Excellent, short essay by Bruce Schneier: "Should you use AI for a task? Here’s a simple way to decide" www.theguardian.com/commentisfre...
Should you use AI for a task? Here’s a simple way to decide | Bruce Schneier
Sometimes, what matters isn’t your output but what you put into the process. Think of it like work v the gym
theguardian.com
The use of web tracking pixels that transmit healthcare website and patient portal users' to third-party marketing and advertising firms has been the subject of many data breach investigations, enforcement actions and proposed class action lawsuits. www.databreachtoday.com/court-tosses...
Court Tosses Web Tracker Suit Against CRH Healthcare
A federal court dismissed a proposed class action lawsuit alleging Georgia-based CRH Healthcare unlawfully shared patient data through website tracking
databreachtoday.com
Weekly Data Breach Roundup —Water utilities in 12 U.S. states hit by ongoing campaign believed to be Iranian —Chinese-made SOHO routers sold with embedded Trojan —Banned Chinese companies still a presence in U.S. networks —Big in Africa: AI fuels cybercrime www.databreachtoday.com/breach-round...
Breach Roundup: Water Utilities in 12 US States Hit
This week: water utilities in 12 U.S. states hit, Trojans in Chinese SOHO routers, banned Chinese companies in U.S. networks, AI fueled cybercrime in Africa, a U.K.
databreachtoday.com
GPS signals can be jammed, spoofed or lost. The U.S. government is trying to address those risks by promoting a new-generation quantum clock, known as optical atomic clocks, and creating a market for the ultra-precise and resilient timing technology. www.databreachtoday.com/its-about-ti...
It's About Time for GPS Spoofing-Resistant Quantum Clocks, DARPA Says
DARPA selected IonQ to create a manufacturing pipeline for rugged optical atomic clocks that could preserve precise military timing for weeks or months when GPS is
databreachtoday.com
A global coalition of the world's top cybersecurity agencies now agree on what belongs in a software ingredients list - but whether anyone actually reads the label is another question. www.databreachtoday.com/cisas-new-sb...
CISA's New SBOM Rules Face Old Adoption Problem
The U.S. Cybersecurity and Infrastructure Security Agency, the NSA, the FBI and 15 international partners released updated minimum elements for software bills of
databreachtoday.com
Beacon CRM, widely used by charities, suffers data breach, with English National Ballet being among the confirmed victims notifying supporters www.databreachtoday.com/beacon-crm-w...
Beacon CRM, Widely Used by Charities, Suffers Data Breach
Cloud-based customer relationship management software provider Beacon CRM said it's suffered a security breach that likely led to the theft of customer data. Over
databreachtoday.com
Andy Burnham's appointment as U.K. prime minister on July 20 could mark a more interventionist phase for technology regulation, says attorney Jonathan Armstrong, partner at Punter Southall Law. www.databreachtoday.com/burnham-gove...
Burnham Government Could Signal Tougher UK Cyber and AI Regs
Andy Burnham's arrival as U.K. prime minister on July 20 could accelerate Labour's push for tougher AI, cyber and data rules. Attorney Jonathan Armstrong says to
databreachtoday.com
Cyberattack good news and bad news on the AI front: Large language models are helping sophisticated cyberattackers boost their productivity, while less-skilled attackers still have trouble turning their ideas to reality, researchers find. Full story: www.databreachtoday.com/blogs/sophis...
Sophisticated Cyberattackers Boost Productivity Using AI
Everybody seems hellbent on applying artificial intelligence tools to boost productivity, and criminal hackers appear to be no exception. But as with non-illicit use of large language models, the…
databreachtoday.com
As Chinese AI models narrow gap with US frontier labs, experts say cost - not capability - is driving enterprise adoption www.databreachtoday.com/chinese-ai-m...
Chinese AI Models Narrow Gap With US Frontier Labs
Chinese open-weight AI models from Moonshot AI, DeepSeek and Alibaba are approaching the performance of leading proprietary models while undercutting them on price.
databreachtoday.com
Pharmaceutical maker Amgen has notified the U.S. SEC that cybercriminals may have stolen a cache of sensitive company data, including patient information, intellectual property, research and development and other confidential business files. www.databreachtoday.com/amgen-tells-...
