For individuals

FedScoop reports that the Food and Drug Administration has been recommended by the Government Accountability Office to update its five-year-old medical device cybersecurity agreement with the Cybersecurity and Infrastructure Security Agency to better address cybersecurity vulnerabilities impacting heart monitors and other medical devices. Even though the FDA has increased its hold over medical device cybersecurity following last year's legislation requiring vulnerability identification and remediation plans among medical device manufacturers, the agency has yet to determine additional cybersecurity authorities, according to the GAO. "According to the Department of Health and Human Services (HHS), available data on cybersecurity incidents in hospitals do not show that medical device vulnerabilities have been common exploits.

What a recent rise in DDoS attacks portends — and how to prepare for 2024.

The innovation that ChatGPT and other LLMs demonstrate is a good thing, but safeguards and other security frameworks must keep pace.

The country is facing a skills shortage and increased attacks, but its cyber plans are rapidly developing.

Summary In recent months, Microsoft Threat Intelligence has observed threat actors leveraging social engineering and phishing techniques to target Windows OS users and utilizing the ms-appinstaller URI scheme. We have addressed and mitigated this malicious activity by turning off ms-appinstaller by default. Additionally, Microsoft has coordinated with Certificate Authorities to revoke the abused code signing certificates utilized by malware samples we have identified.

Weigh the pros and cons of testing, and then move forward – because it does work.

While Sophos AI has been working on ways to integrate generative AI into cybersecurity tools — work that is now being integrated into how we defend customers’ networks — we’ve also seen adversaries experimenting with generative AI.

All code-contributing GitHub users have been advised by the software developer platform to enable two-factor authentication by Jan. 19 to prevent having limited account functionality, according to BleepingComputer.