Saturday, August 22, 2020

Reliance on ‘work from home’ without supplying security tools?

https://ciso.economictimes.indiatimes.com/news/the-average-cost-of-data-breach-in-india-in-2020-is-2m/77678031

The average cost of data breach in India in 2020 is $2M

The rapid technology shifts paired with new ways of accessing data creates more opportunities for security incidents if companies don’t ensure the right tools and policies are in place. During a time when businesses are expanding their digital footprint at an accelerated pace, while also battling a continuing talent shortage in the security industry, teams can be overwhelmed from securing more devices, systems and data than they are normally used to.

Additionally, a recent IBM study found that over half of surveyed employees new to working from home due to the pandemic have not been provided with new guidelines on how to handle customers’ personally identifiable information, despite the changing risk models associated with this shift.





Another huge segment of ‘work from home’

https://thehill.com/policy/cybersecurity/513022-hackers-eye-students-returning-to-virtual-classes-as-easy-targets?&web_view=true

Hackers eye students returning to virtual classes as easy targets

Universities and schools are scrambling to address threats such as a surge in malicious phishing emails, "Zoombombs" and other kinds of attacks. But with weakened budgets and students learning off campus, they are facing an uphill battle.

We are seeing a dramatic increase in phishing, this is fully expected, we knew it would happen with any major calamity,” Michael Tran Duff, chief privacy officer and chief information security officer (CISO) at Stanford University, said during a virtual event hosted by software company Proofpoint on Wednesday.





How would you account for it?

https://www.databreaches.net/ransomware-the-new-too-high-cost-of-doing-business/

Ransomware – The New (Too-High) Cost of Doing Business

Gemini Advisory has released a paper that makes the point that in 2020, it may be best to view ransomware incident costs as part of the cost of doing business. And with more people working from home these days, there is an increased risk of security incidents, as threat actors may be able to relatively easily compromise employees’ devices and thereby gain credentials to access corporate computers or systems. One recent study reports that two-thirds of Indian entities had suffered a data breach related to remote working.

For those who haven’t really paid enough attention to ransomware’s evolution, Gemini Advisory’s paper will give you a nice recap of the past few years and some real-world examples. It is not oriented to naming and describing all the various types of ransomware being deployed these days, but the paper’s main point is consistent with something I first heard from lawyers a few years ago — that although law enforcement has tried to dissuade victims from paying ransom, eventually it all boils down to a determination of how much business an entity will lose and whether the cost of lost business is higher than the cost of paying the ransom. And in calculating costs, we need to include the cost of lost life or health when the victim is a health care entity.

For more details and a fuller discussion of ransomware trends over the past few years, read Gemini Advisory’s article on their site.





Can we do better?

https://www.weforum.org/agenda/2020/08/towards-responsible-aiforall-in-india-artificial-intelligence-ethics/

Towards Responsible #AIforAll in India

Building further on the National Strategy on AI (NSAI) released in 2018, NITI Aayog is now working on outlining an approach towards realising the economic benefits of AI in a manner that is “responsible” to its users and broader society. The approach attempts to establish broad principles for design, development and deployment of AI in India – drawing on similar global initiatives but grounded in the Indian legal and regulatory context. The paper also explores means of operationalization of principles across the public sector, private sector, research and academia.

NITI Aayog, the think tank of the Government of India, is developing the approach to “Responsible #AIforAll” based on a large-scale stakeholder consultation facilitated by The Centre for the Fourth Industrial Revolution (C4IR) India. A Responsible AI working document was presented during a global consultation with AI ethics experts around the world on 21 July 2020 and subsequently released by NITI Aayog for wider public consultations.





Free is good.

https://www.fast.ai/2020/08/20/soumith-forward/

Forward from the 'Deep Learning for Coders' Book

To celebrate the release of fast.ai’s new course, book, and software libraries on August 21st, 2020, we’re making available the foreword that Soumith Chintala (the co-creator of PyTorch ) wrote for the book. You can buy the book from Amazon, or read it for free in Jupyter Notebook format.

Our online courses (all are free and have no ads):



No comments: