DataBreachToday.com

No, But It Will Shift Their Focus to More Strategic and Creative Roles
Artificial intelligence is reshaping cybersecurity workflows, automating tasks and enhancing efficiency. But does that mean security professionals are at risk of being replaced? Not quite. AI is redefining roles, rather than eliminating them, to focus more on strategic thinking and problem-solving.

Legacy apps and medical devices continue to pose persistent and considerable risk to healthcare IT environments, and many organizations are still unaware of their prevalence in their settings, said Keith Fricke, partner and principal consultant at tw-Security, who discusses mitigation steps to take.

State privacy laws, such as Washington State's My Health My Data Act, could throw a curve ball in the use of certain consumer information for artificial intelligence and machine learning endeavors, said regulatory attorney Adam Greene of the law firm Davis Wright Tremaine.

Also: BianLian Ransomware Hackers Aren't Really Mailing You
This week, the U.S. sanctioned the Nemesis admin, Poco RAT spotted in Latin America, Apple challenged a British order to weaken encryption and the FBI warned against scam letters purportedly from BianLian. Also, a Nigerian tax scammer extradited to the U.S., a new botnet and a Webex vulnerability.

Trump's Former Cybersecurity Coordinator Says DOGE Firings Threaten Cybersecurity
Mass firings of federal probationary civil servants instigated by the Department of Government Efficiency will "destroy a pipeline of top talent," said Rob Joyce, a long-time National Security Agency official.

Armis' Purchase of Otorio Enhances On-Prem Security, Active Querying and Compliance
Armis' acquisition of Otorio for $120 million strengthens its on-premises operational technology security capabilities. The deal expands Armis' ability to serve air-gapped and compliance-driven industries while integrating secure remote access and active querying into its security platform.

Probe Into Microsoft's $13 Billion OpenAI Investment Launched in 2023
The U.K. antitrust regulator won't open an investigation into a partnership between computing giant Microsoft and artificial intelligence company OpenAI. U.K. Competition Market Authority concludes that there is no "relevant merger situation."

Provisional Agreement Tied to Ransomware Attack Affecting 2.2 Million Customers
American pharmacy chain giant Rite Aid reached a $6.8 million agreement to settle a data breach class action lawsuit, which includes a pledge to improve its cybersecurity practices. The breach involved a ransomware group stealing data pertaining to 2.2 million customers.

Also: Bybit Hackers Launder Stolen Ether
This week, Trump announced a crypto strategic reserve; Bybit hackers laundered stolen Ether; Iris Ramaya Au, ex-girlfriend of crypto fraudster, pleaded guilty to a tax charge; CoinDCX will manage crypto seized by India's enforcement directorate.

Off-Brand Android Devices Come Infected With a Trojan
A botnet infected more than 1 million off-brand Android devices manufactured in China, which reached consumers with a backdoor already installed. Scammers used the devices for programmatic ad fraud, click fraud and converting the devices into a residential proxy.

Weigh the Options for Open-Source and Vendor-Backed Solutions and Try Them Out
Open-source tools can be powerful, flexible and budget-friendly, but they are not always the right choice. Understanding their strengths, weaknesses and best use cases will help you decide when to use them and when to consider a commercial alternative.

Quantum computing could bring the next technology "revolution" in healthcare, but organizations will face critical cybersecurity issues when quantum becomes a reality, said attorney Lee Kim, senior principal of cybersecurity and privacy at the Healthcare Information and Management Systems Society.

So far, medical devices affected in ransomware attacks have mostly been a casualty of IT networks being taken offline. But the potential nightmare scenario is a targeted device attack in which cybercriminals threaten to kill patients, said Dr. Eric Liederman, CEO of consulting firm CyberSolutionsMD.

Microsoft Sees Cyberespionage Group Lifting API Keys and Credentials for Customers
A prolific cyberespionage group tied to Beijing appears to have increased its targeting of widely used IT tools and service providers. Microsoft said the group's tactics now include stealing API keys and credentials from providers to gain access to providers' downstream customers' infrastructure.

iSoon CEO, COO and Sales Director Among 10 Indicted for Cyberespionage, Wire Fraud
A U.S. federal grand jury in Manhattan indicted the senior leadership of a Chinese private sector hacking contractor iSoon for supporting Beijing cyberespionage operations roughly a year after internal documents from the firm leaked online.

CFO Manish Narula Promoted to CEO as Fate of Proposed Trustwave Merger Gets Murky
One of the messiest public spats at a cybersecurity company in recent memory has led to the resignation of its chief executive officer. Erin Gan walked away from Cybereason after seemingly coming up short in his battle to wrestle control of the endpoint security vendor away from a pair of investors.

Prosecutors Accuse Yin Kecheng of 2024 Department of Treasury Hacking
U.S. federal authorities Tuesday seized digital infrastructure traced to two Shanghai hackers operating on behalf of the Chinese government as "Silk Typhoon," responsible for a late 2024 incursion into the Department of Treasury.

The Health Sector Coordinating Council is kicking off a health sector mapping initiative aimed at helping the ecosystem avoid massive disruptions in the event of major cyber incidents, said Greg Garcia, executive director for cybersecurity at the Health Sector Coordinating Council.

The majority of significant attacks hitting the health sector involve unpatched vulnerabilities dating back years, a situation cybercriminals are more easily and swiftly able to exploit using AI-based tools, said Health Information Sharing and Analysis Center President and CEO Denise Anderson.