HealthCareInfoSecurity.com reported that “Ransomware, data theft and other cyberattacks continue to plague the healthcare sector, especially specialty medical care providers.”  The August 5, 2025 article entitled “Hacks on 3 Specialty Medical Providers Affect Nearly 800,000” (https://tinyurl.com/hpz2wbh7) included these comments:

Recent hacks on a provider of sleep disorder diagnostic

Continue Reading 800,000 medical patients affected by recent cyberattacks!

SCWorld.com reported that “Nearly 22% of files and more than 4% of prompts employees send to generative AI (GenAI) tools contain sensitive information, according to an analysis by Harmonic Security published Thursday. Harmonic analyzed 1 million prompts and 20,000 uploaded files sent by workers at companies across the United States

Continue Reading Anyone surprised that GenAI includes important sensitive information?

CSOonline.com reported that “Summer is a time for vacation and a well-deserved break from the intensity of work. It’s also a great time to be targeted for a cyberattack. While cybercriminal activity extends throughout the year, summer has a special quality for cyber attackers. Whether it’s because our guard is

Continue Reading Vacation season means cybersecurity needs to be strengthened!

SCWorld.com reported that “Risk management isn’t just about defense. I learned this lesson early in my career when I watched promising business initiatives stall because the legal, HR, and security teams operated in isolation, each applying their specialized lens without understanding the full picture. These disconnects created unnecessary friction

Continue Reading Security, Legal and HR need to do a better job communicating!

BankInfoSecurity.com reported “A malicious actor breached a customer relationship management platform used by Allianz Life Insurance of North America on July 16 and stole personally identifiable information of most of its 1.4 million U.S. customers, financial professionals and some employees, the company said.” The July 28, 2025 article entitled ”

Continue Reading CRM compromise is a major data breach problem!

ComputerWorld.com reported that “Microsoft’s Copilot AI assistant has a fraction of the downloads OpenAI’s ChatGPT does on mobile devices, a pretty clear indication it’s losing to ChatGPT on Windows, too. In fact, Copilot is often ignored entirely in comparisons of the most widely used AI chatbots, where Anthropic’s Claude and

Continue Reading Microsoft Copilot is far behind user adoption of ChatGPT!

Darkreading.com reported “A group of female cybersecurity pioneers will share what they’ve learned about navigating a field dominated by men, in order to help other women empower themselves and pursue successful cybersecurity careers.”  The July 16, 2025 article entitled “Women Who ‘Hacked the Status Quo’ Aim to Inspire Cybersecurity Careers”

Continue Reading Good news for Women who seek Cybersecurity careers!

Microsoft Threat Intelligence reported “On July 19, 2025, Microsoft Security Response Center (MSRC) published a blog addressing active attacks against on-premises SharePoint servers that exploit CVE-2025-49706, a spoofing vulnerability, and CVE-2025-49704, a remote code execution vulnerability. These vulnerabilities affect on-premises SharePoint servers only and do not affect SharePoint Online in

Continue Reading Microsoft 365 SharePoint is under attack!

SCWorld.com reported that “Cyberspace shattered that distance. It collapses distance, bypasses borders, and connects everything instantly. The advantages of geography no longer apply. What once shielded us—oceans, borders, early warning—is now irrelevant. In this domain, the United States is no fortress. It’s a glass house.” The July 21, 2025 article

Continue Reading America is the most vulnerable country in the world for Cyberattacks!

Darkreading.com reported that “A recent study suggests, contrary to popular belief, that most phishing awareness initiatives aren’t having a material impact on employee cybersecurity. One of the most widely repeated, least examined memes in the cybersecurity industry is that, even more than technical solutions, organizations can best secure themselves by

Continue Reading No surprise that Phishing Training Doesn’t Work!