The increasing reliance on third parties brings with it potential risks that must be identified and remediated across the supplier’s relationship lifecycle. AI can help procurement teams evaluate business risks far more quickly by identifying and prioritizing those risks.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
The International Criminal Court (ICC) suffered a sophisticated cyber attack coinciding with the Hague NATO summit attended by U.S. President Donald J. Trump, who pushed for increased defense spending among member countries.
The more access an employee has to sensitive data, the higher the likelihood they can leak this information if they feel they've been wronged. The resulting data breach is where 'corporate divorces" gets messy.
Where encryption was once the central aim of ransomware attacks, it has now been relegated to a supporting role, and data exfiltration has become the weapon of choice.
While User Behavior Analytics is about a single baseline for each activity and an analysis of each activity on its own, User Journey Analytics looks at sequences of activities and learns for each user the complete set of typical user journeys in an application. This enables extremely accurate detection.
Popular mini-game module found in over 100 Android apps, pitched to developers as a legitimate marketing SDK meant to improve user engagement and attention, has been found to have spyware capability hidden in it.
Most of the attempts on the US government websites appear to have been unsuccessful, but the OpenAI agents sought to find login credentials and in at least one case were able to do so to access the Commerce Department. The agents also engaged in an extended and varied campaign against the UN Trade and Development (UNCTAD) statistics website.
Okta Support System Compromised by Cookie Hijacking, Security Breach May Have Exposed Customer Files
Attackers were able to steal a session cookie from the Okta support system and access an administrator account, possibly providing them with further access to customer environments in an early October security breach.
Holding companies legally accountable, sharing information, and creating shared security standards won’t completely eradicate ransomware attacks. But they will make it considerably harder to carry out those attacks successfully.
Ransomware attacks are causing a spike in cyber insurance rates as insurers need to cover ransom amount and recovery costs if hackers fail to make good on unlocking the compromised systems.










