Lakshmi Narayanan Narasimhan

Advanced Cloud Strategies for Privacy and Security by Vaishnavi Naste via DevOps Online ([Global] Data Breach) URL: https://ift.tt/5d6YAkm #NDCA2024 Speaker Edition With less than 2 months until The National DevOps Conference and Awards, we interviewed #NDCA speaker, Harbinder Singh. The conference & Awards takes place in London on the 22nd and 23rd of October 2024. To exhibit your products at the event, please get in touch here.   Author: Harbinder Singh, Head of Cloud and Security and a speaker at the National DevOps Conference and Awards In today’s digital age, where cloud computing drives business innovation, protecting sensitive data has never been more critical. While the cloud offers unparalleled scalability and flexibility, it also presents significant privacy and security challenges. Organisations must balance the openness and accessibility of cloud environments with stringent privacy controls to safeguard their most valuable assets. My upcoming conference presentation will explore strategies to achieve this balance, focusing on tools and practices like IAM policies, Alerts and AWS capabilities to make it difficult for malicious actors.    Enforcing Security with IAM Policies and HTTPS A fundamental aspect of securing your cloud environment is the implementation of robust Identity and Access Management (IAM) policies. These policies allow you to control who can access your resources and under what conditions. A critical strategy is enforcing HTTPS for all communications with your cloud services, ensuring that data in transit is encrypted and protected from eavesdropping or man-in-the-middle attacks. For example, you can create an IAM policy to deny non-HTTPS requests to S3 buckets, ensuring all data exchanges are secure. This policy can be extended to other AWS services, providing comprehensive encryption across your cloud infrastructure. Securing Communication with VPC Endpoints, Cloud Map and Service Discovery Maintaining privacy within your cloud environment requires securing the flow of data. Virtual Private Cloud (VPC) endpoints and endpoint services enable private communication between resources within a VPC and AWS services without exposing data to the public internet. VPC endpoints allow you to create a private connection between your VPC and services like S3 or DynamoDB, ensuring that data remains within your VPC’s secure boundaries. VPC endpoint services, on the other hand, allow you to create private endpoints for custom applications, securely sharing services within your infrastructure or with partners. In dynamic cloud environments, where resources frequently scale and move, keeping track of service locations can be challenging. AWS Cloud Map provides service discovery by dynamically managing the location of cloud resources and ensuring secure communication between services. By integrating AWS Cloud Map with IAM policies and VPC endpoints, you can ensure that service discovery within your cloud ...

Indian #healthcare sector faces 6,953 #cyberattacks weekly, outpacing global rates: #CheckPoint threat intelligence report - https://bit.ly/3zmIOPI | #technews #technology #futuretech #AI #IT #Cloud #security #healthtech

Ethics, privacy and the perils of 'deepfake geography' by Dr Fahimeh Abedi via Pursuit: All articles ([Global] Data Breach) URL: https://ift.tt/85DUeQN The combination of artificial intelligence (AI) and location intelligence has given rise to a revolutionary technology known as geospatial artificial intelligence or GeoAI. The technology brings together AI techniques like machine learning and deep learning with geospatial technologies including Geographic Information Systems (GIS), remote sensing and spatial data analysis. GeoAI is transforming decision-making across various sectors including urban planning, disaster management, healthcare and defence by offering innovative solutions to complex spatial challenges. Geospatial AI is transforming decision-making across various sectors including disaster management. Picture: Getty Images For instance, in disaster management, GeoAI enables more timely damage assessment and enhances disaster response and defence operations through improved situational awareness and predictive modelling.   In healthcare, GeoAI tracks population trends and disease outbreaks, including the COVID-19 pandemic, where it identified hotspots and guided resource allocation. However, as GeoAI technology advances, serious ethical concerns and risks are brought to the forefront, and these must be addressed. GeoAI privacy and safety issues These risks were highlighted in several recent incidents. In April 2024, the Washington Communications Commission imposed nearly US$200 million in fines on wireless carriers for illegally sharing customer location data. Sciences & Technology We need to keep Big Tech in check A data breach at Christie’s Auction House exposed the GPS locations of artworks owned by wealthy collectors. This breach went beyond merely disclosing street addresses, it unveiled sensitive private details, severely undermining client privacy and damaging trust. German cybersecurity experts Martin Tschirsich and André Zilch uncovered a vulnerability in Christie’s cybersecurity protocols that exposed GPS data so precise it could determine the exact location of a photo, and consequently, the storage site of hundreds of consigned artworks on the auction house’s website. They noted that around 10 per cent of the uploaded images contained exact GPS coordinates. A data breach at Christie’s auction house exposed the GPS locations of artworks. Picture: Portable Antiquities Scheme from London/ WikiCommons The safety and reliability of GeoAI technologies are crucial, especially in vehicles. This was starkly highlighted by a recent incident in Kerala, India where a Google Maps mishap directed a car into a river, resulting in a dramatic rescue as two men narrowly escaped. As autonomous vehicle technology advances, ensuring these systems’ safety and reliability becomes increasingly important. According to Forbes, 93 per cent of Americans have concerns...

