Warnings Mount Over Fake North Korean IT Workers

Akshaya Asokan • October 2, 2024

The German federal domestic intelligence agency is adding to warnings over North Korean IT workers obtaining remote work in Western tech companies. The world's most secretive and repressive regime looks for multiple ways to circumvent strict economic sanctions.

Cybercrime

Commvault to Boost AWS Data Protection With $47M Clumio Buy

Latest

Geo Focus: The United Kingdom

UK ICO Fines Police Service Northern Ireland 750,000 Pounds

Akshaya Asokan • October 2, 2024

The U.K. data regulator fined the Northern Ireland's Police Service 750,000 pounds following a 2023 data breach that exposed personal details of the entire workforce. The U.K. Information Commissioner's Office determined the breach occurred when police attempted to respond to two open records requests.

Fraud Management & Cybercrime

Global Governments Release New Ransomware Response Guidance

Akshaya Asokan • October 2, 2024

New voluntary ransomware guidance released during the International Counter Ransomware Initiative meeting this week calls for victims to report attacks to law enforcement on a more timely basis - and involve more advisers in deciding whether to pay a ransom.

Cybercrime

US DOJ Unveils New Strategic Approach to Counter Cybercrime

Chris Riotta • October 2, 2024

The United States Justice Department is coordinating its cybercrime defense mission under a new strategic approach released Wednesday that aims to enhance the collection of electronic evidence, bolster international collaboration and focus on disrupting significant cybercrime actors.

Artificial Intelligence & Machine Learning

OpenAI Valuation Nearly Doubles to $157B After $6.6B Funding

Michael Novinson • October 2, 2024

OpenAI’s new $6.6 billion round of funding has nearly doubled its valuation to $157 billion. With investments from Thrive Capital, Microsoft, SoftBank and Nvidia, OpenAI plans to expand its AI research while facing pressures around executive turnover and its transition away from a nonprofit model.

Breach Notification

Hawaii Clinic Notifies 124,000 of Hack Credited to LockBit

Marianne Kolbasuk McGee • October 2, 2024

A clinic in Hawaii is notifying 124,000 patients that their health data was potentially compromised in a May hack. LockBit 3.0 claims to have published the stolen records on its data leak site in June - months before global authorities this week disclosed a crackdown on the cybercrime gang.

Artificial Intelligence & Machine Learning

OpenAI's New Model Is Berry Good at Deception

Rashmi Ramesh • October 2, 2024

OpenAI claims its new artificial intelligence model, designed to "think" and "reason," can solve linguistic and logical problems that stump existing models. Officially called o1, the model nicknamed Strawberry can deceive users and help make weapons that can obliterate the human race.

Endpoint Security

Amazon CISO Amy Herzog on Embedding Security in Ring, Alexa

Michael Novinson • October 2, 2024

Amy Herzog, chief information security officer for Ads and Devices at Amazon, shares how her cybersecurity team accelerates product development by integrating security from the start to secure customer data on popular consumer devices such as Ring and Alexa.

Recruitment & Reskilling Strategy

How Are We Going to Fill 4.8 Million Cybersecurity Jobs?

Anna Delaney • October 2, 2024

ISC2’s 2024 Cybersecurity Workforce Study warns of a stagnant workforce, a growing skills gap and a shortage of 4.8 million cybersecurity professionals worldwide. Despite increasing demand, many organizations struggle to fill critical roles, hindered by budget constraints and skills shortages.

Leadership & Executive Communication

CyberEdBoard Profiles in Leadership: Matt Gordon-Smith

Anna Delaney • October 2, 2024

Matt Gordon-Smith has more than 25 years of information security experience and has led security programs. He says networking and relationship-building are critical to career success, but many aspiring CISOs face a major obstacle to interacting with other leaders: imposter syndrome.

Artificial Intelligence & Machine Learning

Europe Begins Drafting AI Code of Practice

Akshaya Asokan • October 1, 2024

The European Commission appointed a 13 member team to draft the general purpose artificial intelligence code of practice mandated by the AI Act. The commission on Monday announced four working groups that will oversee drafting of the rules.

Governance & Risk Management

Experts Warn CISA’s Threat Sharing is in a 'Death Spiral'

Chris Riotta • October 1, 2024

Experts told Information Security Media Group the Cybersecurity and Infrastructure Security Agency’s flagship threat sharing initiative faces major logistical hurdles and may need to be replaced with a more mature approach to automated threat analysis following a damning Inspector General report.

Governance & Risk Management

Jana Partners Increases Stake in Rapid7, Eyes Potential Sale

Michael Novinson • October 1, 2024

Jana Partners has raised its stake in cybersecurity vendor Rapid7 to 13% and is pushing for the company to consider selling itself. The activist investor teamed up with Cannae Holdings and is engaged in discussions with Rapid7's management to explore operational improvements and board restructuring.