Hackers Steal 17M Patient Records in Attack on 3 Hospitals

Marianne Kolbasuk McGee • December 13, 2024

Cybercriminals claim they stole 17 million patient records from a southern California regional healthcare provider that is still struggling with IT and phone systems outages that have been disrupting patient care since the organization was hit by a ransomware attack on Dec. 1.

►

Artificial Intelligence & Machine Learning

Protecting the C-Suite in the Wake of UHC CEO's Murder

Latest

Multi-factor & Risk-based Authentication

Okta CEO: Fix Identity Security to Prevent Most Cyberattacks

Michael Novinson • December 13, 2024

Okta co-founder and CEO Todd McKinnon outlines steps to secure enterprise SaaS, build standards with competitors, and address identity issues in generative AI apps. He also reflects on lessons from Okta’s breach and efforts to build safer products and harden the company's infrastructure.

Artificial Intelligence & Machine Learning

Leadership Shift, AI Shape Check Point's Future: Gil Shwed

Michael Novinson • December 13, 2024

Gil Shwed plans to step down as Check Point Software's CEO after 32 years to assume the executive chairman role. Shwed discusses his vision for AI-led cybersecurity, Nadav Zafrir’s strengths as incoming CEO, and how Check Point will navigate emerging industry challenges.

Artificial Intelligence & Machine Learning

Aligning Security With Business Goals Amid Regulatory Shifts

Tom Field • December 13, 2024

Expanding into global markets requires organizations to navigate complex and rapidly changing regulatory landscapes. Kayla Williams, CISO at Devo, shared how a collaborative approach to compliance planning helps organizations meet these challenges while accelerating growth.

Attack Surface Management

Researchers: Iranian Custom Malware Targets Fuel Systems

Prajeet Nair • December 13, 2024

An Iranian state hacking group is using custom malware to compromise IoT and OT infrastructure in Israel and the United States. An attack wave from Islamic Revolutionary Guard Corps-affiliated "CyberAv3ngers" swept up fuel management systems made by U.S.-based firm Gilbarco Veeder-Root.

Artificial Intelligence & Machine Learning

Artificial Intelligence Looms Large at Black Hat Europe

Mathew J. Schwartz • December 13, 2024

The topic of AI reality versus hype, as well as what the next killer use cases might be, dominated the wrap-up "Locknote" panel at this year's annual Black Hat Europe in London, comprised of conference Review Board members detailing this year's hot topics, with AI taking top place.

Artificial Intelligence & Machine Learning

ISMG Editors: Cloud and AI in Action at AWS re:Invent 2024

Tom Field • December 12, 2024

In this special edition at AWS re:Invent 2024 in Las Vegas, ISMG editors discuss groundbreaking generative AI use cases transforming industries, from predictive fleet management to drug discovery, and explore how AI is reshaping user expectations in data analytics.

Cybercrime

Breach Roundup: Kosovar Illicit Markeptlace 'Rydox' Shuttered

Anviksha More • December 12, 2024

This week, a shuttered illicit marketplace, Patch Tuesday, lax German cybersecurity, mobile user accounts stolen in Spain, Operation PowerOFF closed booter sites, Google patched Chrome and scammers rented AirBnBs. Stolen student data in Peru and an incident at a U.S. medical device maker.

Cybercrime

US Indicts 14 North Koreans in IT Scam Funding WMD Programs

Chris Riotta • December 12, 2024

U.S. federal prosecutors indicted 14 North Koreans for a long-running IT scam generating $88 million by exploiting remote work with U.S. firms, a scheme prosecutors say is tied to DPRK-controlled companies that fund weapons programs through stolen identities, data theft and extortion.

Government

Experts Call for Overhaul of National Cyber Director Role

Chris Riotta • December 12, 2024

Cybersecurity experts are urging a revamp of the Office of the National Cyber Director. The Center for Cybersecurity Policy and Law says the office needs a clearer mission, more resources and the authority to lead cybersecurity policies for other government agencies to bolster U.S. cyber defenses.

Attack Surface Management

New Malware Framework Targets Cleo File Systems

Prajeet Nair , David Perera • December 12, 2024

Hackers exploiting flaws in Cleo Communications software instances had intimate knowledge of their internals and deployed a previously unknown family of malware, security researchers from Huntress said Thursday. Cleo published a patch Wednesday evening.

3rd Party Risk Management

Checkmarx CEO: Evolving Supply Chain Threats Demand Action

Michael Novinson • December 12, 2024

As software complexities grow, supply chain security is now essential to application security, according to Sandeep Johri, Checkmarx CEO. Johri discusses the challenges of malicious code, adversarial AI and the market's call for consolidated security platforms.

Application Security

Google Gemini 2.0 Introduced With Advanced AI for Developers

Michael Novinson • December 11, 2024

Google's latest AI model can natively process and output text, images and audio in the search giant's push toward more autonomous reasoning, planning and action. The company said Gemini 2.0 is designed for applications ranging from development and gaming to research and everyday assistance.