Amgen Tells SEC Hack Exposed Patient Data, Trade Secrets
Pharmaceutical maker Amgen has notified the U.S. Securities and Exchange Commission that cybercriminals have potentially stolen a cache of sensitive company data,
databreachtoday.com
New York pours $9 million into water cyber defense amid attacks www.databreachtoday.com/new-york-pou...
New York Pours $9M Into Water Cyber Defense Amid Attacks
New York is awarding more than $9 million in cybersecurity grants to water and wastewater systems statewide, fast-tracking the funding after a wave of cyberattacks
databreachtoday.com
N-Able flaw exposes managed security providers to worst-case scenario www.databreachtoday.com/n-able-flaw-...
databreachtoday.com
Hackers are using hotel Wi-Fi networks across the United States, India and Saudi Arabia to steal credentials, exfiltrate data and spread malware onto personal devices, researchers warn. www.databreachtoday.com/travelers-be...
Travelers Beware: Russian Intel Hacking Hotel Wi-Fi
Hackers are using hotel Wi-Fi networks across the United States, India and Saudi Arabia to steal credentials, exfiltrate data and spread malware onto personal
databreachtoday.com
Hugging Face incident spurs calls for European AI autonomy www.databreachtoday.com/hugging-face...
Hugging Face Incident Spurs Calls for European AI Autonomy
OpenAI's inadvertent agentic hacking of Hugging Face's systems has startled some politicians in Europe, with Germany's top tech minister saying it demonstrated the
databreachtoday.com
Weekly Cryptohack Roundup —Triple-A wallet compromised —Verus-Ethereum Bridge exploited —Hackers use SparkKitty malware to steal seed phrases —Fake IRS letters target crypto holders with phishing scam —BitMart to shutter —EU bans transactions with HTX www.databreachtoday.com/cryptohack-r...
Cryptohack Roundup: Triple-A, Verus-Ethereum Bridge Exploits
This week, Triple-A wallet was compromised and Verus-Ethereum Bridge exploited, hackers used SparkKitty malware to steal seed phrases, fake IRS letters targeted
databreachtoday.com
Weekly Data Breach Roundup —"I'm mean there could be, yeah," is what OpenAI's Sam Altman said when asked about more model hacking —Russian nation-state hacking group revived with an Outlook exploit —Coca-Cola reboot milk production after ransomware attack www.databreachtoday.com/breach-round...
Breach Roundup: OpenAI Models on a Hacking Tear
This week: Sam Altman on hacking, Russia exploited an Outlook web access flaw, Coca-Cola restarted Fairlife production, U.K. education department and Angola teleco
databreachtoday.com
Ransomware hackers, faced with declining willingness to exceed to extortion, are resorting to ever more outlandish pressure tactics - including dispatching threat actors in disguise, to steal sensitive data in person. www.databreachtoday.com/flailing-ran... #sneakernet
Flailing Ransomware Hackers Resorting to Extreme Tactics
Fewer ransomware victims are choosing to pay a ransom than ever before, bar some big payoffs that largely trace to high-profile law firms that got hit by a group
databreachtoday.com
A slew of attacks against open-source libraries trace back to a financially motivated North Korean nation-state threat actor, Amazon Web Services reports. The group gets tracked as Sapphire Sleet or Stardust Chollima. www.databreachtoday.com/north-korea-...
North Korea Behind Slew of JavaScript Supply-Chain Hacks
A slew of attacks against open-source libraries trace back to a financially-motivated North Korean nation-state threat actor, analysis from Amazon Web Services set
databreachtoday.com
Claude Mythos demonstrates that LLMs can find new, working attacks on cryptographic algorithms. Cryptographers and security experts have welcomed the LLM-driven results as a fresh set of eyes, especially as the world embraces quantum-safe cryptography. www.databreachtoday.com/claude-mytho... #PQC
Claude Mythos Finds New Cryptographic Algorithm Attacks
Large language models continue to evolve quickly, with researchers discovering working attacks against two cryptographic algorithms using Anthropic's Claude LLM.
databreachtoday.com
Many more bugs are getting found, but exploits stay steady: Data shows hackers not using a great number of new exploits per year, but they are exploiting flaws more quickly www.databreachtoday.com/many-more-bu...
