These days Large Language Models (LLMs) are nothing short of revolutionary, though they have been around since 1996 (ELIZA, developed by Joseph Weizenbaum, simulating a psychotherapist in conversation). It always astounds people how these neural network-powered marvels can understand and generate human language with astonishing fluency, opening doors to incredible possibilities. But this power comes at a price. I believe we’re facing a critical juncture: unless we address the security risks head-on, the potential of…

Hertz Corporation has confirmed a data breach that exposed sensitive customer data after attackers exploited a zero-day vulnerability in file transfer software provided by Cleo Communications. The breach affected the Hertz, Thrifty and Dollar brands and occurred in October and December 2024. It was disclosed on February 10 2025. The exposed data includes: Names Contact information Dates of birth Credit card details Driver’s license numbers Workers’ compensation claim data In a smaller number of cases,…

A Chinese cyber espionage tool initially made for intrusion into Linux systems has been used to spy on European organizations via Windows. On April 15, European cybersecurity company NVISO published a report with new findings on BRICKSTORM, a backdoor linked to the China-nexus cluster UNC5221 previously believed to target Linux vCenter servers. In the report, NVISO researchers shared that they discovered two new BRICKSTORM samples affecting Windows environments. These new samples have been used as…

Tenable®, the exposure management company, today announced that its Board of Directors has unanimously appointed Steve Vintz and Mark Thurmond as co-Chief Executive Officers on a permanent basis. Following an extensive search process that considered both internal and external candidates, the Board concluded that Vintz and Thurmond are best positioned to move the company forward. The decision reflects the Board’s confidence in the strength of their leadership following a successful interim period during which they…

Introduction The evolving landscape of healthcare cybersecurity is undergoing a major transformation with the Department of Health and Human Services’ (HHS) December 27, 2024, proposal to update the HIPAA Security Rule. This update, the most significant revision since 2013, reflects the growing complexity of healthcare cybersecurity, particularly as organizations face an average of 43 cyberattacks per year according to Ponemon Institute. Background and Context Originally designed to safeguard electronic protected health information (ePHI), the HIPAA Security…