BankInfoSecurity.com

Likely Chinese Hackers Infiltrated Asian Telecom for 4 Years

BankInfoSecurity.com

1 week 1 day ago

'Weaver Ant' Used Web Shell Tunneling and Hacked Routers to Evade Detection
An apparently Chinese cyber espionage operation lurked inside the network of an Asian telecom for four years, camouflaging its presence through nested encryption and lightweight web shells. Chinese hackers have been uncovered on the inside of telecom networks spanning the globe.

Fitness Firm Pays Feds $228K in Misconfiguration Breach

BankInfoSecurity.com

1 week 1 day ago

Settlement Is 5th HIPAA Enforcement Action Under HHS's OCR Risk Analysis Initiative
An Illinois-based firm that provides fitness and wellness plans to clients throughout the U.S. has agreed to pay federal regulators a settlement of nearly $228,000 and implement a corrective action plan following an IT misconfiguration incident that caused several breaches in 2018 and 2019.

HHS OCR Launches New Round of HIPAA Compliance Audits

BankInfoSecurity.com

1 week 1 day ago

Audits Focus on HIPAA Security Rule Provisions Related to Ransomware, Hacking
Federal regulators have quietly resumed compliance audits of HIPAA-regulated organizations. With the surge in ransomware and other hacks reported in recent years, the focus of the audits are on provisions of the HIPAA Security Rule most relevant to these attacks, said a government official.

Webinar | Modern Enterprises Require Comprehensive Identity Security Programs: Best Practices from the Leader in Identity Security

BankInfoSecurity.com

1 week 2 days ago

Wheelchair Firm Ramps Up Notices to 500,000 for Email Hack

BankInfoSecurity.com

1 week 2 days ago

Large Health Data Breach Started With Phishing Lure in Employees' Email
Tennessee-based Numotion, one of the largest U.S. providers of wheelchairs and other health-related mobility products, is notifying nearly 500,000 people of a 2024 email hacking incident that potentially compromised their personal and health-related information.

Proof of Concept: Is the US Losing Its Cyber Grip?

BankInfoSecurity.com

1 week 2 days ago

Cunningham and Daniel Warn That Poor Leadership, Cuts Are Hurting US Cyber Posture
In the latest "Proof of Concept," Cyber Threat Alliance's Michael Daniel and former Forrester analyst Chase Cunningham joined editors from Information Security Media Group to examine how fractured leadership, shifting responsibilities and declining federal support are eroding U.S. cyber defenses.

Rapid7 Gets Truce With Activist Investor, Adds 3 Board Seats

BankInfoSecurity.com

1 week 2 days ago

Cooperation Deal With Jana Expands Rapid7 Board to 11, Tightens Governance Controls
Rapid7 struck a truce with Jana Partners, agreeing to hand the activist investor three board seats in exchange for cooperation until early next year. The deal will boost Rapid7's board size from eight to 11, adding former Forescout CEO Wael Mohamed and former Imperva and Gigamon CFO Michael Burns.

23andMe's Bankruptcy: What Does it Mean for Data Privacy?

BankInfoSecurity.com

1 week 2 days ago

California Alerting Consumers to Delete Data, Samples Shared With Firm
Genetics testing firm 23andMe has filed for Chapter 11 bankruptcy protection and says it is looking to sell the company. But what does that potentially mean for the firm's trove of highly sensitive health and ancestry information pertaining to millions of consumers?

Fake Out: Babuk2 Ransomware Group Claims Bogus Victims

BankInfoSecurity.com

1 week 5 days ago

What Do You Mean, Hospital-Targeting Sociopath Ransomware Wielders Continue to Lie?
A ransomware group reusing the Babuk ransomware brand claims to have stolen data from the likes of Amazon, Delta and US Bank. Just one problem: Security experts found a startling overlap between its claimed victims and previous attacks scored by the likes of Clop, LockBit and RansomHub.

China Borrows From Feds' Anti-Hacker Psychological Playbook

BankInfoSecurity.com

1 week 5 days ago

Supposed Taiwanese State Hackers Unmasked by China's Ministry of State Security
Nothing beats messing with your adversaries' heads than taking a page from their psychological operations playbook. Witness China's Ministry of State Security unmasking four Taiwanese government hackers in a move borrowed from the U.S. government's playbook.

