Dark Reading Daily -- August 26, 2023

Vendors Training AI With Customer Data is an Enterprise Risk

While Zoom has scrapped plans to harvest customer content for use in its AI and ML models, the incident should raise concerns for enterprises and consumers a like.

NIST Publishes First Draft Standards for Post-Quantum Cryptography

Publication of the first draft PQC standards opens a 90-day period for public comment and paves the way for interoperability testing.

eSentire Labs Open Sources Project to Monitor LLMs

The eSentire LLM Gateway provides monitoring and governance of ChatGPT and other Large Language Models being used in the organization.

'Cuba' Ransomware Group Uses Every Trick in the Book

How a Russian cybercrime group using Cuban Revolution references and iconography has emerged as one of the most profitable ransomware operations.

Prelude Security Tackles Continuous Security Testing in Containers

Probes are tiny processes which run inside containers and scan applications for vulnerabilities.

New NCUA Rule Requires Credit Unions to Report Cyberattacks Within 3 Days

The updated cybersecurity reporting rule from the National Credit Union Administration takes effect Sept. 1.

Name That Edge Toon: How Now?

Come up with a clever caption, and our panel of experts will reward the winner with a $25 Amazon gift card.

Software Makers May Face Greater Liability in Wake of MOVEit Lawsuit

Makers of vulnerable apps that are exploited in wide-scale supply chain attacks need to improve software security or face steep fines and settlement fees.

More Than Half of Browser Extensions Pose Security Risks

Spin.AI's risk assessment of some 300,000 browser extensions found 51% had overly permissive access and could execute potentially malicious behaviors.

Controversial Cybercrime Law Passes in Jordan

The increase in cyberattacks against the Middle East in the last few years has pressured Jordan and other nations to better secure their infrastructures.

8 AI Risk and Resilience Firms CISOs Should Track

Check out our list of emerging firms that are building technology and services to assess the risk posture of AI systems and ML models.

7 Reasons People Don't Understand What You Tell Them

No matter how clearly security professionals express themselves, not everyone thinks the same way. Here's why communication can go wrong.

The Hard Realities of Setting AI Risk Policy

It's time to get real about what it takes to set and enforce cybersecurity and resilience standards for AI risk management in the enterprise.

What Ransomware Groups Look for in Enterprise Victims