ISACA Generative AI Survey: Training Gaps, Focus on Security

Anna Delaney • December 1, 2023

According to a recent pulse poll from ISACA on generative AI, only 6% of respondents' organizations are providing training to all staff on AI, and more than half - 54% - say that no AI training is provided at all, even to teams directly affected by AI.

Data Loss Prevention (DLP)

Stopping Cloud Workload Attacks

Latest

Cybercrime

TrickBot Developer Pleads Guilty in US Court

David Perera • December 1, 2023

A Russian national pleaded guilty in U.S. federal court for his role in developing TrickBot. Operators of the malware targeted hospitals and healthcare centers with ransomware attacks during the height of the novel coronavirus pandemic. Vladimir Dunaev faces up to 35 years in prison.

Artificial Intelligence & Machine Learning

ISMG Editors: What Did the Sam Altman-OpenAI Saga Teach Us?

Anna Delaney • December 1, 2023

In the latest weekly update, four editors at Information Security Media Group discuss Sam Altman and OpenAI's brief leadership nightmare, the state of generative AI one year after the general release of ChatGPT, and how police nabbed a suspected ransomware group ringleader in Ukraine.

Fraud Management & Cybercrime

Surgical Practice Notifying 437,400 Patients of Data Theft

Marianne Kolbasuk McGee • December 1, 2023

A large, Seattle-based surgical group is notifying nearly 437,400 individuals that their information was potentially compromised in a ransomware and data theft incident earlier this year. The breach is part of a larger, disturbing trend in the healthcare sector in 2023.

Fraud Management & Cybercrime

Cactus Ransomware Using Qlik Bugs, DanaBot in Latest Attacks

Mihir Bagwe • December 1, 2023

Operators of a new ransomware strain dubbed Cactus are using critical vulnerabilities in a data analytics platform to gain access to corporate networks. Cactus ransomware operators are also getting an assist from deploying Danabot malware that is distributed through malvertising.

Standards, Regulations & Compliance

US Bipartisan Lawmakers Urge Crackdown on Chinese LiDAR

Chris Riotta • December 1, 2023

A bipartisan group of lawmakers urged the Biden administration to consider intensifying restrictions on semiconductor sales to Chinese companies in a bid to ensure that U.S. remote-sensing technology doesn't aid Beijing's national security efforts.

General Data Protection Regulation (GDPR)

British Lawmakers Push Ahead With Modifying UK GDPR

Akshaya Asokan • December 1, 2023

British Conservative lawmakers are pushing ahead with legislation modifying the U.K. codification of European privacy law despite objections from privacy advocates and concerns about the legislation's impact on European trade. Government backers say the bill will bolster the domestic AI industry.

Cryptocurrency Fraud

North Korea's Supercharged State-Backed Cryptocurrency Theft

Mathew J. Schwartz • December 1, 2023

To service the perpetually cash-starved regime of North Korea, hackers will continue their relentless onslaught on cryptocurrency - and all users of it - with state backing to industrialize their hacking and money laundering capabilities, experts warn.

Cyberwarfare / Nation-State Attacks

US Sanctions North Korean Cyber Unit After Satellite Launch

Chris Riotta • November 30, 2023

The United States on Thursday sanctioned North Korean cyberespionage threat actor Kimsuky, known for its social engineering campaigns against targets it suspects of holding intelligence on geopolitical events and negotiations affecting the Hermit Kingdom.

Fraud Management & Cybercrime

Capital Health in NJ Is Responding to a Cyberattack

Marianne Kolbasuk McGee • November 30, 2023

New Jersey-based hospital group Capital Health is dealing with a network outage, caused by a cyberattack earlier this week, which is affecting some patient services. Capital Health is at least the second healthcare provider in the Garden State responding to a cyberattack this week.

Fraud Management & Cybercrime

NY AG Warns of ID Theft Risk in Medical Transcription Hack

Marianne Kolbasuk McGee • November 30, 2023

New York regulators are warning millions of individuals of identity theft risks involving a data theft at a medical transcriber that has now affected patients of at least two major healthcare groups, including Crouse Health and Northwell Health in the state. Lawsuits in the case are also piling up.

Governance & Risk Management

NIST Says Federal Agencies Struggling to Achieve Zero Trust

Chris Riotta • November 30, 2023

A National Institute of Standards and Technology official said agencies are facing a variety of challenges in implementing enterprisewide zero trust architectures, from a lack of insight into their network components to difficult decisions around legacy systems and costly procurement initiatives.

Cybercrime

Breach Roundup: Ukraine Hacks Russian Aviation Agency

Anviksha More • November 30, 2023

This week, Ukraine's intelligence service hacked Russian aviation agency, a cyberattack targeted Japan's space agency, Google addressed another zero-day, a French-led operation dismantled a Ukrainian ransomware group, and spyware targeted Serbian civil society.