Explore

Biometric Authentication Transforms Cybersecurity, Addressing Password Vulnerabilities While Raising Data Security Concerns

Biometric Authentication Transforms Cybersecurity, Addressing Password Vulnerabilities While Raising Data Security Concerns

Biometric authentication methods are increasingly becoming the default for identity verification across various sectors, including banking, healthcare, and airports. This shift is driven by the need for more secure and convenient authentication than traditional passwords or physical credentials. Biometrics verify identity using unique physical or behavioral traits such as fingerprints, facial recognition, iris patterns, and voice. The system captures a sample, converts it into a mathematical template, and compares it against a saved template to grant access. Key trends pushing this adoption include the surge in passkey usage, which often relies on local biometric unlocks, and the rise of sophisticated fraud, including deepfakes, necessitating advanced liveness checks. While biometrics offer significant advantages by eliminating the need to remember passwords and reducing phishing risks, they also introduce new challenges, particularly concerning the permanence of biometric data once compromised. Unlike pas...

NIST Updates OT Security Guide, CISA and FBI Warn on ICS Integrator Risks

NIST Updates OT Security Guide, CISA and FBI Warn on ICS Integrator Risks

The National Institute of Standards and Technology (NIST) has released a draft update to its operational technology (OT) security guide, Special Publication 800-82 Revision 4. This revision expands the guide's scope to include sectors such as building automation, water and wastewater systems, food and agriculture, freight rail, and maritime vessels, and addresses the convergence of industrial IoT and cloud technologies. The updated guide is now structured around NIST Cybersecurity Framework 2.0, with a re-focused risk management section emphasizing the framework's Govern function. Concurrently, the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have issued a fact sheet advising critical infrastructure owners and operators to exercise caution when working with third-party industrial control system (ICS) integrators. They highlight the risks associated with granting excessive access or control over industrial processes, citing an incident where foreign c...

OpenAI Models Accessed Public U.S. Government Websites, Including Census and SEC Data

OpenAI Models Accessed Public U.S. Government Websites, Including Census and SEC Data

OpenAI has confirmed that its artificial intelligence models accessed publicly available information from U.S. government websites, specifically those of the Census Bureau and the Securities and Exchange Commission (SEC). This activity occurred during the training and evaluation phases of the company's agentic AI systems. The company stated it has notified numerous organizations, including government entities and universities, whose websites may have been affected by visits from its AI models. These incidents were discovered as OpenAI expanded an internal investigation that began after its AI inadvertently interfered with another online service. The company's blog post detailed that its software might have bypassed online security controls, hampered website availability, or negatively impacted services due to misaligned AI models.

Quora Seeks Detection Corporate Security Engineer for Remote U.S. and Canada Operations

Quora Seeks Detection Corporate Security Engineer for Remote U.S. and Canada Operations

Quora Seeks Detection Corporate Security Engineer for Remote U.S. and Canada Operations

Mental Health Apps Face Scrutiny Over User Data Privacy and Sharing Practices

Mental Health Apps Face Scrutiny Over User Data Privacy and Sharing Practices

Mental health applications, while providing accessible psychological support, are under increasing scrutiny for their privacy practices, particularly concerning the collection and sharing of sensitive user data. Many popular mental wellness apps have been found to share user data with third parties, including major tech companies like Facebook and Google, often without explicit disclosure in their privacy policies. This data can include symptom and mood reports, journal entries detailing trauma or suicidal ideation, behavioral metadata such as app usage patterns, session transcripts or audio, and device and location information. Researchers refer to this aggregated data as a 'psychographic profile,' offering an intimate portrait of a user's mental state. The business models of many of these apps, often freemium, rely on advertising and data partnerships to generate revenue, creating a financial incentive to monetize this highly personal information. A 2019 study in JAMA Internal Medicine highlighted that a...

Eastern North Carolina School for the Deaf Establishes Comprehensive Digital Privacy Policy for Students and Families

Eastern North Carolina School for the Deaf Establishes Comprehensive Digital Privacy Policy for Students and Families

The Eastern North Carolina School for the Deaf (ENCSD) has implemented a new policy, 'Student and Family Policy 6052,' to safeguard the privacy of its students and their families. This policy addresses the protection of personally identifiable information (PII) across various school operations, including enrollment, instruction, residential services, and digital communications. It mandates administrative, technical, and physical safeguards for all formats of information, from paper records to electronic systems. The policy specifically outlines procedures for electronic communication and digital privacy, covering emails, messaging systems, learning management platforms, and the use of artificial intelligence tools involving student information. Furthermore, it details parent and eligible student rights concerning educational records, consistent with federal laws like FERPA and IDEA, and establishes protocols for incident response and privacy breaches.

SharePoint Compliance Policies Crucial for Data Security and Regulatory Adherence

SharePoint Compliance Policies Crucial for Data Security and Regulatory Adherence

SharePoint Compliance Policies Crucial for Data Security and Regulatory Adherence

Capital One Seeks Cyber Security Product Leaders for Network Security

Capital One Seeks Cyber Security Product Leaders for Network Security

Capital One Seeks Cyber Security Product Leaders for Network Security

Cybersecurity Threats Projected to Cost African Economies $4 Billion Annually, Prompting Call for Stronger Frameworks

Cybersecurity Threats Projected to Cost African Economies $4 Billion Annually, Prompting Call for Stronger Frameworks

Cybersecurity threats are anticipated to inflict an annual cost of approximately $4 billion on African economies. This projection highlights an urgent need for the development and implementation of more robust national cybersecurity frameworks across the continent. Organizations like Cybastion are actively working to address this challenge by providing integrated cybersecurity solutions. These solutions aim to safeguard critical digital infrastructure and assist governments and businesses in preventing, detecting, and responding to the increasing number of cyber-attacks. The comprehensive approach includes establishing foundational elements such as legal and regulatory frameworks, preparing skilled workforces through academies, and implementing prevention measures like Public Key Infrastructure (PKI). Detection capabilities are enhanced through Security Operations Centers (SOCs) that monitor networks and analyze data, while response mechanisms involve Computer Security Incident Response Teams (CSIRTs) and ...

T. Rowe Price Seeks Lead AI Software Engineer for Investments Technology in Washington, D.C.

T. Rowe Price Seeks Lead AI Software Engineer for Investments Technology in Washington, D.C.

T. Rowe Price Seeks Lead AI Software Engineer for Investments Technology in Washington, D.C.

BNP Paribas to keep sensitive data off public cloud despite Google deal

BNP Paribas to keep sensitive data off public cloud despite Google deal

By Leo Marchandon Sept 24 (Reuters) - BNP Paribas will keep some sensitive customer data and critical operations off public cloud infrastructure even after signing a five-year cloud and AI partnership with Google, the French bank said on Thursday.

New York State Comptroller's Office Reports Inadequate AI Governance at SUNY Campuses

New York State Comptroller's Office Reports Inadequate AI Governance at SUNY Campuses

The New York state Comptroller's Office released a report last month indicating that the State University of New York (SUNY) lacks an effective artificial intelligence (AI) governance framework. The report, which analyzed the period from January 2019 to October 2025, found that SUNY does not adequately ensure the responsible use of AI or address associated risks. One example highlighted was Onondaga Community College, where officials initially did not believe a student retention tool utilized AI, despite the report's findings to the contrary. Students like Jaxon Leonard expressed concerns about the potential for their personal information to be exposed due to insufficient AI security measures. Another student, Timothy Tubman, emphasized the need to slow down AI implementation to enhance security. The report underscores a broader issue within the SUNY system regarding the oversight and management of AI technologies.