Kaiser Permanente informed 13.4 million current and former members and patients who accessed its websites and mobile apps that certain online tracking technologies may have transmitted personal information to third-party vendors Google, Microsoft Bing, and X when members accessed those websites or apps.
Kaiser Permanente, one of the largest not-for-profit providers of health care and coverage in the United States, is dealing with the fallout from a significant data breach that has affected more than 13 million individuals.
Omni Hotels & Resorts was the recent target of a ransomware attack by the Daixin Team ransomware group. The incident led to disruptions across Omni Hotels & Resorts, and the Daixin Team and claimed the theft of information pertaining to visitors from 2017 onwards.
Parent company UnitedHealth Group has released further details about the devastating Change Healthcare attack that caused widespread damage throughout the United States, taking large chunks of revenue from some care providers and in some cases keeping patients from needed medication.
As compromised passwords/credentials continue to be one of the most common cause of data breaches, I wanted to reach out and share some expert commentary from leaders across the cybersecurity and tech space on the importance of this day as well as insights into best practices for improving password security posture.
The U.S. Department of the Treasury's Federal Insurance Office (FIO) announced a major new initiative this week to improve the insurance industry's capabilities around modeling and underwriting terrorism and catastrophic cyber risks.
From Silicon Valley startups to tech giants, artificial intelligence (AI) is rapidly transforming the art of computer programming. It offers developers a powerful new toolkit to brainstorm ideas, write and refine code, and fix pesky bugs — all with the help of AI-powered assistants.
The U.S. Justice Department on May 7 unsealed charges against a Russian national for his alleged role as the creator, developer and administrator of LockBit, arguably one of the most prolific ransomware gangs and an early pioneer of the ransomware-as-a-service (RaaS) model.
n a major blow to cybercrime, Breach Forums, a notorious online marketplace for stolen data, has been seized by the FBI and Department of Justice (DoJ). This unprecedented takedown includes not just the clear web domain, but also the dark web, escrow sections and Telegram accounts.
Nissan North America (NNA) notified consumers on May 15 that a ransomware attack included the loss of certain personal information relating to current and former NNA employees, including Social Security numbers.
The Securities and Exchange Commission (SEC) announced new rules on Thursday requiring certain kinds of financial institutions to have well-defined plans for what to do when a data breach involving customer information occurs.
WebTPA Employer Services, the Texas-based provider of administrative services to health insurance and benefits plans, reported to the Department of Health and Human Services on May 8 that more than 2.4 million plan members had their personal information stolen.
Zendata, a leading provider of Artificial Intelligence (AI) governance and data privacy solutions, emerged from stealth with $2 million in funding to redefine how security teams manage data and security.
Zendata, a provider of AI governance and data privacy solutions, is emerging from stealth with the aim of increasing understanding around data usage. Backed by $2 million in a funding round led by PayPal Ventures, First-hand Alliance, Geek Ventures, and Altari Ventures, Zendata will continue to develop its platform while expanding its customer base.
Zendata, a leading provider of Artificial Intelligence (AI) governance and data privacy solutions, today emerged from stealth with $2 million in funding to redefine how security teams manage data and security.
Zendata emerged from stealth with $2 million in funding to redefine how security teams manage data and security. The seed round was led by PayPal Ventures, First-hand Alliance (operated by Salesforce Alumni), Geek Ventures, and Altari Ventures.
The threat group ShinyHunters claims to have captured 1.3 terabytes of Ticketmaster customer data, with payment information allegedly included, and the group is threatening to release the personal data unless a ransom of $500,000 is paid.
A Safety and Security committee has been formed by the OpenAI Board with the purpose to provide suggestions about safety and security decisions for all OpenAI projects. One of the committee’s first tasks will be to assess and develop the processes and safeguards that OpenAI has in place within 90 days. After 90 days, the committee will share recommendations with the OpenAI Board for full review. Following the review, OpenAI will publicly release an update on adopted process changes.
Zendata, a San Francisco-based startup, quietly announced this week its emergence from stealth mode with a $2 million seed funding round led by PayPal Ventures, First-hand Alliance, Geek Ventures, and Altari Ventures.
Generative artificial intelligence (A.I.) can feel overhyped at moments, but data suggests more enterprise workers are using it. A survey by security firm Cyberhaven, based on usage patterns of 3 million employees, shows the amount of corporate data added to A.I. platforms increased by 485 percent between March 2023 and March 2024.
A new California legislative proposal, SB 1047, is sending ripples of concern through Silicon Valley. Introduced by State Sen. Scott Wiener, the bill seeks to implement “common sense safety standards” for companies developing large artificial intelligence (AI) models that surpass specific size and cost thresholds.
Tax season is always a stressful time, and with the IRS tax deadline just around the corner, many individuals and businesses are rushing to get their returns filed in time. In this scramble, it’s easy to overlook the plethora of serious privacy and security concerns surrounding the sensitive financial data entrusted to tax preparation companies.
