Steve Katz, World's First CISO, Dies in Hospice Care

Anna Delaney • December 4, 2023

Steve Katz, the world's first CISO, died Saturday night while under hospice care in Long Island, New York. He left a strong legacy - not just as a pioneer and trailblazer in cybersecurity leadership but also as a beloved colleague and mentor who generously shared his time and wisdom.

►

Artificial Intelligence & Machine Learning

Proofpoint Snags Former VMware President Sumit Dhawan as CEO

Founder Sam Altman Back as OpenAI CEO Under Revamped Board

CISO Trainings

CISOs Need to See the Invisible to Get the Board's Buy-In

Training & Security Leadership

ONCD Temporarily Fills Critical Vacant Federal Cyber Role

Latest

Cyberwarfare / Nation-State Attacks

Gh0st RAT Variant Targeting Uzbek and South Korean Users

Jayant Chakravarti • December 4, 2023

Suspected Chinese threat actors used a Gh0st RAT variant to target South Korean entities and the Uzbekistan Ministry of Foreign Affairs to gather intelligence. According to Talos Intelligence, SugarGh0st features additional capabilities that enable it to defeat signature-based detection tools.

Artificial Intelligence & Machine Learning

ISACA Generative AI Survey: Training Gaps, Focus on Security

Anna Delaney • December 1, 2023

According to a recent pulse poll from ISACA on generative AI, only 6% of respondents' organizations are providing training to all staff on AI, and more than half - 54% - say that no AI training is provided at all, even to teams directly affected by AI.

Fraud Management & Cybercrime

Surgical Practice Notifying 437,400 Patients of Data Theft

Marianne Kolbasuk McGee • December 1, 2023

A large, Seattle-based surgical group is notifying nearly 437,400 individuals that their information was potentially compromised in a ransomware and data theft incident earlier this year. The breach is part of a larger, disturbing trend in the healthcare sector in 2023.

Endpoint Security

Why Broadcom Seeks 'Strategic Alternatives' for Carbon Black

Michael Novinson • December 1, 2023

It looks as if Carbon Black's days as part of Broadcom are numbered. Broadcom CEO Hock Tan told staff at newly acquired VMware in both an email and town hall meeting that he plans to "review strategic alternatives." The move comes just four years after VMware purchased Carbon Black for $2.1 billion.

Standards, Regulations & Compliance

Exemption of CERT From Public Disclosure Rules Criticized

Jayant Chakravarti • November 30, 2023

The Indian government has exempted the national Computer Emergency Response Team from providing information to citizens under the Right to Information Act. Industry experts believe the move may dilute the agency’s public accountability and transparency.

Information Sharing

Okta Delays New Products, Projects 90 Days to Boost Security

Michael Novinson • November 30, 2023

Okta has paused product development and internal projects for 90 days to beef up its security architecture and operations for applications, hardware and third-party vendors. Okta will move to strengthen its cyber posture, including a security action plan and engaging with third-party cyber firms.

Fraud Management & Cybercrime

Capital Health in NJ Is Responding to a Cyberattack

Marianne Kolbasuk McGee • November 30, 2023

New Jersey-based hospital group Capital Health is dealing with a network outage, caused by a cyberattack earlier this week, which is affecting some patient services. Capital Health is at least the second healthcare provider in the Garden State responding to a cyberattack this week.

Fraud Management & Cybercrime

NY AG Warns of ID Theft Risk in Medical Transcription Hack

Marianne Kolbasuk McGee • November 30, 2023

New York regulators are warning millions of individuals of identity theft risks involving a data theft at a medical transcriber that has now affected patients of at least two major healthcare groups, including Crouse Health and Northwell Health in the state. Lawsuits in the case are also piling up.

Governance & Risk Management

Good Governance: 'It's All Hygiene'

Steve King • November 30, 2023

In the constant struggle to manage the other five pillars - identify, protect, detect, respond and recover - security leaders often do not have governance at top of mind, said Netography CEO Martin Roesch, but he added, "Good governance is the root of having good security."

Government

Experts Urge Congress to Establish Clear SBOM Guidance

Chris Riotta • November 29, 2023

Procurement experts testified to the House Subcommittee on Cybersecurity, Information Technology, and Government Innovation on Wednesday that government requirements leave too many unanswered questions and ambiguities for federal agencies when it comes to implementing SBOMs.

Cybercrime

Japanese Space Agency Investigates Active Directory Hack

Jayant Chakravarti • November 29, 2023

The Japanese space exploration agency is investigating a cyberattack this summer that reportedly targeted an Active Directory server. Police detected the attack and alerted the space agency, which claims hackers did not access any personal information.

Artificial Intelligence & Machine Learning

Securing Digital Transformation Programs Starts at the Top

Anviksha More • November 29, 2023

In this era of extended digital transformation projects and emerging AI technologies, understanding the implications of technological advancement - and the risks that come with innovation - is increasingly critical for enterprise security, according to Sambasivan G, CFO at Tata Play.