Medibank is Australia’s largest health insurance provider with some 3.7 million customers. In some cases, medical records are among the health insurance policies and the thief had named about 1,000 high-profile or at-risk people.
A large chasm of cultural disconnect remains in the realm of security. Employee engagement is a particular problem, with less than half saying that they were very likely to report a cybersecurity incident.
Symantec warned that a Chinese state-sponsored cyber espionage group responsible for hacking a U.S. state legislature and potentially a defense company had renewed interest in the country.
The Russia-Ukraine conflict is having a substantial impact on how businesses view their defenses. 64% believe that their organizations have either been targeted or impacted by nation-state attacks.
Globally, 65% of board members feel that their organization is at risk of a material cyber attack in the next 12 months. However, 47% also say that their company is unprepared for this eventuality.
Vulnerability allows hackers to extract private encryption keys hardcoded in Siemens industrial devices to execute sophisticated attacks or take over whole product lines.
White House “Blueprint for AI Bill of Rights” Creates a Potential Path to Legal AI Ethics Guidelines
The White House AI bill of rights stipulates five guiding principles meant to govern design and deployment: system safety, protection from discrimination, data privacy, notice and explanation, and human alternatives.
Fortinet warned customers to immediately patch an authentication bypass critical vulnerability in FortiSwitch Manager, FortiGate, and FortiProxy which are being actively exploited in the wild.
Incognito Mode is an option in the Chrome browser that is supposed to keep user browsing and form entry data from being stored. A new privacy lawsuit cites internal discussions (and developer jokes) in challenging it.
A dark web marketplace calling itself "BidenCash" is attempting to establish itself by giving away 1.2 million stolen credit cards, but security researchers believe most are already invalid.
