|
FRIDAY, JAN. 24, 2025
|
DOJ continues to go after remote North Korean IT workers. SonicWall warns about a bad bug. And Safe Mode takes a look at AI regulation's future in 2025. This is CyberScoop for Friday, January 24.
|
|
|
|
Another blow to North Korea's work schemes
The Department of Justice has indicted five individuals, including two North Korean nationals, for their roles in a scheme to fraudulently obtain remote work credentials from American companies, generating revenue for North Korea. This action follows recent sanctions from the Treasury Department and is part of ongoing efforts to disrupt North Korea’s cyber-enabled sanctions evasion activities, which aim to support the regime's priorities. The scheme involved using forged and stolen identities to gain employment with U.S. firms, and the collected payments were funneled through a Chinese bank account Those involved are facing charges including conspiracy to commit wire fraud and money laundering. Matt Bracken has more.
|
|
|
|
Patch your SonicWall appliances
A critical vulnerability in SonicWall’s Secure Mobile Access (SMA) 1000 series appliances, identified as CVE-2025-23006, allows remote attackers to execute arbitrary OS commands, heightening concerns among cybersecurity experts globally. This vulnerability allows remote, unauthenticated attackers to execute arbitrary commands, particularly affecting the Appliance Management Console (AMC) and Central Management Console (CMC). SonicWall has urged immediate software updates to address the issue, emphasizing a severity rating of 9.8, with approximately 2,380 devices currently at risk according to Shodan. Greg Otto has more.
|
|
|
|
The latest Safe Mode
In this week's episode, Greg talks with Exabeam’s Gabrielle Hempel about the complex terrain of AI regulation at both the federal and state levels, offering a deep dive into the legislative challenges, and the balancing act of fostering innovation while protecting public interests. They also reflect on how public interaction with AI systems is shaping legislative efforts, aiming to provide a comprehensive exploration of the regulatory landscape and its implications for businesses. Listen here.
|
|
|
AITalks | Apr 24, 2025
Gain invaluable insights and connect with industry peers at AITalks. Explore the latest AI trends, best practices, and real-world use cases. Learn how to overcome challenges and maximize the benefits of AI for your organization. Register today!
|
|
|