US targets advanced AI and cloud firms with new reporting proposal

September 10, 2024 0 Comments 1 tag

From an operational standpoint, companies may need to modify their processes to gather and report the required data, potentially leading to changes in AI governance, data management practices, cybersecurity measures,

New Chrome Zero-Day

September 10, 2024 0 Comments 0 tags

New Chrome Zero-Day According to Microsoft researchers, North Korean hackers have been using a Chrome zero-day exploit to steal cryptocurrency. Tags: Chrome, cryptocurrency, Microsoft, North Korea, zero-day Posted on September

China-based cyber espionage campaign in SE Asia is expanding, says Sophos

September 10, 2024 0 Comments 1 tag

Sophos says the groups’ activity, which it believes was overseen by China’s Ministry of State Security, stopped in August of that year. But the updated report says not only has

Third-party risk management can learn a lot from the musk ox

September 10, 2024 0 Comments 1 tag

Third-party risk management is a significant CISO challenge with deep business consequences. When a key third-party supplier succumbs to cyberattack, operations can grind to a halt. In healthcare and financial

Avis reports data breach affecting 300,000 customers

September 10, 2024 0 Comments 1 tag

Car rental company Avis has informed around 300,000 of its customers in the US that their personal data has been stolen in a cyberattack. The company detected unauthorized access to

SOX Compliance in the Age of Cyber Threats

September 10, 2024 0 Comments 0 tags

Achieving Sarbanes-Oxley (SOX) Act compliance is becoming more difficult. While the Act is primarily a financial reporting regulation, it requires all publicly traded companies operating in the United States to

Want to get ahead? Four activities that can enable a more proactive security regime

September 10, 2024 0 Comments 1 tag

Although other surveys show a higher percentage reporting to CEOs and boards, the research overall points to the fact that CISO access to the board is far from universal or

Protecting Against Business Email Compromise (BEC): A Comprehensive Guide

September 9, 2024 0 Comments 1 tag

Business Email Compromise (BEC) attacks have emerged as one of the most sophisticated and financially devastating forms of cybercrime. The latest FBI Internet Crime (IC3) Report reveals that BEC resulted

Australia Threatens to Force Companies to Break Encryption

September 9, 2024 0 Comments 0 tags

In 2018, Australia passed the Assistance and Access Act, which—among other things—gave the government the power to force companies to break their own encryption. The Assistance and Access Act includes

Security Automation – As Easy As Making Tea?

September 9, 2024 0 Comments 0 tags

I worry that a lot of my blog posts reveal that I’m getting older and older as the days go by, but I wanted to talk about teasmades and security