Scott Ikeda, Senior Correspondent at CPO Magazine

Website of ChatGPT on smartphone showing Italian DPA privacy concerns

Italian DPA Puts a Temporary Ban on ChatGPT Over Privacy Concerns

April 4, 2023

ChatGPT is at least temporarily offline in Italy, as the Italian DPA has concluded that the AI tool may have violated data privacy laws during a recent data leak. OpenAI has been given 20 days to address privacy concerns, or it may face substantial fines.

Poster of Russian President Vladimir Putin on building showing Vulkan files revealed Russian cyberwar strategies

Cyber Security News

Vulkan Files: Contractor Leak Reveals Russian Cyberwar Plans, Disinformation Campaigns

April 4, 2023

The Vulkan Files revealed insight into Russian cyberwar plans and strategies and that company engineers work directly for Russian military and intelligence outfits and train state-backed hackers, run disinformation campaigns and provide support for cyber attacks.

Man holding mobile phone with system warning showing commercial spyware vendors and zero-days

Cyber Security News

Commercial Spyware Vendors Selling Zero-Days, Exploit Chains for Android, iOS and Chrome

April 3, 2023

The report comes from Google’s TAG, which tracks over 30 of these commercial spyware vendors. The current crop of zero-days, which the report saw deployed in late 2022, targets Android and iOS as well as the Chrome web browsers.

Hand on laptop keyboard showing data breach of Australia financial service provider

Cyber Security News

Data Breach of Financial Service Provider Latitude Jumps From 328,000 to 14 Million Records Stolen

March 31, 2023

A mid-March data breach at Australian financial service provider Latitude was initially estimated as impacting a little over a quarter of a million of its customers. Latitude now says that 14 million records were exposed, including passport numbers.

Cyber Security News

Partial Twitter Source Code Leak on GitHub Uploaded Shortly After First Round of Layoffs

March 30, 2023

GitHub has shared a DMCA filing from Twitter that indicates source code leak was apparently posted on the site shortly after Elon Musk's introductory round of layoffs began.

Hand on keyboard with virtual login screen showing identity and access management

Cyber Security News

CISA/NSA Identity and Access Management Guidelines Provide Cybersecurity Guidance for Administrators

March 29, 2023

CISA and the NSA note that identity and access management vulnerabilities are a particular recent focus for certain state-backed threat groups, and that 40% of data breaches not involving user error or an insider are now facilitated by stolen credentials.

View of a large coal-fired power plant showing critical infrastructure warning of ransomware attacks by CISA

Cyber Security News

New CISA Program to Warn Critical Infrastructure Companies of Vulnerabilities That Could Invite Ransomware Attacks

March 28, 2023

CISA notified 93 critical infrastructure organizations of the presence of a vulnerability that could lead to ransomware attacks, and plans to scale up the program and provide more warnings in the coming months.

Hand inserting dollar bills in Bitcoin ATM showing crypto theft

Cyber Security News

Bitcoin ATMs Hacked, Millions in Crypto Stolen as Threat Actors Exploit an Upload Vulnerability

March 28, 2023

The final amount of stolen crypto is still being tallied as investigations continue, but about 56 BTC (about $1.5 million) has been confirmed to be lost. General Bytes has over 15,000 bitcoin ATMs in circulation in over 100 countries.

Webpage of ChatGPT showing chat histories exposed by ChatGPT bug

Data Privacy News

Titles of User Chat Histories Exposed by ChatGPT Bug

March 27, 2023

Lists of unfamiliar chat titles were suddenly appearing in the ChatGPT website's sidebar. It turns out that a ChatGPT bug was displaying chat histories of other users randomly to other people.

Chinese national flag on circuit board showing Chinese hackers cyber attacks

Cyber Security News

Chinese Hackers Targeting Outer Layers of Networks for Cyber Attacks, Using New Malware for “Multi-Year” Intrusions

March 27, 2023

Chinese hackers are now focusing on the outer layers of target networks, even antivirus software and firewalls, as an entry point for stealthy cyber attacks that can last for years.

Italian DPA Puts a Temporary Ban on ChatGPT Over Privacy Concerns

Vulkan Files: Contractor Leak Reveals Russian Cyberwar Plans, Disinformation Campaigns

Commercial Spyware Vendors Selling Zero-Days, Exploit Chains for Android, iOS and Chrome

Data Breach of Financial Service Provider Latitude Jumps From 328,000 to 14 Million Records Stolen

Partial Twitter Source Code Leak on GitHub Uploaded Shortly After First Round of Layoffs

CISA/NSA Identity and Access Management Guidelines Provide Cybersecurity Guidance for Administrators

New CISA Program to Warn Critical Infrastructure Companies of Vulnerabilities That Could Invite Ransomware Attacks

Bitcoin ATMs Hacked, Millions in Crypto Stolen as Threat Actors Exploit an Upload Vulnerability

Titles of User Chat Histories Exposed by ChatGPT Bug

Chinese Hackers Targeting Outer Layers of Networks for Cyber Attacks, Using New Malware for “Multi-Year” Intrusions

Wikimedia: Rogue AI Agents Traced Back to OpenAI Made Unauthorized Edits, Attempted to Compromise Etherpad

A Wave of AI-Powered Cyber Attacks Hits Numerous South Korean Banks, Exposing Sensitive PII

Hackers Abuse Custom GPT Instances on chatgpt.com to Distribute ClickFix Malware

AI Coding Agents Habitually Leak Thousands of Private Developer Screenshots to Public Repositories