600,000 Prison Inmates to Share in $6.49M Breach Settlement

Marianne Kolbasuk McGee • October 3, 2024

A misconfigured web server and the exposure of sensitive information for nearly 600,000 prison inmates in 2022 will cost medical claims processing company CorrectCare $6.49 million to settle a consolidated proposed class action lawsuit, according to court records.

Breach Notification

CMS Now Says 3.1 Million Affected by MOVEit Hack

Latest

Cybercrime

Breach Roundup: AI 'Nudify' Sites Serve Malware

Anviksha More • October 3, 2024

This week, AI nudify sites spread malware, BEC scammers head to prison, London man charged with hacking, and a Spanish insurance company with a breach. Also, a North Korean hacking group and a West African crackdown on online scammers. And, a Schrödinger Windows vulnerability: Is it real?

Artificial Intelligence & Machine Learning

ENISA 2024: Ransomware and AI Are Posing New Cyberthreats

Anna Delaney • October 3, 2024

While the number of ransomware attacks stayed about the same in the past year, cybercriminals are using more effective tactics such as weaponizing breach disclosure deadlines to extract higher ransoms, according to ENISA's 2024 Threat Landscape report.

Cyberwarfare / Nation-State Attacks

US, Microsoft Seize Domains Used in Russian Spear-Phishing

David Perera • October 3, 2024

The U.S. Department of Justice and Microsoft seized more than 100 websites allegedly used by a Russian intelligence cyberespionage operation with a fondness for spear phishing. Targets include the national security apparatus and journalists, think tanks, and non-governmental organizations.

Encryption & Key Management

Quantum Breakthroughs Drive New Encryption Strategies

Suparna Goswami • October 3, 2024

Quantum computing has been evolving for decades and holds immense promise. Companies have invested billions of dollars in this technology, which will eventually solve complex business problems. But for now the use cases are limited, said Kawin Boonyapredee, chief strategy officer at Applied Quantum.

Governance & Risk Management

CISA Preparing to Assess Federal Zero Trust Progress

Chris Riotta • October 3, 2024

A top official from the U.S. Cybersecurity and Infrastructure Security Agency said Thursday the agency is planning to review updated federal implementation plans and ensure agencies are aligning with zero trust security objectives and addressing any funding gaps or technical challenges.

Geo Focus: The United Kingdom

UK ICO Fines Police Service of Northern Ireland 750,000 Pounds

Akshaya Asokan • October 2, 2024

The U.K. data regulator fined the Northern Ireland's Police Service 750,000 pounds following a 2023 data breach that exposed personal details of the entire workforce. The U.K. Information Commissioner's Office determined the breach occurred when police attempted to respond to two open records requests.

Fraud Management & Cybercrime

Global Governments Release New Ransomware Response Guidance

Akshaya Asokan • October 2, 2024

New voluntary ransomware guidance released during the International Counter Ransomware Initiative meeting this week calls for victims to report attacks to law enforcement on a more timely basis - and involve more advisers in deciding whether to pay a ransom.

Cybercrime

US DOJ Unveils New Strategic Approach to Counter Cybercrime

Chris Riotta • October 2, 2024

The United States Justice Department is coordinating its cybercrime defense mission under a new strategic approach released Wednesday that aims to enhance the collection of electronic evidence, bolster international collaboration and focus on disrupting significant cybercrime actors.

Artificial Intelligence & Machine Learning

OpenAI Valuation Nearly Doubles to $157B After $6.6B Funding

Michael Novinson • October 2, 2024

OpenAI’s new $6.6 billion round of funding has nearly doubled its valuation to $157 billion. With investments from Thrive Capital, Microsoft, SoftBank and Nvidia, OpenAI plans to expand its AI research while facing pressures around executive turnover and its transition away from a nonprofit model.

Artificial Intelligence & Machine Learning

OpenAI's New Model Is Berry Good at Deception

Rashmi Ramesh • October 2, 2024

OpenAI claims its new artificial intelligence model, designed to "think" and "reason," can solve linguistic and logical problems that stump existing models. Officially called o1, the model nicknamed Strawberry can deceive users and help make weapons that can obliterate the human race.

Endpoint Security

Amazon CISO Amy Herzog on Embedding Security in Ring, Alexa

Michael Novinson • October 2, 2024

Amy Herzog, chief information security officer for Ads and Devices at Amazon, shares how her cybersecurity team accelerates product development by integrating security from the start to secure customer data on popular consumer devices such as Ring and Alexa.

Recruitment & Reskilling Strategy

How Are We Going to Fill 4.8 Million Cybersecurity Jobs?

Anna Delaney • October 2, 2024

ISC2’s 2024 Cybersecurity Workforce Study warns of a stagnant workforce, a growing skills gap and a shortage of 4.8 million cybersecurity professionals worldwide. Despite increasing demand, many organizations struggle to fill critical roles, hindered by budget constraints and skills shortages.