Scott Ikeda

2 weeks ago | cpomagazine.com | Scott Ikeda

Verizon’s annual Data Breach Investigations Report (DBIR) is out, and the headline finding is another surge in vulnerability exploitation as a leading initial access method in cyber attacks. Though not as big as the 180% spike seen in 2024, the growth is substantial and nearly catches exploits up to credential abuse as the leading initial entry method. The researchers think that this newer and smaller spike may be fed to some degree by a more general increase in incident reporting.

3 weeks ago | cpomagazine.com | Scott Ikeda

While Google has been signalling for at least some months that it was planning to remain flexible on the use of third party cookies in Chrome, an April 22 blog post seems to indicate the central purpose of the “Privacy Sandbox” project has now been scuttled.

3 weeks ago | cpomagazine.com | Scott Ikeda

The Irish Data Protection Commission (DPC) has announced that it will be investigating X’s use of the platform’s posts, replies and user information as AI training data for its embedded “Grok” feature. A key point will be X’s default opt-in of all users, something that may run afoul of General Data Protection Regulation (GDPR) personal information consent requirements. Like many international tech giants, X keeps its EU headquarters in Dublin.

3 weeks ago | cpomagazine.com | Scott Ikeda

A bipartisan bill has been introduced to the Senate that would extend the terms of the Cybersecurity Information Sharing Act of 2015, widely seen as a vital national cybersecurity law. The current terms are set to expire in September of this year. The act creates a partnership between the Department of Homeland Security (DHS) and private industry partners that promote sharing of software vulnerabilities, malware, or malicious IP addresses.

3 weeks ago | cpomagazine.com | Scott Ikeda

Reports indicate that Chinese officials admitted to the string of cyber attacks by Volt Typhoon that were aimed primarily at US infrastructure, though it is not a public admission. The Chinese government usually responds to any linking of cyber attacks to its state-sponsored APT groups with a fierce denial and deflection.