Scott Ikeda, Senior Correspondent at CPO Magazine

Customer support call center showing Okta security breach impact

Okta Customer Support Security Breach Update: All Clients Using Help Center Impacted, Contact Info for All Certified Users Stolen

December 5, 2023

An update from Okta on its October customer support security breach indicates that the damage is worse than initially expected, with all of the recent users of its Help Center service now being told that the attackers likely stole their uploaded files.

Lock and AI chip showing AI security guidelines

Cyber Security News

US, UK Lead 18 Nations in Adoption of AI Security Guidelines

December 4, 2023

New AI security guidelines offers a general overview of expected risks and threats from the initial design process, through the development life cycle and deployment, and all the way through ongoing operation and maintenance after deployment.

Ambulance speeding blurred motion showing ransomware attack on health services

Cyber Security News

Ardent Health Services Ransomware Attack Impacts Six States, Forces Diversions From Emergency Rooms

December 4, 2023

A ransomware attack on Ardent Health Services, a network of 30 hospitals that spans six states, disrupted emergency rooms and caused some patient diversions for at least two days in addition to taking down various systems.

Hacker working with computer in dark room showing data theft

Cyber Security News

Threat Actor Claims to Have Stolen DARPA Files From GE, Data Theft Remains Unconfirmed

November 30, 2023

IntelBroker claims to have broken into General Electric (GE) and stolen sensitive military files belonging to DARPA. GE has yet to confirm the data theft, only saying that it is still investigating the incident.

Stethoscope on laptop showing cybersecurity regulations for New York healthcare facilities

Cyber Security News

New York State Healthcare Facilities Looking at New Cybersecurity Regulations, New Funding in 2024

November 28, 2023

The new New York cybersecurity regulations require healthcare facilities to appoint a CISO, implement incident response plans, and to face new breach reporting requirements. They will also have access to a total of $500 million in new funding from the state.

Top view of hooded hacker working on laptop showing third party data breach impact Canada government employees

Cyber Security News

Third Party Data Breach of Contractors Exposed Personal Information of Canadian Government Employees Dating Back 25 Years

November 27, 2023

Third party data breach of two relocation services providers may have exposed the passports, financial information and other personal information of Canadian government employees dating back to 1999.

Hacker using mobile phone showing FCC rules for SIM swapping

Cyber Security News

New FCC Rules Look To Thwart SIM Swapping With New Requirements for Wireless Providers

November 23, 2023

New FCC rules will essentially force a new set of procedures and checks on the customer service employees that are targeted by the criminal hackers that engage in SIM swapping.

Manufacturing plant showing AI cybersecurity and critical infrastructure

Cyber Security News

CISA Roadmap for AI Cybersecurity: Defense of Critical Infrastructure, “Secure by Design” AI Prioritized

November 23, 2023

CISA has released a roadmap establishing four overarching broad goals, with five more specific lines of effort that appear to indicate concrete immediate priorities. Defensive AI cybersecurity measures and plans for critical infrastructure adoption are repeating themes.

Oil refinery plant showing cyber attack on Denmark energy infrastructure

Cyber Security News

Denmark Weathered Wave of Cyber Attacks on Energy Infrastructure in May, Industry Non-profit Reveals

November 21, 2023

Denmark's energy infrastructure was bombarded by cyber attacks in May of this year. Report says 16 energy infrastructure companies were targeted and 11 were compromised immediately, the other five only apparently dodging a breach because the attackers were sloppy in their technique.

Open red padlock showing ransomware group file SEC complaint for data breach

Cyber Security News

Ransomware Group Trolls Victim With SEC Complaint After Data Breach

November 20, 2023

The ALPHV/BlackCat ransomware group has filed an SEC complaint directed at MeridianLink, noting that the data breach took place over a week prior, and claims that new SEC rules require the victim to disclose a material impact within four business days.

Okta Customer Support Security Breach Update: All Clients Using Help Center Impacted, Contact Info for All Certified Users Stolen

US, UK Lead 18 Nations in Adoption of AI Security Guidelines

Ardent Health Services Ransomware Attack Impacts Six States, Forces Diversions From Emergency Rooms

Threat Actor Claims to Have Stolen DARPA Files From GE, Data Theft Remains Unconfirmed

New York State Healthcare Facilities Looking at New Cybersecurity Regulations, New Funding in 2024

Third Party Data Breach of Contractors Exposed Personal Information of Canadian Government Employees Dating Back 25 Years

New FCC Rules Look To Thwart SIM Swapping With New Requirements for Wireless Providers

CISA Roadmap for AI Cybersecurity: Defense of Critical Infrastructure, “Secure by Design” AI Prioritized

Denmark Weathered Wave of Cyber Attacks on Energy Infrastructure in May, Industry Non-profit Reveals

Ransomware Group Trolls Victim With SEC Complaint After Data Breach

Data Breach at Denmark’s Central Population Registry Impacts 8.8 Million People

ASOS Data Breach Led to Customers Receiving Unauthorized Push Notifications

Wikimedia: Rogue AI Agents Traced Back to OpenAI Made Unauthorized Edits, Attempted to Compromise Etherpad

A Wave of AI-Powered Cyber Attacks Hits Numerous South Korean Banks, Exposing Sensitive PII