In the enterprise security news, new startup funding, what happened to the cybersecurity skills shortage?, tools for playing with local GenAI models, CVE assignment drama, a SIEM-agnostic approach to detection engineering, pitch for charity, a lost dog that doesn’t want to be found. All that and more, on this episode of Enterprise Security Weekly.
Washington state-based diagnostic testing services provider Laboratory Services Cooperative, which mainly caters to Planned Parenthood centers in 31 states, had information from 1.6 million individuals exfiltrated following a data breach in October, reports Security Affairs.
Dutch information services firm Wolters Kluwer which counts American Airlines, BP, Boeing, and other Fortune 500 firms among its clients had its systems claimed to have been compromised in a cyberattack, which allegedly resulted in the theft of personal data, according to Cybernews.
The U.S. is moving to better curtail China, Russia, Iran, and other nation-state adversaries' utilization of commercial backdoors to pilfer Americans' highly sensitive data with the new Data Security Program, which took effect on Tuesday, Cybernews reports.
Ninety percent of 40 widely known genetic testing services firms, including 23andMe, Ancestry, and MyHeritage, had received a C grade at most for their cybersecurity efforts, indicating the pervasiveness of poor cybersecurity practices across the DNA services industry, Cybernews reports.
U.S. Treasury Secretary Scott Bessent has been urged by Senate Health, Education, Labor, and Pensions Committee Chair Bill Cassidy, R-La., to activate its Committee on Foreign Investment in the U.S. to thwart China and other nation-state adversaries from obtaining over 15 million Americans' genetic data upon the sale of embattled DNA testing services company 23andMe.
GrubHub had 70 million lines of data from almost 17 million accounts touted to have been compromised in an attack against the major U.S. online food delivery service in February, according to Cybernews.
Cybernews reports that German multinational vehicle tracking service provider NexOpt had almost 1 TB of sensitive information from more than 300,000 passenger and commercial vehicles exposed as a result of an unprotected Kibana instance, which was already secured last month.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.