CYBERSECURITY
|
What's Worse Than the "Largest IT Outage in History"? It Could Be CrowdStrike-Hotfix.Zip, or the Congressional Response |
CrowdStrike CEO George Kurtz wrote a heartfelt letter of apology to the 8.5 million of us Windows users who've been crippled by the CrowdStrike outage. He also mentioned that bad actors wasted no time in trying to exploit the event: a malicious file named "crowdstrike-hotfix.zip" that was being sent around by hackers posing as a 'quick fix' to the problem, which actually included malware enabling them to remotely control or monitor a user's device. (https://www.wsj.com/business/crowdstrike-outage-travel-snarl-hacking-threat-cybersecurity-16647177)
While Kurtz has already explained that the outage stemmed from a faulty update to CrowdStrike's software, Congress wants to know more. So they've "invited" him to testify before a hearing, where they hope to hear assurances that safeguards have been put in place that this could never happen again. Meanwhile, the original outage is still roiling industries, large and small, including the cancellation of over 5,000 flights globally, with economic losses estimated in the billions. (https://apnews.com/article/crowdstrike-tech-outage-microsoft-windows-falcon-8fe725037ab975e011b2cfad67b17c0f)
|
|
North Korean Hackers Fake IT Worker for Cybersecurity Firm |
Cybersecurity awareness training company KnowBe4 has revealed it was duped into hiring a fake IT worker from North Korea, resulting in attempted insider threat activity. A high level of sophistication used by North Korean attackers in creating a believable cover identity, capable of passing an extensive interview and background check. The case demonstrates North Korea's ongoing efforts to get fake workers employed in IT roles in Western companies, both as a means of generating revenue for the Democratic People's Republic of Korea (DPRK) government and to conduct malicious cyber intrusions. The applicant used a valid but stolen US-based identity. The picture provided on the application was AI 'enhanced' (to look completely different). Once employed, a fake worker requests their workstation be sent to an address that is an "IT mule laptop farm." They then use VPNs to access the workstation from their real physical location, which is usually North Korea or China. (https://www.infosecurity-magazine.com/news/north-korean-hackers-targeted/)
|
|
TechCrunch Experts on How to Not Be the Next Crowd Strike |
- Without standardization, it's easier for bad code to slip through the cracks.
- Practicing standard software release hygiene involves testing before deploying and then deploying in a controlled way.
- Progressive rollouts are the place to start. Instead of delivering the change to every user all at once, instead release it to a small subset and see what happens before expanding the rollout. If something goes wrong, you can roll back features that aren't working and get people back to the prior version.
- A lab test doesn't always catch everything, and that's why you have to combine good DevOps testing with controlled deployment to catch things that lab tests miss.
- Bad code is going to slip through from time to time, but if you follow best practices, it probably won't be as catastrophic as what happened last week.
(https://techcrunch.com/2024/07/23/how-to-prevent-your-software-update-from-being-the-next-crowdstrike/)
|
|
CEOs Don't Have to Become Experts in Technical Aspects of Cybersecurity in Order to Be Prepared |
Earlier this year, UnitedHealth Group CEO Andrew Witty testified in front of Congress over a February cyberattack on its subsidiary Change Healthcare that affected an estimated third of Americans, and disrupted claims processing, payments to providers, prior authorization requests and eligibility checks for months. The incident was notable because while cybersecurity breaches have become common, a CEO answering security questions at the highest levels of government is not.
