AI ChatBot Exposes 300,000 Records: Cyber Security Today for Monday, December 1, 2024 - podcast episode cover

AI ChatBot Exposes 300,000 Records: Cyber Security Today for Monday, December 1, 2024

Dec 02, 20249 min
--:--
--:--
Listen in podcast apps:
Metacast
Spotify
Youtube
RSS

Episode description

Cybersecurity Incidents in Healthcare and AI Exposures

In this episode, host Jim Love discusses recent cybersecurity incidents, including a major cyber attack on Wirral University Teaching Hospital in the UK, exposing healthcare vulnerabilities. An AI chatbot startup, WotNot, exposed 300,000 sensitive records online due to misconfigured storage. A novel phishing attack using corrupted Microsoft Word documents is also examined. The episode concludes with the takedown of the world's largest piracy network in Operation Takendown, underlining the international effort against cybercrime. Stay updated on the latest in cybersecurity and tech trends.

00:00 Introduction and Book Promotion
00:30 UK Hospital Cybersecurity Incident
03:11 AI Chatbot Data Exposure
05:05 Phishing Attack with Corrupted Word Documents
06:38 Operation Takendown: Largest Piracy Network Dismantled
08:39 Conclusion and Show Notes

Transcript

This week, our programs are brought to you by the book, Elissa, a tale of quantum kisses. Pre-release of my new book will be available on Amazon and Kindle early this week with full release starting on Friday, December the 13th.

This is cyber security today. I'm your host Jim Love. Wirral university teaching hospital in Northwest England has declared a major incident due to cyber security reasons leading to the cancellation of all outpatient appointments and a call for the public to only use its emergency department for genuine emergencies.

While the exact nature of the cybersecurity issue hasn't been disclosed, the Trust confirmed on November 27th that it had detected suspicious activity on its network and isolated its systems to prevent further impact. Staff are now operating manually using paper based processes with hospital staff describing the situation as really difficult due to the reliance on digital systems for records and results.

And while no timeline has been provided, the trust reassured patients that it is working to return normal operations as soon as possible. We checked their site Sunday evening as we recorded this, and there were no changes to their situation posted on the website. This is just another in a growing crisis in cybersecurity and healthcare, where disruptions can have life threatening consequences.

The unprotected storage bucket contained 346, 000 files and was accessible to anyone without authorization. Despite initial disclosure notifications sent to WotNot, the data remained exposed for over two months before being secured, and this is not some isolated little startup. WotNot provides AI powered chatbots to 3000 businesses across industries, such as insurance, finance, and healthcare.

You cannot paste on cybersecurity after AI software is developed. A newly discovered phishing campaign is leveraging corrupted Microsoft Word documents to bypass security software and trick users into revealing their credentials. The campaign, uncovered by cybersecurity firm Any. run, Targets employees with emails, mimicking payroll and HR communications attaching intentionally corrupted word files.

The QR code directs victims to a phishing website impersonating a Microsoft login page designed to steal user credentials. Some of these documents have been branded with logos of targeted organizations, adding an extra layer of deception. This technique exploits a gap in traditional antivirus and email security systems.

Law enforcement agencies across 10 countries have dismantled what is believed to be the world's largest piracy network in a sweeping operation known as Operation Takedown. The two year investigation culminated in over 100 raids, the seizure of 1. 65 million euros in cryptocurrency and the arrest of 11 individuals.

And I'm sure that everyone is committed to protection of intellectual property, but if you're that rare person who might be saying, eh, we should remind everyone. that pirated materials are a huge distributor of malware and other cyber threats. And, as Europol's investigation revealed, this piracy operation extended beyond copyright infringement to include money laundering and, yes, cybercrime.

com. We welcome your comments, tips, and the occasional bit of constructive criticism at editorial at technewsday. ca. I'm your host, Jim Love. Thanks for listening.

Transcript source: Provided by creator in RSS feed: download file
For the best experience, listen in Metacast app for iOS or Android
Open in Metacast