CloudCast Cybersecurity Headlines for December 18, 2024

From the Skyhigh Studios at Skyhigh Security, I’m Scott Schlee, it’s Wednesday, December 18th, 2024, and these are your cybersecurity headlines. Headlines this week: Microsoft’s AI Tool Privacy Concerns North Korean IT Worker Indictments Mysterious Drone Sightings Sanctions on Chinese Hackers Apple Users Urged to Update Devices SEC Cybersecurity Enforcement UK's Cybersecurity Concerns Game Freak Data Breach Geico and Travelers Fined for Data Breaches Krispy Kreme Cyberattack Thank you again for listening to Skyhigh Cloudcast. This is our last episode of CloudCast for 2024. We sincerely hope you have a wonderful holiday break. We'll be back in January and hope you will be too. If you've enjoyed this episode, be sure to subscribe on your favorite platform so you never miss an update. If you like the show, please leave us a review. It helps others find the podcast. For more information about Skyhigh Security or CloudCast, please visit skyhighsecurity.com. Sources: Wired - Microsoft’s AI Tool Privacy Concerns and Mysterious Drone Sightings The Times (UK) - North Korean IT Worker Indictments and UK's Cybersecurity Concerns Reuters - Sanctions on Chinese Hackers and SEC Cybersecurity Enforcement New York Post - Apple Users Urged to Update Devices The Scottish Sun - Game Freak Data Breach Wall Street Journal (WSJ) - Geico and Travelers Fined for Data Breaches MarketWatch - Krispy Kreme Cyberattack ----------- CloudCast is hosted by Skyhigh Security’s very own Digital Experience Manager, Scott Schlee. Scott’s engaging demeanor and wit, backed by over 20 years in digital media production and web development, has led to successful collaborations with top-tier brands. His experience includes hosting and producing a wide range of podcasts and videos. Scott has been recognized for his outstanding work, including an award-winning digital short and a Webby Awards nomination for Viral Marketing (Branded). Beyond his professional achievements, Scott’s personal journey as a decade-long pancreatic cancer survivor has led him to share his story with the U.S. Congress and other organizations as an advocate for increased cancer research funding. Transcript From the Skyhigh Studios at Skyhigh Security, I’m Scott Schlee, it’s Wednesday, December 4th, 2024, and these are your cybersecurity headlines. Microsoft’s AI Tool Privacy Concerns: Microsoft's AI tool, Recall, has been found capturing sensitive data, including credit card and Social Security numbers, every five seconds. Despite safeguards, this raises significant privacy and security concerns. North Korean IT Worker Indictments: Fourteen North Koreans have been indicted for posing as IT workers to fund nuclear programs. They infiltrated American and Western IT companies, using sophisticated fake identities and VPNs to mimic legitimate employees. This highlights the geopolitical cyber risks posed by state-sponsored actors. Mysterious Drone Sightings: Unexplained drone activity in New Jersey and neighboring states has triggered federal investigations into potential security threats. The drones have caused concern among authorities, leading to increased scrutiny and efforts to identify their origin and purpose. Sanctions on Chinese Hackers: The U.S. has sanctioned Chinese cybersecurity company Sichuan Silence Information Technology for deploying ransomware that posed significant risks to human life. In April 2020, the company used malicious software on over 80,000 firewalls globally, including critical infrastructure, leading to data theft and network disruptions. Apple Users Urged to Update Devices: Cybersecurity experts are urging Apple users to update their iPhones to iOS 18 to avoid a data-stealing bug capable of bypassing safeguards. Concerns over Apple's AI program have led to hesitancy in updating, leaving devices vulnerable to attackers who can access sensitive data without user n...