Sponsored by

What Will Your Retirement Look Like?

Retirement looks different for everyone. What it costs, where the income comes from, how long it needs to last. Those answers are specific to you.

The Definitive Guide to Retirement Income helps investors with $1,000,000 or more work through the questions that matter and build a plan around the answers.

Download your free guide to start turning a savings number into an actual retirement income strategy.

Supply Chain
Snowflake customers hit in data theft attacks after SaaS integrator breach

Bad actors recently stole private information from several companies by attacking a partner that helps manage their data.

The hackers did not attack the main data company directly but instead found a way in through a smaller firm that has special access.

A Chain Reaction of Theft

Hackers stole login keys from a service provider that many big businesses trust to set up their systems.

By taking these keys, the attackers could walk right into the private data rooms of many different customers at once.

This type of attack is very dangerous because it uses a trusted helper to get around normal security guards.

Protecting the Supply Chain

Security experts found that the stolen data was put up for sale on the dark web shortly after the hit.

Companies are being told to change their passwords and use better locks to keep hackers out.

It is no longer enough to just lock your own front door if you give a spare key to a service firm that does not have good security.

This event shows that a single weak link in a chain of business partners can lead to a massive loss of private information for everyone involved.

Non-Human Identities
Governance Gaps Emerge as AI Agents Drive 76% Increase in NHIs

Companies are rushing to use AI in their daily work, but they are leaving many digital doors unlocked.

A new study found that almost all businesses are failing to keep track of the secret keys used by their automated tools.

The Rise of Machine Identities

The number of non-human accounts, like computer bots and AI agents, is growing extremely fast.

Over 70 percent of businesses now use AI tools that need their own special passwords to function.

Many of these bots have high-level access to sensitive files, but they are not managed as carefully as human workers.

Missing Safety Rules

Most companies admit they do not update their digital keys often because they are afraid of breaking their systems.

Because AI agents can act on their own and move very quickly, they can cause a lot of damage if they are hacked.

Experts worry that a major data leak will happen soon because these tools lack proper oversight.

Businesses must start using better automated safety tools to manage their growing army of AI agents before a serious breach occurs.

Broken Authentication
When attackers already have the keys, MFA is just another door to open

Adding a second lock to your digital door does not always keep hackers out, especially if they have already stolen your keys.

Experts warn that old-fashioned security codes and phone alerts are failing to stop modern attacks that trick users into letting bad actors in.

The Limit of Phone Alerts

Many people believe that getting a code on their phone or a push notification makes them safe.

However, hackers now use clever tricks to sit between a user and the real website, catching these codes as they are sent.

If a user is tired or confused, they might approve a fake request just to make the annoying alerts stop, giving the hacker full access.

Why Human Checks Fail

Training people to spot fake websites is good, but it is not enough to stop the newest types of digital theft.

Current systems often prove a device is present, but they do not prove that the actual owner is the one using it.

Newer security tools now use fingerprint checks and special math to make sure the right person is there and the website is real.

The best way to stay safe is to use systems that check for a real person and a real website at the same time without relying on a user to make a guess.

Relying on human memory and judgment is the weakest part of modern security, and bad actors are getting much better at exploiting it every day.

Healthcare Ransomware
Dutch hospitals face disruptions after ransomware attack on software provider ChipSoft

Many hospitals in the Netherlands are facing big problems after hackers attacked the company that manages their medical records.

The software firm had to shut down its digital tools to stop the attack from spreading to more places.

Hospitals Lose Access

About 70 percent of Dutch hospitals use this system to keep track of patient info and talk to doctors.

When the attack happened, many hospitals could not use their patient portals or mobile apps.

Some medical centers even chose to cut their own computer connections to stay safe while the mess is cleaned up.

Moving to Old Methods

Because the digital systems are down, staff have to spend more time on the phone to share information.

Doctors are still able to treat patients, but they have to work much harder to get the details they need.

The company says it cannot be sure yet if any private patient data was stolen during the hit.

This attack shows how a problem at one big software firm can cause massive trouble for many hospitals at the same time.

Third-Party Risk
OpenAI identifies security issue involving third-party tool, says user data was not accessed

A major AI company recently found a problem with a helper tool that its computer programmers use.

The issue started when bad actors attacked a common piece of software that many different companies use to build their apps.

Trouble with Trusted Tools

Hackers managed to sneak some bad code into a popular library that helps different apps talk to each other.

Because this company used that tool, the bad code tried to steal the digital keys they use to prove their Mac apps are real.

Even though the bad code got inside, the company says no personal chat data or private information was actually taken.

Keeping Mac Users Safe

As a fix, the firm is now making everyone who uses their app on a Mac download a new version.

They are also changing their digital security stamps to make sure hackers cannot pretend to be them in the future.

The old versions of the app will stop working soon to make sure everyone stays on the safest path.

Staying safe online means constantly checking the smaller tools used to build big apps, as even a small mistake in a helper tool can lead to a big scare.

Service Disruption
Ransomware attack on Vivaticket disrupts Louvre and major European museums

A famous ticketing company that helps thousands of groups around the world was recently hit by a ransomware attack.

The hit caused major trouble for many of the most famous buildings and museums in Europe, making it hard for people to book visits online.

Museums Face Shutdowns

Around 3,500 museums and historic sites had their ticket systems stop working because of this attack.

Famous places like the Louvre and the Eiffel Tower were among those that had problems with their online bookings.

The group behind the attack claims they stole private files and are now threatening to share them with the public.

Stolen Personal Info

The hackers say they took names, email addresses, and even the history of what tickets people bought in the past.

The ticketing firm says that banking and credit card info seems to be safe for now, but they are still checking everything carefully.

Museums are now telling their customers to be on the lookout for strange emails or messages that might be trying to trick them.

When a single company manages tickets for thousands of locations, a single attack can cause a massive ripple of problems across the globe.

Stay safe!

Eyal Estrin, Author @ CSec Weekly