Breach Roundup: Gobal Signal Exchange to Curb Online Fraud

Anviksha More • October 10, 2024

This week, the Global Signal Exchange hopes to dent online crime, a Fidelity data breach, phishing platform targets Microsoft 365 users, October Patch Tuesday, Pavel Durov said he's always cooperated with police, Highline Public Schools and CreditRiskMonitor updates, ADT and Casio suffered breaches

Cybercrime

Mass Retail Hacks Affect Adobe Commerce and Magento Stores

Latest

Endpoint Security

European Council Adopts Cyber Resilience Act

Akshaya Asokan • October 10, 2024

The European Council adopted Thursday security-by-design regulation that makes patching and vulnerability updates mandatory for connected devices. The regulation will ensure that "products with digital components are made secure throughout the supply chain and throughout their lifecycle."

Fraud Management & Cybercrime

Operation Cronos Is Disrupting LockBit, Says UK Official

Akshaya Asokan • October 10, 2024

A British cybersecurity official touted Operation Cronos, an international operation against LockBit, saying multiple strikes aimed at the ransomware-as-a-service have disrupted its ability to recruit hackers. The operation has resulted in indictments, sanctions, and server takedowns.

Breach Notification

New York State Enacts New Cyber Requirements for Hospitals

Marianne Kolbasuk McGee • October 10, 2024

General hospitals in New York State must now report cyber incidents to state regulators within 72 hours under new cybersecurity requirements that went into effect on Oct. 2. The hospitals have until next fall to comply with a long list of other security mandates, including appointing a CISO.

Artificial Intelligence & Machine Learning

GenAI Impact on Election Disinformation Limited, Says OpenAI

Rashmi Ramesh • October 10, 2024

Foreign threat actors are using generative artificial intelligence to influence U.S. elections, but their impact is limited, said OpenAI. Threat actors from China, Russia, Iran, Rwanda and Vietnam maliciously used AI tools to support influence operations.

Artificial Intelligence & Machine Learning

Relyance AI Raises $32M to Take on AI Governance Challenges

Michael Novinson • October 10, 2024

Relyance AI raised $32 million in Series B funding to grow its data governance platform. The funds will be used to scale operations, enhance real-time data visibility, and support enterprises in complying with complex global privacy regulations, ensuring responsible AI adoption across industries.

Governance & Risk Management

SSA Struggling to Modernize Fraud Prevention Tech, GAO Warns

Chris Riotta • October 10, 2024

The Social Security Administration is facing criticism for failing to update its fraud prevention technology, leaving financial institutions and federal authorities at risk of missing synthetic identity scams, according to a new Government Accountability Office report.

Blockchain & Cryptocurrency

Cryptohack Roundup: Australia Nabs Crypto in Ghost Takedown

Rashmi Ramesh • October 10, 2024

This week, Australia seized crypto from alleged Ghost mastermind, Taiwan drafts new AML rules, IcomTech founder sentenced, U.S. looks to recover stolen crypto, EigenLayer's erroneous fund transfer, FTX's bankruptcy plan approved, Bitfinex hack update and regulatory push for a lawsuit against Nvidia.

Breach Notification

Australia May Require Businesses to Report Ransom Payments

Jayant Chakravarti • October 9, 2024

Ransom payments are typically tightly held secrets between cybercriminals and their victims, but the Australian government has introduced a cybersecurity bill in Parliament that would require larger businesses to report ransom payments to the government.

Artificial Intelligence & Machine Learning

US DOJ Developing Guidelines for AI Use in Law Enforcement

Chris Riotta • October 9, 2024

The U.S. Department of Justice is drafting new guidelines for law enforcement on the use of artificial intelligence and facial recognition tools to enhance public safety while safeguarding civil rights and ensuring ethical deployment, a senior official said Wednesday.

Breach Notification

County 911 Service Notifying 180,000 About Breach in July

Marianne Kolbasuk McGee • October 9, 2024

An Oklahoma county provider of medical, fire, police and other 911 emergency services is notifying 180,000 individuals that their health information may have been compromised in a recent ransomware attack. The incident affects patients receiving emergency medical care as far back as 2011.

Fraud Management & Cybercrime

Human Security Raises $50M+ to Take on Click-Fraud Defense

Michael Novinson • October 9, 2024

Human Security's recent $50 million growth funding, led by WestCap, will drive the development of click-fraud defense and enhance advertising integrity solutions. CEO Stu Solomon aims to leverage the funding for scaling the engineering and data science teams, addressing emerging fraud threats.

Governance & Risk Management

Ivanti CSA Customers Targeted in New Zero-Day Attacks

Anviksha More • October 9, 2024

Internet appliance maker Ivanti warned customers Tuesday that attackers are actively exploiting new vulnerabilities in Cloud Services Appliance instances by chaining three security flaws with a zero-day patched in September. The company advised customers to update to version 5.0.