Latest

Breach Notification

Hackers Hit Medical Imaging Services Centers in NY, Texas

Marianne Kolbasuk McGee  •  December 6, 2023

A New York medical imaging services provider is notifying nearly 606,000 individuals that their information was potentially accessed and copied in a recent hacking incident. The entity is one of several medical imaging centers that have reported major hacking breaches in recent weeks and months.

►

Next-Generation Technologies & Secure Development

Unlocking the Superpower of DevSecOps

Michael Novinson  •  December 6, 2023

Enterprises have struggled to strike a balance between speed and security and stability, said Sean D. Mack, author, speaker and former CIO and CISO at Wiley. DevSecOps is the superpower that resolves this long-standing conflict and allows organizations to deliver software faster and more securely.

Legislation & Litigation

Supporting CISA - The 'Focal Point of Our Defensive Efforts'

Steve King  •  December 6, 2023

On Nov. 8, Tenable Chairman and CEO Amit Yoran wrote a letter to Congress in support of CISA. In this episode of "Cybersecurity Insights," Yoran calls the agency the "primary focal point of our defensive efforts" and discusses why the country needs to stay unified on defeating cyberthreats.

Cyberwarfare / Nation-State Attacks

North Korean Hackers Steal South Korean Anti-Aircraft Data

Jayant Chakravarti  •  December 5, 2023

Seoul police have accused the North Korean hacker group Andariel of stealing sensitive defense secrets from South Korean defense companies and laundering ransomware proceeds back to North Korea. The hackers stole 1.2TB of data, including information on advanced anti-aircraft weapons.

►

Fraud Management & Cybercrime

Feds, AHA Urge Hospitals to Mitigate Citrix Bleed Threats

Marianne Kolbasuk McGee  •  December 5, 2023

A recent spike in ransomware attacks has prompted federal regulators and the American Hospital Association to issue urgent warnings to hospitals and other healthcare firms to prevent potential exploitation of the Citrix Bleed software flaw affecting some NetScaler ADC and NetScaler Gateway devices.

Artificial Intelligence & Machine Learning

Mapping the Unseen Vulnerabilities of Zombie APIs

Steve King  •  December 5, 2023

Zombie APIs are becoming more common, just because of the sheer number APIs and third-party vendors that organizations rely on. Joshua Scott, head of information security and IT at API platform Postman, says businesses need to identify "what is critical to the business and map backward."

►

Artificial Intelligence & Machine Learning

ISACA Generative AI Survey: Training Gaps, Focus on Security

Anna Delaney  •  December 1, 2023

According to a recent pulse poll from ISACA on generative AI, only 6% of respondents' organizations are providing training to all staff on AI, and more than half - 54% - say that no AI training is provided at all, even to teams directly affected by AI.

Fraud Management & Cybercrime

Surgical Practice Notifying 437,400 Patients of Data Theft

Marianne Kolbasuk McGee  •  December 1, 2023

A large, Seattle-based surgical group is notifying nearly 437,400 individuals that their information was potentially compromised in a ransomware and data theft incident earlier this year. The breach is part of a larger, disturbing trend in the healthcare sector in 2023.

Endpoint Security

Why Broadcom Seeks 'Strategic Alternatives' for Carbon Black

Michael Novinson  •  December 1, 2023

It looks as if Carbon Black's days as part of Broadcom are numbered. Broadcom CEO Hock Tan told staff at newly acquired VMware in both an email and town hall meeting that he plans to "review strategic alternatives." The move comes just four years after VMware purchased Carbon Black for $2.1 billion.

Information Sharing

Okta Delays New Products, Projects 90 Days to Boost Security

Michael Novinson  •  November 30, 2023

Okta has paused product development and internal projects for 90 days to beef up its security architecture and operations for applications, hardware and third-party vendors. Okta will move to strengthen its cyber posture, including a security action plan and engaging with third-party cyber firms.

Fraud Management & Cybercrime

Capital Health in NJ Is Responding to a Cyberattack

Marianne Kolbasuk McGee  •  November 30, 2023

New Jersey-based hospital group Capital Health is dealing with a network outage, caused by a cyberattack earlier this week, which is affecting some patient services. Capital Health is at least the second healthcare provider in the Garden State responding to a cyberattack this week.

Fraud Management & Cybercrime

NY AG Warns of ID Theft Risk in Medical Transcription Hack

Marianne Kolbasuk McGee  •  November 30, 2023

New York regulators are warning millions of individuals of identity theft risks involving a data theft at a medical transcriber that has now affected patients of at least two major healthcare groups, including Crouse Health and Northwell Health in the state. Lawsuits in the case are also piling up.