Wednesday, June 29, 2022

Another example of “do as I say not as I do?” Or perhaps, “our policies don’t apply at the C level.”

https://www.cpomagazine.com/cyber-security/new-security-and-privacy-study-finds-c-suite-personal-devices-are-largely-unprotected-1-out-of-4-already-have-malware/

New Security and Privacy Study Finds C-Suite Personal Devices Are Largely Unprotected, 1 Out of 4 Already Have Malware

An eye-opening security and privacy study from BlackCloak finds that C-Suite personal devices are rarely secured properly, and a worrying amount are already compromised.

The study draws on a sample of over 1,000 C-Suite and board members that subscribe to BlackCloak’s digital executive protection platform; their personal devices and home network security were analyzed prior to onboarding. Among the most concerning findings are that nearly 1 out of 4 have open ports on their home networks, a little over 1 out of 4 already have malware on their personal devices, and almost 9 out of 10 have no security and privacy measures whatsoever installed on these devices.





Internet enabled scam. All it takes is a few unfortunates at the low end of the common sense scale to make the scammers rich.

https://www.jacksonville.com/story/business/real-estate/2022/06/28/jacksonville-florida-residents-unaware-scammers-list-multi-million-dollar-home-for-sale-zillow/7756109001/

Jacksonville residents unaware scammers listed their $2 million home on Zillow for $21,000

A Jacksonville home with an estimated value of $2.3 million was listed on Zillow for $21,000 less than a day ago, bringing the Northeast Florida housing market into this latest scam trend.

After the initial publication of this story, the listing was removed Tuesday afternoon. It had been up for almost 20 hours with over 1,000 views and about 100 saves.

The property on Pine Street in Avondale features a five-bedroom, five-bathroom home with more than 5,700 square feet for $21,000 — though the description notes "$21,000" is a typo and the "real" list price is "$22,000" for a cash-only, first-time homebuyer.

To top it all off, the listing required a $2,000 cash deposit via Zelle bank transfer in order to schedule a time — at least six days in advance — for "potential buyers" to view the home. A home tour also required a signature via email, photo of ID and email address, and each step of the process was emphasized as "non-negotiable."

The scammers' apparent goal is to rack up $2,000 deposits using photographs from a home's previous listing. The properties listed with this scam template are not for sale.





Do we (should we) care what remote employees look like?

https://www.businessinsider.com/people-applying-remote-tech-jobs-using-deepfakes-fbi-2022-6

More and more people are using deepfakes to apply for remote tech jobs, FBI says

More and more people are using deepfake technology to pose as someone else in interviews for remote jobs, the FBI said on Tuesday.

In its public announcement, the FBI said it has received an uptick in complaints about people superimposing videos, images, or audio recordings of another person onto themselves during live job interviews. The complaints were tied to remote tech roles that would have granted successful candidates access to sensitive data, including "customer PII (Personally Identifiable Information), financial data, corporate IT databases and/or proprietary information," the agency said.





Is this disinformation? To what end? (I’m not seeing the coverage I would expect if this was true.)

https://www.globaltimes.cn/page/202206/1269300.shtml

Exclusive: US plants Trojan horse programs in hundreds of important Chinese information systems; new cyber weapon targets China, Russia

On Wednesday China's official virus emergency response office and leading cybersecurity company disclosed a new vulnerability attack weapon platform deployed by the US National Security Agency (NSA), which cybersecurity experts believe is the main equipment of the NSA's computer network hacking operation team, and it targets the world with a focus on China and Russia.

US' move raised wide suspicions that the country might be preparing for a bigger cyberwar, experts noted.



(Related) This is what a real attack looks like. Note that the defenses are lacking…

https://www.cnn.com/2022/06/27/politics/lithuania-cyber-attack-pro-russian-group/index.html

Pro-Russia hackers claim responsibility for 'intense, ongoing' cyberattack against Lithuanian websites

… Monday's cyberattacks were aimed in part at Lithuania's Secure Data Transfer Network, a communications network for government officials that is built to withstand war and other crises, according to the defense ministry.

"Part of the Secure National Data Transfer Network users have been unable to access services, work is in progress to restore it to normal," Lithuania's National Cyber Security Centre (NKSC) said in a statement issued by the defense ministry.





Perhaps we could establish an AI entity to assume the guilt?

https://www.scientificamerican.com/article/who-is-liable-when-ai-kills/

Who Is Liable When AI Kills?

Who is responsible when AI harms someone?

A California jury may soon have to decide. In December 2019, a person driving a Tesla with an artificial intelligence driving system killed two people in Gardena in an accident. The Tesla driver faces several years in prison. In light of this and other incidents, both the National Highway Transportation Safety Administration (NHTSA) and National Transportation Safety Board are investigating Tesla crashes, and NHTSA has recently broadened its probe to explore how drivers interact with Tesla systems. On the state front, California is considering curtailing the use of Tesla autonomous driving features.

Our current liability system—our system to determine responsibility and payment for injuries—is completely unprepared for AI. Liability rules were designed for a time when humans caused the majority of mistakes or injuries. Thus, most liability frameworks place punishments on the end-user doctor, driver or other human who caused an injury. But with AI, errors may occur without any human input at all. [I think that is an invalid assumption. Bob] The liability system needs to adjust accordingly. Bad liability policy will harm patients, consumers and AI developers.





‘cause computers got rights!

https://www.gov.uk/government/news/artificial-intelligence-and-ip-copyright-and-patents

Artificial Intelligence and IP: copyright and patents

Following this consultation, the Government intends to amend copyright law to make it easier to analyse material for the purposes of machine learning, research and innovation. This will promote the use of AI technology, and wider “data mining” techniques, for the public good.



No comments: