In the enterprise security news,
Change Healthcare’s HIPAA fine is vanishingly small
How worried should we be about the threat of AI models?
What about the threat of DeepSeek?
And the threat of employees entering sensitive data into GenAI prompts?
The myth of trillion-dollar cybercrime losses are alive and well!
Kagi Privacy Pass gives you the b...
The U.S. Department of Health and Human Services has imposed a $1.5 million penalty on American eyewear manufacturer and retailer Warby Parker due to its failure to properly secure its systems from a credential stuffing attack in 2018 that compromised almost 200,000 individuals' protected health information, reports The Record, a news site by cybersecurity firm Recorded Future.
The group, led by Rep. John Joyce, R-Pa, aims to create a national privacy standard to protect consumer rights and maintain US leadership in digital technology, including artificial intelligence.
Additional details regarding the nature of the incident — which also resulted in the takedown of the firm's MyGenea app for cycle tracking and fertility data viewing — and the types of information that may have been compromised have not been provided.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.