackers to take full control of the HSM.

article thumbnail

Cybersecurity's Automation Imperative

Data Breach Today

Censornet's Richard Walters on the Role of Autonomous Security With cybersecurity becoming ever more difficult to monitor and manage, and product and data overload triggering cyber fatigue among cybersecurity professionals, organizations must embrace more autonomous approaches, says Censornet's Richard Walters.

article thumbnail

Inside the FBI's Fight Against Cybercrime

Dark Reading

Heavily outnumbered and outpaced by their targets, small FBI cybersquads have been quietly notching up major wins against online criminals operating out of home and abroad.

88
article thumbnail

How and Why Should You Be Tracking Geopolitical Risk?

Geopolitical risk is now at the top of the agenda for CEOs. But tracking it can be difficult. The world is more interconnected than ever, whether in terms of economics and supply chains or technology and communication. Geopolitically, however, it is becoming increasingly fragmented – threatening the operations, financial well-being, and security of globally connected companies.

article thumbnail

Act Fast: Best Practices for Arresting Spoofed Domains

Data Breach Today

Corin Imai of DomainTools on the Quest to Block Bad Domains Organizations are increasingly relying on threat intelligence to help them better identify malicious behavior before it hits the network - or users encounter it - including using domain name system analysis to track emerging campaigns, says Corin Imai of DomainTools

IT 160
article thumbnail

Customers of 3 MSPs Hit in Ransomware Attacks

Dark Reading

Early information suggests threat actors gained access to remote monitoring and management tools from Webroot and Kaseya to distribute malware.

article thumbnail

Best Practices for Cyberattack Prevention and Response

Data Breach Today

Secon Cyber's Andrew Gogarty Describes High-Impact Risk Reduction Strategies Organizations that want to ensure they have a solid cybersecurity strategy must ensure they rigorously pursue best practices, monitor their infrastructure, eliminate vulnerabilities as well as prepare for the worst, says Andrew Gogarty of Secon Cyber.

article thumbnail

How Apple's "Find My" Feature Works

Schneier on Security

Matthew Green intelligently speculates about how Apple's new "Find My" feature works. If you haven't already been inspired by the description above, let me phrase the question you ought to be asking: how is this system going to avoid being a massive privacy nightmare? Let me count the concerns: If your device is constantly emitting a BLE signal that uniquely identifies it, the whole world is going to have (yet another) way to track you.

Privacy 86
article thumbnail

7 Pitfalls for Apache Cassandra in Production

Apache Cassandra is an open-source distributed database that boasts an architecture that delivers high scalability, near 100% availability, and powerful read-and-write performance required for many data-heavy use cases. However, many developers and administrators who are new to this NoSQL database often encounter several challenges that can impact its performance.

article thumbnail

Florida Town Pays $600K to Ransomware Operators

Dark Reading

Riviera Beach's decision to pay ransom to criminals might get files back, but it almost guarantees greater attacks against other governments.

article thumbnail

The Riviera Beach City pays $600,000 in ransom

Security Affairs

The Riviera Beach City, Florida, agreed to pay $600,000 in ransom to decrypt its data after a ransomware-based attack hit its computer system. The Riviera Beach City Council voted unanimously to pay $600,000 in ransom to decrypt its records after a ransomware attack hit its systems. The council has previously agreed to spend $941,000 to modernize the entire IT infrastructure after hackers broke into the city’s system three weeks ago, ecrypting data managed by the City.

article thumbnail

Machine Learning Boosts Defenses, but Security Pros Worry Over Attack Potential

Dark Reading

As defenders increasingly use machine learning to remove spam, catch fraud, and block malware, concerns persist that attackers will find ways to use AI technology to their advantage.

article thumbnail

Maine’s Act to Protect the Privacy of Online Consumer Information

Data Matters

Since the passage of the California Consumer Privacy Act (Cal. Civ. Code §1798.100 et seq.) (“CCPA”), several states are following in California’s footsteps and adopting privacy bills that would allow consumers to object to the sale of their personal information. On June 6, 2019, Maine Governor Janet Mills signed into law the “ Act to Protect the Privacy of Online Consumer Information.

Privacy 68
article thumbnail

Reimagined: Building Products with Generative AI

“Reimagined: Building Products with Generative AI” is an extensive guide for integrating generative AI into product strategy and careers featuring over 150 real-world examples, 30 case studies, and 20+ frameworks, and endorsed by over 20 leading AI and product executives, inventors, entrepreneurs, and researchers.

article thumbnail

Global Survey: Mac in the Enterprise Report

Jamf

To gain a global Mac perspective, we commissioned a third-party survey of employees from companies across the world, ranging from small to large enterprises. The results may surprise you.

