Notice: Our Q4 book report will be available on 1/1/2025!
Highlights
Gmail users tartged by AI phishing, prompts.
Chrone extension hijecaked across companies.
Amazon Redshift: 3 sever vulnerabilities.
9th US Telcomm by Chinese hackers.
New HIPPA requirements for US healthcare.
South Korea passed AI basic acts.
Deep Dive
1. Gmail users targeted by AI phishing, prompts Forbes
2.5 billion Gmail users at risk.
AI used for realistic phishing attacks.
Attackers use Google phone numbers/forms.
Recovery prompts used to gain account control.
$500k crypto stolen from a user by Gmail exploit.
Action: Use Google's Advanced Protection Program.
2. Chrome extensions hijacked across companies Reuters, Palo Alto Networks
Cyberhaven extension breached.
Campaign targeted many extension developers.
Extenstion were related to VPN and AI.
88% malware is undetected.
LLMs rewrite malware effectively.
Action: Review all third party extensions.
3. Amazon Redshift: 3 severe vulnerabilities Forbes
SQL injection in Redshift drivers.
CVE-2024-12744, 12745 and 12746 impacts the platform.
Allows privilege escalation.
Update to latest driver versions (v3) needed.
Data integrity and security at risk.
Action: Upgrade Redshift drivers immediately.
4. 9th US telecom breached by Chinese hackers BleepingComputer
Salt Typhoon group implicated since 2019.
Targeting multiple countries.
Log removal and inadequate logging.
Attackers accessed over 100k routers.
Basics not implemented in telecoms
Wise Advice: Enforce basic security measures immediately.
5. New HIPAA requirements for US healthcare. Engadget
Multifactor and data encryption needed.
Routine scans for breaches also needed.
Anti-malware is now mandatory.
$9 billion cost for 1st year to comply.
1002% increase in individuals impacted since 2018.
Mitigation: Implement new HIPAA requirements now.
6. South Korea passed AI Basic Act Businesskorea
Act ensures AI reliability with watermark.
Govt. aims for subordinate by 6/2025.
Prioritizing domestic over global regulation.
Focus is on AI issues domestically.
Investment also needed for growth.
Notice: Stay up to date on global AI regulatory trends.
Share this post