In a recent blog post, KnowBe4 reported that it has “uncovered an emerging advanced phishing campaign targeting Microsoft 365 users globally to steal their credentials. The attackers are wielding a powerful new tool that’s completely changing the game for cybercriminals—turning what used to be complex, technical phishing setups into simple one-click launches that can bypass
Lawmakers Warn Governors About Sharing Drivers’ Data with Federal Government
A group of 40 Democratic lawmakers have sent a letter to 19 state governors warning that they may be “inadvertently sharing drivers’ data with federal immigration authorities.”
According to the letter, the states “are providing U.S. Immigration and Customs Enforcement and other federal agencies ‘with frictionless, self-service access to the personal data of all of
Privacy Tip #467 – Employee Access of Malicious Website Causes Nevada Breach
Nevada suffered a ransomware attack in August 2025 that caused a significant disruption in services. The attackers deleted the state’s backups, encrypted virtual machines, and deployed ransomware that affected 60 state agencies, including the Departments of Health and Human Services, Public Safety, and Motor Vehicles.
Despite the significance of the attack, Nevada refused to pay
CISA + Partners Issue Microsoft Exchange Server Security Best Practices Guidance
Recently, the National Security Agency (NSA), Cybersecurity and Infrastructure Security Agency (CISA), Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC), and Canadian Centre for Cyber Security (Cyber Centre) issued guidance outlining security best practices for administrators on hardening on-premises Exchange servers.
The guidance emphasizes that “the threat to Exchange servers remains persistent…and should be
Privacy Tip #466 – Consumer Reports Evaluate the Security of Connected Devices
In today’s increasingly digital world, connected devices are an integral part of daily life. From smart speakers and thermostats to fitness trackers and home security cameras, these devices offer convenience and automation—but they also present new privacy and security challenges. Recognizing the growing concern among consumers, Consumer Reports (CR) has undertaken comprehensive testing to evaluate
NYDFS Issues Guidance on Third Party Risk Assessment + Mitigation
The New York Division of Financial Services (NYDFS) recently issued new cybersecurity guidance to assist covered entities in understanding and responding to the heightened risks posed by third party service providers (TPSP). NYDFS emphasized that covered entities must acknowledge and account for these risks and offer assistance in addressing them.
Based upon NYDFS’ enforcement activities
Privacy Tip #465 – Privacy Risks Associated with AI
The use of AI tools is revolutionizing our society. The efficiency it presents is like nothing we have ever experienced. That said, there are risks worth considering.
“AI poses risks including job loss, deepfakes, biased algorithms, privacy violations, weapons automation and social manipulation. Some experts and leaders are calling for stronger regulation and ethical
Deepfakes Problematic for Detection + Response
OpenAI recently published research summarizing how criminal and nation-state adversaries are using large language models (LLMs) to attack companies and create malware and phishing campaigns. In addition, the use of deepfakes has increased, including audio and video spoofs used for fraud campaigns.
Although “most organizations are aware of the danger,” they “lag behind in [implementing]
MA Office of Bar Counsel Pens Guidance for Lawyers Using AI
Continuing the weekly blog posts about lawyers using AI and getting in trouble, the Massachusetts Office of Bar Counsel recently issued an article entitled “Two Years of Fake Cases and the Courts are Ratcheting Up the Sanctions,” summarizing the problems encountered by courts when confronted with lawyers citing fake cases, and the
Privacy Tip #464 – Pitfalls of Dating a Bot
Dating sure has changed since I was in the market decades ago. Some of us can’t imagine online dating, let alone dating a bot. Get over it—it’s now reality.
According to Vantage Point, a counseling company located in Texas, it surveyed 1,012 adults and a whopping 28% of them admitted to having “at least one