Leveraging Knowledge to Manage Your Data Risks
A group of 40 Democratic lawmakers have sent a letter to 19 state governors warning that they may be “inadvertently sharing drivers’ data with federal immigration authorities.”
According to the letter, the states “are providing U.S. Immigration and Customs Enforcement and other federal agencies ‘with frictionless, self-service access to the personal data of all of…
The latest edition of the AI Index Report from Stanford University’s Human-Centered Artificial Intelligence Center provides a comprehensive look at artificial intelligence (AI) policy, regulation, and diversity trends across the globe.
The number of AI-related regulations enacted by U.S. federal agencies like the FDA, EPA, and FCC has skyrocketed from just 1 in 2016 to…
On October 30, 2023, the Biden Administration issued its “Executive Order on the Safe, Secure, and Trustworthy Development and use of Artificial Intelligence.” The EO outlines how Artificial Intelligence (AI) “holds extraordinary potential for both promise and peril.” As the Administration “places the highest urgency on governing the development and use of AI safely and…
It is estimated that some 80 million Americans and more than one billion people use TikTok. It is well known that TikTok has a direct connection to the Chinese Communist Party, which is a foreign adversary of the U.S. This week, South Dakota Governor Kristi Noem signed an executive order banning all state workers or…
In response to concerns raised by employers and to protect worker privacy, the Occupational Health & Safety Administration (OSHA) recently amended its recordkeeping regulations to eliminate the requirement that larger employers submit certain information electronically. The final rule rescinds the mandate that establishments with 250 or more employees had to electronically submit information from OSHA…
Just days after the summit between the U.S. and North Korea, the Federal Bureau of Investigation (FBI) and the Department of Homeland Security issued a warning about a malicious malware, a Trojan malware variant known as “TYPEFRAME,” has been dubbed HIDDEN COBRA, which is believed to be backed by the North Korean government and is…
A new report issued by the National Academies of Sciences, Engineering and Medicine says that the Federal Aviation Administration (FAA) should revise its approach for safety risk assessments for the technology associated with implementation of drones into the national airspace. Specifically, the report says that the FAA’s overly conservative approach to safety risk assessments can…
The U.S. Attorney’s Office of the District of Connecticut has announced the creation of a Connecticut Cyber Task Force (“CCTF”) in partnership with the FBI, DEA, Secret Service, Homeland Security, IRS, Connecticut State Police, and 11 local police departments from throughout Connecticut as well as other federal authorities. The CCTF’s initial focus will be twofold: (1) to “target criminal activity on the dark web, notably the illicit acquisition and distribution of fentanyl and other dangerous drugs that are the cause of tens of thousands of overdose deaths annually” and (2) “to identify and disrupt criminal organizations that use computer intrusions to defraud companies of their money and information.”
Continue Reading Connecticut Cyber Task Force Announced
The U.S. Department of Homeland Security (DHS) recently issued a warning that Smiths Medical Medfusion 4000 wireless syringe infusion pumps contain a security vulnerability that can be exploited by hackers to alter the performance of the medical devices.
The devices are used to infuse small doses of medication to patients and are used in acute care settings. Eight different vulnerabilities have been identified in pump versions 1.1, 1.5 and 1.6. According to DHS, hackers can exploit the vulnerabilities remotely, which can cause harm to patients, and can be used to gain access to other healthcare information technology systems if they are not segmented on the healthcare organization’s network.
Smiths Medical is working with DHS to resolve the flaws in its new version, which will be released in January of 2018. Until then, Smiths recommends the following:
Continue Reading Security Vulnerabilities Identified in Wireless Syringe Infusion Pumps
Marty Edwards, head of the Department of Homeland Security’s Industrial Control Systems Cyber Emergency Response Team (ICS-CERT), recently warned attendees at a conference that ICS-CERT, (which assists U.S. businesses in investigating suspected cyber-attacks on industrial control and corporate systems), has seen an increase in attacks to industrial control networks over the past year.
Industrial control…