Harikrishna Prabhu, COO, TechnoBind Solutions Pvt Ltd in his latest #article featured in SmartStateIndia talks about the crucial role of continuous #ExposureManagement platforms in #IncidentResponse acceleration. He explains how the speed and effectiveness of threat hunting and incident response are critical to maintaining robust #cybersecurity defenses for organizations. . Read the article in detail at: https://lnkd.in/grcu3saV . Aman Jain Rakesh Singh Rahul Bhardwaj Natasha jiwani Reetesh Mishra Nami Agrawal . Follow us at SmartStateIndia . #smartstateindia #DataSecurity #cybersecurity #ThreatExposure #SkyboxCTEM #ctem

AI is not only transforming traditional attack vectors but also playing a vital role in neutralising potential dangers. Among the most in-demand skills in cybersecurity are security architects, security engineers, incident responders, and fraud analysts. #cybersecurity #AI #technologynews #ETTelecom

Planned Parenthood Cyberattack: How Bad Actors Are Targeting Medical Institutions by Samarth Mishra via CySecurity News - Latest Information Security and Hacking Incidents ([Global] Data Breach) URL: https://ift.tt/AbQD10d The healthcare sector has become an increasingly attractive target for cybercriminals. The latest victim in this alarming trend is Planned Parenthood of Montana, which recently fell prey to a ransomware attack by a group known as RansomHub. This incident not only underscores the vulnerabilities within healthcare organizations but also highlights the broader implications of such breaches on public health and safety. About the Attack On September 1, 2024, Planned Parenthood of Montana announced that it had been targeted by a ransomware attack. The hackers, identified as the RansomHub group, claimed to have stolen approximately 93GB of sensitive data. They are now threatening to release this data unless a ransom is paid by September 11. The stolen data reportedly includes patient records, financial information, and internal communications, making this breach particularly concerning. The Bigger Picture The timing of this attack is especially significant. It comes at a moment when abortion rights advocates in Montana have successfully gathered enough signatures to put the issue on the ballot in November. This has raised suspicions that the attack may have political motivations, aiming to influence public opinion and voter behavior. Regardless of the hackers’ intentions, the breach has created a climate of fear and uncertainty among patients and staff alike. What is the damage? The immediate impact of the breach is multifaceted. For patients, the exposure of sensitive medical information can lead to severe emotional distress and potential discrimination. For the organization, the financial and reputational damage can be devastating. Planned Parenthood of Montana now faces the daunting task of securing its systems, notifying affected individuals, and potentially paying a hefty ransom to prevent the release of the stolen data. How Can Organizations Stay Safe? 1. Invest in Advanced Security Technologies Healthcare organizations must invest in cutting-edge security technologies such as artificial intelligence (AI) and machine learning (ML) to detect and respond to threats in real-time. These technologies can analyze vast amounts of data to identify unusual patterns and potential security breaches before they cause significant damage. 2. Implement Multi-Factor Authentication (MFA) Multi-factor authentication adds an extra layer of security by requiring users to provide two or more verification factors to gain access to systems and data. This can significantly reduce the risk of unauthorized access, even if login credentials are compromised. 3. Data Encryption Encrypting sensitive data ensures that even if it is stolen, it cannot be easily read or used by unauthorized individuals. Healthcare organizations...

Excited to share that Takaharu Ogasa will be presenting "My Threat Modeling Journey" at OWASP AppSec Days India 2024! 🚀 Join us as Takaharu shares insights and lessons from his unique journey in threat modeling, offering practical tips and strategies for improving application security. Don't miss this inspiring session! #OWASP #AppSecDaysIndia #ThreatModeling #Cybersecurity #AppSec #SecurityJourney