BankInfoSecurity.com reported that “Companies are significantly expanding their SEC cyber risk disclosures as they aim to demonstrate their cybersecurity efforts, instill market confidence and potentially improve stock prices, according to Kayne McGladrey, field CISO, Hyperproof.” The June 12, 2024 article entitled ” SEC Cyber Risk Disclosures: What Companies Need to
Continue Reading Are you prepared to report Cyber attack to the SEC?
GovInfoSecurity.com reported that “The Cybersecurity and Infrastructure Security Agency heard recommendations for the Joint Cyber Defense Collaborative approved Wednesday by the agency’s Cybersecurity Advisory Committee. The recommendations urge CISA to deepen the JCDC’s focus on operational collaboration and clarify key operational components, such as criteria for membership and participation in
Continue Reading Have you heard that the Joint Cyber Defense Collaborative needs improvement?
SCMagazine.com reported that “According to the Sophos State of Ransomware Report 2024 (https://www.sophos.com/en-us/content/state-of-ransomware), while most industries reported a decline in ransomware attacks, healthcare and manufacturing stood out as notable exceptions.” The May 30, 2024 report entitled “Ransomware against healthcare and manufacturing on the rise: What to know, how
Continue Reading Any surprise that Ransomware against healthcare and manufacturing is on the rise?
SCMagazine.com reported that “Google issued a Windows and Mac patch for a critical Chrome bug, and will roll out a Linux patch in the coming days and weeks. In an April 24 blog post, Google said the flaw — CVE-2024-4058 — was a type confusion in ANGLE, Google Chrome’s graphics
Continue Reading Are you surprised that threat actors target Google?
HeathCareInfoSecurity.com reported that “A Department of Health and Human Services division that administers funding, training and other services to children and families is putting sensitive data at high risk because of gaps in cloud security controls and practices, according to a watchdog agency report.” The April 2, 2024 article entitled
Continue Reading Bad news! Poor Cloud Controls at HHS!
SCMagazine.com reported that “There’s a lot going on inside the minds of small and medium-sized business (SMB) owners….. Increasingly, those opportunities exist in the cloud, whether it’s gaining new insights from data, effortlessly scaling to meet demand, or enabling collaboration from anywhere. But when it comes to cloud security,…” The
Continue Reading Do you know about the three cloud security misconceptions?
BankInfoSecurity.com reported that “Artificial intelligence technologies such as generative AI are not helping fraudsters create new and innovative types of scams. They are doing just fine relying on the traditional scams, but the advent of AI is helping them scale up attacks and snare more victims, according to fraud researchers
Continue Reading Payments Fraud is faster and easier with AI!
SCMagazine.com reported that “Dallas-based UT Southwestern Medical Center had data from almost 2,100 individuals compromised following a data breach, The Dallas Morning News reports.”
The March 12, 2024 report entitled “UT Southwestern breach hits over 2K patients” (https://www.scmagazine.com/brief/ut-southwestern-breach-hits-over-2k-patients) included these comments a UT Southwestern spokesperson:
We are assessing
Continue Reading Healthcare breach at UT Southwestern!
DarkReading.com reported that “New guidance expands the frame to consider organizations beyond critical infrastructure; it also addresses governance and supply chain cybersecurity.” The February
26, 2024 Report entitled “NIST Releases Cybersecurity Framework 2.0” (https://www.darkreading.com/ics-ot-security/nist-releases-cybersecurity-framework-2-0) which included these comments:
The new framework builds on its long-standing, cyber-risk-reducing recommendations to
Continue Reading Good news! NIST Releases Cybersecurity Framework 2.0!
SCMagazine.com reported that “The U.S. government has been focused on protecting critical infrastructure this week with a push by CISA, the EPA and FBI to educate the water and wastewater systems sector on how to better secure their facilities from cyberattacks – and the Feb. 21 Biden administration executive order
Continue Reading China cyber threat to US Water Systems!