Many More Bugs But Exploits Stay Steady
The coming of the vulnocalypse - our artificial intelligence-instigated moment of drastically accelerating flaw discovery - has yet to be matched with an
databreachtoday.com
Dozens of the world's biggest technology firms are joining a new Nvidia-led initiative to build open-source security tools for artificial intelligence. www.databreachtoday.com/nvidia-launc...
databreachtoday.com
Crime watch: A former certified public accountant sentenced to serve four years in federal prison for his role in a $5.3 million healthcare fraud scheme www.databreachtoday.com/cpa-gets-pri...
CPA Gets Prison Time in $5.3M Healthcare Fraud Case
A former certified public accountant will serve four years in federal prison following his recent conviction in a money laundering scheme in which a hacker
databreachtoday.com
Project Perception: Microsoft on Monday launched a new security agent stack and a cyber-capable model it says can beat Mythos but costs half as much, for helping to find and fix software flaws. www.databreachtoday.com/microsoft-un...
Microsoft Unveils AI Security Stack, Low-Cost Cyber Model
Microsoft introduced Project Perception, an AI-powered security platform that coordinates specialized agents to detect, investigate and remediate cyberthreats. The
databreachtoday.com
Anthropic and Pentagon set to face off Thursday over blacklisting www.databreachtoday.com/anthropic-do...
databreachtoday.com
Clop extortion group tied to hits on Boston-based PTC's popular product life cycle management software. www.databreachtoday.com/clop-tied-to... #cl0p #clop #ransomware
Clop Tied to PTC Product Life Cycle Management Software Hits
Digital extortion group Clop, aka Cl0p, has been tied to a fresh spate of supply-chain attacks, this time targeting users of popular Windchill and FlexPLM product
databreachtoday.com
Leadership void: No single senior official is in charge of U.S. efforts to help secure commercial satellites and their land-based infrastructure against hackers, online spies and cyber attackers. www.databreachtoday.com/us-space-cyb...
US Space Cybersecurity: 'No One Is in Charge'
No single senior official is in charge of U.S. efforts to help secure commercial satellites and their land-based infrastructure. That leadership void has hampered
databreachtoday.com
Insane Castle Hurricane: Confusion proliferates as researchers keep assigning fresh codenames to hacking groups. In the words of veteran security researcher Daniel Cuthbert: "There is a massive need for standards in this space." More: www.databreachtoday.com/blogs/insane...
Insane Castle Hurricane: APT Codename Confusion Proliferates
What do Castle, Ion, Neptune, Relic and Comet have in common? They're among the codenames Google will begin assigning to threat groups, many of which already have a dozen different codenames assigned…
databreachtoday.com
Russian espionage hackers are targeting Zimbra Collaboration Suite with half-click attacks by exploiting a flaw (a patch is available) to execute a malicious script simply if a recipient reads the email in their webmail client. www.databreachtoday.com/russian-espi...
Russian Espionage Hackers Hit Zimbra With Half-Click Attacks
Russian cyberespionage hackers are targeting a vulnerability in Zimbra Collaboration Suite - a patch is available - that enables them to execute a malicious, data-
databreachtoday.com
Don't stop sharing: Lawmakers voted to extend a key cyberthreat sharing law for another decade, attaching the long-stalled reauthorization to Washington's annual defense policy bill. www.databreachtoday.com/us-house-vot...
US House Votes to Extend Cyber Sharing Law for 10 Years
The U.S. House of Representatives passed a fiscal year 2027 defense authorization bill with a provision extending the Cybersecurity Information Sharing Act of 2015
databreachtoday.com
Combating grooming and violent content: European law enforcement notified hosting providers of 4,340 URLs containing nihilistic violent extremism in a weeks-long international crackdown, the European Union's law enforcement intelligence agency said Friday. www.databreachtoday.com/europol-flag...
databreachtoday.com