Many Americans are turning to online tax filing services to simplify the process and avoid the hassle of paperwork. While these services offer convenience, they often come with a hidden cost: your personal and financial data.
Omni Hotels & Resorts on April 14 confirmed that a limited amount of data was compromised in the March 29 Good Friday cyberattack on its systems. In a statement on its website, Omni said the impacted data may include customer names, email and mailing addresses, as well as select guest loyalty program information.
Smaller artificial intelligence (AI) models, like Microsoft’s recently unveiled Phi-3-mini, are proving that bigger isn’t always better for business applications. These lightweight, efficient models can tackle content creation and data analysis without the hefty computational requirements and costs associated with their larger counterparts, experts say, making AI more accessible and cost-effective for businesses.
Microsoft's planned release April 1 of Copilot for Security hit some speed bumps when the House of Representatives on March 29 banned the use of the software maker’s alternative chatbot to OpenAI’s ChatGPT by House staffers.
After weeks of denial, AT&T has finally acknowledged a massive data breach impacting 73 million current and former customer accounts. The telecom giant had initially claimed that a large trove of personal data leaked on the Dark Web did not originate from their systems.
Data backups have become a must-hit target for ransomware actors, according to a report released by a cybersecurity company. The research, sponsored by Sophos and based on a survey of nearly 3,000 IT and security professionals across 14 countries, found that 94% of organizations hit by ransomware in the past year said that the threat actors attempted to compromise their backups during the attack.
In an eye-opening piece of threat intelligence, the cloud-focused Wiz research team partnered with fast-growing AI-as-a-service provider Hugging Face to uncover flawed, malicious models using the "pickle format" that could put the data and artificial intelligence models of thousands of Hugging Face customers at risk.
The U.S. Department of the Treasury released a report stating that artificial intelligence (AI) is contributing to an increase in financial fraud. The agency states that AI has allowed for fraudsters to mimic speech or video via AI, convincing a target to allow the fraudster access to financial accounts or information.
Payment disruptions at supermarkets and fast-food outlets in the UK over the past week will force CIOs to consider whether improved reliability is something they can’t afford not to pay for.
World Backup Day is one of the largest tech-related event days in the world, with a goal of spreading awareness about backups and data preservation. It was created to encourage people and organizations to take proactive steps to protect their personal and professional data to ensure it can be restored in the event of a cyberattack, hardware malfunction, accidental deletion, etc.
The U.S. Department of Treasury on March 27th released a report titled "Managing Artificial Intelligence-Specific Cybersecurity Risks in the Financial Services Sector." The report highlights the growing concern around artificial intelligence (AI) and its potential to introduce new cybersecurity threats to the financial industry.
Congress voted in favor of banning the popular social media app TikTok on Wednesday, following its passage last week by the House Energy Committee. The bill requires any company controlled by a "foreign adversary" to be divested within 180 days.
The U.S. House of Representatives has passed legislation that could lead to a nationwide ban on the popular video-sharing app TikTok, reigniting debates around data privacy, national security, and the limits of government oversight.
The study pointed out that while GDPR exclusively concerns Europe, websites originating in the U.S. still sell goods and services to EU customers. This lack of compliance could have significant implications for companies unless they agree to modify their practices for European visitors. Fines for violations of the GDPR range from $80,000 to $120,000.
The Belgian Data Protection Authority (DPA) revealed that the International Advertising Bureau’s Transparency and Consent Forms (TCF) were non-compliant with GDPR regulations. And Google launched new differential privacy tools to help meet the growing demand for better consumer privacy, among other news.
Zendata analyzed the top 1,000 U.S. Web sites (per Crunchbase.com data) during the Dec. 2021 period, using its own software for the analyses. Almost half of the sites (43.2 percent) didn't offer a choice of opting out of having one's data being sold.
A study announced Friday by privacy compliance solutions vendor Zendata found woeful practices in place with the top 1,000 U.S. Web sites. The context is the European Union’s General Data Protection Regulation (GDPR), which went into effect years ago on May 25, 2018.
The U.S. Federal Bureau of Investigation and Department of Justice have seized control of the infamous BreachForums hacking forum, at least according to a notice on the group’s site.
The US authorities appear to have disrupted a notorious hacking forum, just days after a threat actor advertised data stolen from Europol on the site.
As the spotlight intensifies on how threat actors are leveraging AI to penetrate organizations' defenses, the call for investing in protection against AI attacks grows louder.
Nissan has revealed that over 53,000 of its North America employees have had their personal data breached following a ransomware attack on its systems in late 2023.
The Securities and Exchange Commission (SEC) announced new rules on Thursday requiring certain kinds of financial institutions to have well-defined plans for what to do when a data breach involving customer information occurs.
WebTPA Employer Services, the Texas-based provider of administrative services to health insurance and benefits plans, reported to the Department of Health and Human Services on May 8 that more than 2.4 million plan members had their personal information stolen.