Live Webinar | AI vs. AI: Transforming Cybersecurity Through Proactive Technologies

BankInfoSecurity.com

1 week 5 days ago

Join this webinar to learn how AI defenses can stop AI attacks

Live Webinar | What’s Driving the Convergence Between EDR and MDR

BankInfoSecurity.com

1 week 5 days ago

Tech Giants, Utility Firms Form AI Consortium

BankInfoSecurity.com

1 week 5 days ago

Open Power AI Consortium Members Include Nvidia and Microsoft
Tech giants and utility providers on Thursday formed an alliance to harness artificial intelligence for a more resilient power grid. More than two dozen organizations are participating in the Open Power AI Consortium led by the Electric Power Research Institute.

Software Firm Notifying Patients, Practices of Data Exposure

BankInfoSecurity.com

1 week 5 days ago

Researcher Found Unsecured Database Server Containing 1,864 GB of OrthoMinds' Data
An orthodontic practice software vendor is notifying an undisclosed number of patients that their data was exposed to the internet for 10 days last November. The security researcher who discovered the data leak said the incident appears to have lasted longer and affected more than 200,000 patients.

Chinese Hackers Exploit Unpatched Servers in Taiwan

BankInfoSecurity.com

1 week 5 days ago

UAT-5918 Breaches Taiwan's Critical Sectors Using N-Day Flaws for Cyberespionage
Hackers with ties to China-based hacking groups including Volt Typhoon are breaching Taiwan's critical infrastructure by exploiting unpatched web and application servers as entry points for a cyberespionage campaign. Cisco Talos threat hunters identified the new threat actor as UAT-5918.

Dataminr Raises $85M to Advance Predictive, Agentic AI Tools

BankInfoSecurity.com

1 week 5 days ago

Dave DeWalt's NightDragon and HSBC to Back New Product Rollouts and Global Growth
Dataminr received $85 million in convertible pre-IPO funding from Dave DeWalt’s NightDragon and HSBC. The investment will support the rollout of context agents and pre-generative AI capabilities, and enable the company to scale internationally ahead of its planned initial public offering.

Shifting the Mindset from Cost Center to Revenue Generator

BankInfoSecurity.com

1 week 6 days ago

How Strong AML and Fraud Prevention Controls Can Differentiate Your Fintech and Help You Scale

As fintechs and financial institutions navigate an increasingly complex payments ecosystem, robust AML and fraud prevention controls are no longer just a compliance necessity—they’re a strategic advantage. Discover how risk-based frameworks, intelligent detection systems, and stronger partnerships can enhance trust, streamline operations, and safeguard against evolving financial crime threats.

Why Google and Wiz Struck a Deal Now After 2024 Talks Caved

BankInfoSecurity.com

1 week 6 days ago

Major Competitive, Regulatory, Economic and Technological Changes Fueled This Deal
The fact a $32 billion acquisition agreement between Google and Wiz was reached speaks to major changes that have occurred in the market around the competitive landscape, the regulatory environment, the macroeconomic environment, customer buying behavior, and the technology itself.

Violent ChatGPT Hallucination Sparks GDPR Complaint

BankInfoSecurity.com

1 week 6 days ago

Norwegian Man Tells OpenAI: I Didn't Kill My Children
A Norwegian man is peeved that a chatbot hallucinated a violent backstory for his life after seeing that ChatGPT apparently believes he's a child killer spending decades inside prison. "The fact that someone could read this output and believe it is true is what scares me the most," he said.

Authorities Warn of Security Terror Threats to Hospitals

BankInfoSecurity.com

1 week 6 days ago

Health ISAC, AHA Bulletin Urges Entities to Bolster Physical, Cyber, Preparedness
Threats transmitted on social media intimating coordinated terrorist attacks on hospitals in mid-tier U.S. cities have industry authorities warning the healthcare sector to shore up physical and cyber security, as well as emergency management response plans.

Checked

2 hours 35 minutes ago

BankInfoSecurity.com RSS News Feeds on bank information security news, regulations, blogs and education

URL

https://www.bankinfosecurity.com/rssFeeds.php?type=main

BankInfoSecurity.com feed