Google: 70% of exploited flaws disclosed in 2023 were zero-days

October 16, 2024 at 06:16PM Mandiant security analysts have reported a concerning trend where threat actors are increasingly adept at identifying and exploiting zero-day vulnerabilities in software, highlighting growing risks in cybersecurity. **Meeting Takeaways:** 1. **New Threat Trend**: Mandiant security analysts have identified a concerning trend among threat actors. 2. **Increased Capability**: There is a … Read more

Election Day is Close, the Threat of Cyber Disruption is Real

October 15, 2024 at 03:08PM A new threat report highlights a significant risk of disruption to November’s Election Day, emphasizing the severity and reality of potential cyber threats. The findings suggest vigilance is crucial in safeguarding the electoral process from these emerging dangers. **Meeting Takeaways:** 1. **Severity of Threat:** There is a high potential for … Read more

Schools bombarded by nation-state attacks, ransomware gangs, and everyone in between

October 13, 2024 at 09:09AM The education sector is increasingly targeted by cyber attackers due to its sensitive data and vulnerable IT environments. Schools face average weekly attacks and require robust security measures, including user education on best practices like multifactor authentication, to mitigate risks from hacking, phishing, and other threats from groups like Iran … Read more

Fore-get about privacy, golf tech biz leaves 32M data records on the fairway

October 10, 2024 at 10:22AM A researcher discovered nearly 32 million records from Trackman users exposed in an unsecured database, risking data breaches and cyberattacks. Trackman, used by pro golfers and leagues, quickly secured the database but failed to notify affected users of the exposure. Sensitive information could facilitate phishing and other cybercrimes. ### Meeting … Read more

OpenAI Blocks 20 Global Malicious Campaigns Using AI for Cybercrime and Disinformation

October 10, 2024 at 09:33AM OpenAI reported disrupting over 20 malicious operations this year, targeting deceptive use of its platform, including malware and social media manipulation. Notably, cyber operations involved groups from China and Iran attempting to exploit AI for harmful activities, while emphasizing that significant breakthroughs in malware development were not evident. ### Meeting … Read more

AI-Powered Cybercrime Cartels on the Rise in Asia

October 9, 2024 at 09:07PM AI-powered cyberattacks, especially involving deepfakes, are surging in the Asia-Pacific, with a 600% increase in deepfake mentions reported by UNODC. Cybercriminals leverage generative AI for phishing, misinformation, and sophisticated scams. Socioeconomic issues exacerbate the vulnerability in the region, necessitating international collaboration to combat these threats effectively. ### Meeting Takeaways 1. … Read more

Google Joins Forces with GASA and DNS RF to Tackle Online Scams at Scale

October 9, 2024 at 01:49PM Google has partnered with the Global Anti-Scam Alliance and DNS Research Federation to launch the Global Signal Exchange, aimed at enhancing real-time insights into online scams and cybercrime. The initiative will improve abuse signal exchange, leveraging data from various sources to better protect users and disrupt fraudulent activities. ### Meeting … Read more

Despite Prevalence of Online Threats, Users Aren’t Changing Behavior

October 9, 2024 at 08:12AM The Consumer Cyber Readiness Report reveals that while consumers acknowledge cyber threats, their adoption of security measures is low. Only 28% have identity theft protection, 54% use malware protection, and just 10% utilize encryption. There’s slight progress in software updates, but many remain uncertain about their security tools. ### Meeting … Read more

Social Media Accounts: The Weak Link in Organizational SaaS Security

October 9, 2024 at 07:39AM Organizations often neglect social media account security, risking reputational damage and financial losses. With multiple access layers and stakeholders, proper governance is critical. Utilizing SaaS Security Posture Management (SSPM) tools can enhance oversight, mitigate risks, and ensure only authorized users engage on behalf of the brand. ### Meeting Takeaways – … Read more

What to Know About the Kids Online Safety Act and Its Chances of Passing

July 23, 2024 at 08:15AM The Kids Online Safety Act (KOSA) aims to protect children from online harms and regulate tech companies. It would create a “duty of care” for online platforms used by minors, requiring them to prevent and mitigate various harms. KOSA has support from nonprofits, parent groups, and some tech companies, but … Read more