75
article thumbnail

How to eliminate roadblocks to digital transformation

OpenText Information Management

Editor’s note: This blog is the fourth in our series on data integration. In the first blog, we looked at the importance of placing privacy at the heart of business strategy in a data-driven world. Our second blog covered how to ensure quality data drives your analytics activities. The third examined how you can integrate … The post How to eliminate roadblocks to digital transformation appeared first on OpenText Blogs.

article thumbnail

Join us at ISTE 2019

Jamf

See you in Philly next week? Jamf is excited to attend ISTE 2019, where educator-tested strategies meet proven resources for transforming learning and teaching.

article thumbnail

The Global Hawk Drone Iran Shot Down Was a $220M Surveillance Monster

WIRED Threat Level

The Global Hawk can fly at an altitude of 55,000 feet and stay aloft for 30 hours straight.

article thumbnail

How to Migrate From DataStax Enterprise to Instaclustr Managed Apache Cassandra

If you’re considering migrating from DataStax Enterprise (DSE) to open source Apache Cassandra®, our comprehensive guide is tailored for architects, engineers, and IT directors. Whether you’re motivated by cost savings, avoiding vendor lock-in, or embracing the vibrant open-source community, Apache Cassandra offers robust value. Transition seamlessly to Instaclustr Managed Cassandra with our expert insights, ensuring zero downtime during migration.

article thumbnail

Medical debt collection agency files for bankruptcy protection after data breach

IT Governance

A US medical bill and debt collection agency has filed for Chapter 11 bankruptcy protection after suffering a data breach that exposed the sensitive personal data of at least 20 million people. Compromised data included names, addresses, dates of birth and Social Security numbers – data that could be used to commit fraud and identity theft. RMCB (the Retrieval-Masters Creditors Bureau) – the parent company of AMCA (the American Medical Collection Agency) – listed assets and liabilities of up to

article thumbnail

Microsoft fixed CVE-2019-1105 flaw in Outlook for Android

Security Affairs

Microsoft has addressed an important vulnerability (CVE-2019-1105) in Outlook for Android, potentially affected over 100 million users. Microsoft has addressed an important flaw tracked as CVE-2019-1105 that affects versions of Outlook for Android app before 3.0.88. The vulnerability is a stored cross-site scripting issue that is related to the way the app parses incoming email messages. “A spoofing vulnerability exists in the way Microsoft Outlook for Android software parses specifically

article thumbnail

Post-Ransomware Attack, Florida City Pays $600K

Threatpost

Riviera Beach, a Florida city, is coughing up $600,000 to hackers after a ransomware attack brought down its computer systems.

article thumbnail

Oregon Department of Human Services data breach impacted 645,000 clients

Security Affairs

Oregon Department of Human Services announced it was a victim of a data breach in January, roughly 645,000 potentially impacted. Oregon Department of Human Services officials confirmed that the organization has suffered a data breach that has exposed personal details and health information of 645,000 clients. The incident happened in January and the Oregon Department of Human Services is notifying the incident to the clients. “The Oregon Department of Human Services is notifying about 645,

article thumbnail

Entity Resolution Checklist: What to Consider When Evaluating Options

Are you trying to decide which entity resolution capabilities you need? It can be confusing to determine which features are most important for your project. And sometimes key features are overlooked. Get the Entity Resolution Evaluation Checklist to make sure you’ve thought of everything to make your project a success! The list was created by Senzing’s team of leading entity resolution experts, based on their real-world experience.

article thumbnail

The ICO admits that its cookie policy violates the GDPR

IT Governance

The UK’s data protection watchdog has admitted that its website’s cookie policy breaches the requirements of the GDPR (General Data Protection Regulation). The ICO (Information Commissioner’s Office) made the statement following complaints that it was storing visitors’ personal data without their consent. What did the ICO do wrong? The GDPR requires organisations to ask for individuals’ consent before using certain types of cookies ­– i.e. files that track how people interact with their website.

GDPR 64
article thumbnail

CVE-2019-11707 Firefox Zero-Day exploited to infect employees at cryptocurrency exchanges

Security Affairs

Researchers discovered that recently patched Firefox zero-day (CVE-2019-11707) has been exploited to deliver Windows and Mac malware to cryptocurrency exchanges. Experts discovered that recently patched Firefox zero-day vulnerability ( CVE-2019-11707 ) has been exploited by threat actors to deliver Windows and Mac malware to employees of cryptocurrency exchanges.

article thumbnail

How to maximize the value of the cloud

Quest Software

With Foglight for Virtualization, NetVault Backup, and QoreStor, we have all the tools you need for migration, data protection and disaster recovery. ( read more ).

Cloud 65