The role of the CEO hasn't exactly changed when it comes to cybersecurity, but the CEO's perception of risk and level of engagement has, said Trevor Horwitz, CISO and founder of Trustnet. The difference now is the potential threat to business operations and reputations, he said. CEOs should be playing a role in cybersecurity strategy overall, said Horwitz, which includes overseeing the development and implementation of risk mitigation strategies, incident response plans, and disaster recovery plans. And, CEOs should be "asking deep and searching questions, not about the technical aspects of it but the coverage and depth and how confident we feel" in the company's cybersecurity stance, said Kevin Dunn, the former SVP and head of professional services at NCC Group who now serves as a senior manager for ProServe Security at AWS. (https://www.cybersecuritydive.com/news/ceo-cyber-security-strategy-CISO/721102/)
|
|
At Last! A Health Record Cyberhacker Got Caught! |
A data breach at Geisinger may have exposed the personal information of more than 1.2 million patients, according to a report filed with federal regulators. In late November, the Pennsylvania-based health system discovered a former employee of Nuance Communications, a Microsoft subsidiary, had accessed certain patient information two days after the employee was terminated, according to Geisinger. Law enforcement asked Nuance to delay notifying patients about the breach until now to avoid impacting their investigation. The worker has been arrested and is now facing federal charges, Geisinger said. Data exposed by the employee varied by patient, but could include names, birth dates, addresses, admit and discharge or transfer codes, medical record numbers, race, gender, phone numbers and facility names. No claims or insurance information, financial information or Social Security numbers were accessed by the former employee. (https://www.healthcaredive.com/news/geisinger-nuance-communications-data-breach/720382/)
|
|
ARTIFICIAL INTELLIGENCE
|
Digital Twins: An AI Tech to Watch |
The Consumer Technology Association has published a paper on AI, called 2024 Tech to Watch: Digital Twins. An excerpt: "From innovations on the CES show floor to major announcements from leading tech firms, 2024 is poised to be a major year for digital twins. This technology has the power to transform and elevate a variety of industries including automotive design, healthcare practices, and more. With the rise of artificial intelligence capabilities, the potential impact of digital twins will only grow further in the coming years." (https://www.ces.tech/articles/2024/may/2024-tech-to-watch-digital-twins.aspx)
|
|
AI Budgets Poised to Surge in 2025 |
The number of U.S. companies investing $10 million or more in AI is expected to almost double next year, according to a survey by Big Four accounting firm Ernst & Young. 30% of respondents said their business is planning to invest at least $10 million in AI next year, up from a current level of 16%, according to a report on the findings. But many of these organizations are failing to also invest in necessary infrastructure for AI, jeopardizing the technology's potential impact, the report said. (https://www.ciodive.com/news/AI-budget-rise-10M-EY/721665/)
|
|
OpenAI Startup Fund Backs AI Healthcare Venture with Arianna Huffington |
Huffington Post founder Arianna Huffington and OpenAI CEO Sam Altman are throwing their weight behind a new venture, Thrive AI Health, that aims to build AI-powered assistant tech to promote healthier lifestyles. Backed by Huffington's mental wellness firm Thrive Global and the OpenAI Startup Fund, Thrive AI Health will seek to build an "AI health coach" to give personalized advice on sleep, food, fitness, stress management and "connection," according to press release. DeCarlos Love, who previously led fitness and health experiences at Google's Fitbit subsidiary, primarily on the tech giant's Pixel Watch wearable, has been appointed CEO. (https://techcrunch.com/2024/07/08/openai-startup-fund-backs-ai-healthcare-venture-with-arianna-huffington/)
|
|
TRANSPORTATION TECH
|
Southwest, Archer Envision Air Taxi Network |
Archer Aviation and Southwest Airlines are teaming up to figure out what it will take to build out a network of electric air taxis at California airports. The two companies recently signed a memorandum of understanding, which sets the foundation for Archer to tap Southwest's customer base. It also gives Archer access to data about those customers which could inform decisions like where to build vertiports, or local eVTOL stations. This is the second U.S.-based airline that Archer has partnered with after United Airlines, suggesting the eVTOL company aims to support regional routes. Southwest operates at 14 airports across California, and Archer's Midnight aircraft is designed to replace 60- to 90-minute urban commutes by car with air flight that takes only 10 to 20 minutes. (https://techcrunch.com/2024/07/12/archers-vision-of-an-air-taxi-network-could-benefit-from-southwest-customer-data/)
|
|
Easing EV Range Anxiety Through Faster Charging |
The automotive industry is developing new ways to boost the range of electric vehicles and the speed at which they are charged, overcoming buyer hesitation that has limited the total percentage of EVs to 18% of vehicles being sold. (https://semiengineering.com/easing-ev-range-anxiety-through-faster-charging/)
|
|
|