Image: FDA

FDA Will Begin Rejecting Medical Devices Over Cyber Soon

Marianne Kolbasuk McGee • March 29, 2023

The Food and Drug Administration on Wednesday said that starting immediately, medical device makers must include cybersecurity plans with new product applications. Beginning on Oct. 1, the FDA intends to issue "refuse to accept" determinations for submissions lacking the cyber requirements.

Endpoint Security

DC Health Link Facing Lawsuits in Hack Affecting Congress

Latest

Anti-Phishing, DMARC

Phishing Campaign Tied to Russia-Aligned Cyberespionage

Mathew J. Schwartz • March 30, 2023

A hacking group with apparent ties to Russia or Belarus has been using "simple yet effective attack techniques and tools" to gain access to multiple governments' email systems, as part of apparent cyberespionage operations in support of Russia's invasion of Ukraine, researchers warn.

Artificial Intelligence & Machine Learning

Tech Luminaries Call for Pause in AI Development

Anviksha More • March 29, 2023

A slew of top tech executives and artificial intelligence researchers called for a minimum half-year pause on advanced artificial intelligence systems. Tech giants already have fallen into a race to see who can be the quickest to incorporate AI into their products.

Next-Generation Technologies & Secure Development

Airbus, Atos Ax Deal for Minority Stake in Evidian Cyber Arm

Michael Novinson • March 29, 2023

Airbus has halted efforts to buy a 29.9% stake in Atos' $5.76 billion Evidian cybersecurity, big data and digital business. The aircraft manufacturer walked away from the transaction after determining it "does not meet the company's objectives in the current context and under the current structure."

Critical Infrastructure Security

Lawmakers Urge CISA to Devise Better Measures of Performance

Michael Novinson • March 28, 2023

Lawmakers urged Director Jen Easterly to devise metrics that quantify how effectively the Cybersecurity and Infrastructure Security Agency uses federal money to cut cyber risk. Rep. Dave Joyce wants CISA to more precisely measure the return on taxpayer spending given the agency's rising budget.

Events

'Stronger Together' - Preview of RSA Conference 2023

Tom Field • March 28, 2023

"Stronger Together" is the theme of RSA Conference 2023. In an exclusive preview of the event, Linda Gray Martin and Britta Glade explain why that theme was selected - and what attendees can expect to see from sessions, speakers and sponsors when they attend the annual gathering in San Francisco.

API Security

Essential Steps to Building a Robust API Security Program

Anna Delaney • March 28, 2023

Recent high-profile breaches resulting from API attacks are "just the tip of the iceberg," said Gartner analyst Dionisio Zumerle. "What we have is a new way of exchanging information which is increasingly popular, and almost no organization has the recipe to secure that new way of communicating."

Fraud Management & Cybercrime

TikTok Faces Further Bans in Europe

Akshaya Asokan • March 27, 2023

The French government imposed a ban on TikTok and other social media apps after concluding that "recreational apps" lack sufficient "levels of cybersecurity and protection of data to be deployed on administrative equipment," said Stanislas Guerini, the minister of transformation and public service.

Fraud Management & Cybercrime

Twitter Says Source Code Leaked on GitHub, Files Subpoena

Mihir Bagwe • March 27, 2023

Twitter says its source code was leaked by an unknown user on the popular open-source code collaboration platform GitHub. The social media giant requested a subpoena from a federal court Monday to force GitHub to provide details about the person behind the partial code leak.

Finance & Banking

First Citizens CEO: We'll Preserve Strong SVB Bond With VCs

Michael Novinson • March 27, 2023

Silicon Valley Bank's new owner plans to double down on business with venture capital and private equity firms and the portfolio companies they serve. VC and PE-focused business accounts form the largest segment of the combined $143 billion loan portfolio of First Citizens and Silicon Valley Bank.

Cyberwarfare / Nation-State Attacks

US Limits Government Use of Advanced Smartphone Spyware

David Perera • March 27, 2023

The U.S. government limited its use of advanced surveillance software such as Pegasus through an executive order prohibiting agencies from buying licenses for spyware used by foreign governments to spy on dissidents. The order does not outright stop the government from purchasing spyware.

Fraud Management & Cybercrime

Ransomware Groups Seek Fresh Tactics Following Hive Takedown

Mathew J. Schwartz • March 27, 2023

Stung by the FBI's infiltration and takedown of the Hive ransomware group, other ransomware operators have been retooling their approaches to make their attacks more effective and operations tougher to disrupt, says Yelisey Bohuslavskiy, chief research officer at threat intelligence firm Red Sense.

Finance & Banking

First Citizens-SVB Deal Gives Startups, VCs More Certainty

Michael Novinson • March 27, 2023

Cybersecurity startups that for decades turned to Silicon Valley Bank in a pinch will now find themselves working with a 125-year-old, North Carolina-based institution. First Citizens Bank has bought all Silicon Valley Bank deposits and loans from the FDIC, which rescued the bank after its collapse.