Privacy nightmare or useful tool?

CyberWire Daily

N2K Networks, Inc.

Daily News, Tech News, News, Technology

4.6 • 1K Ratings

🗓️ 22 May 2024

⏱️ 26 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

Some say Microsoft’s Recall should be. A breach of a Texas healthcare provided affects over four hundred thousand. Police in the Philippines shut down services following a breach. Ivanti patches multiple products. GitHub fixes a critical authentication bypass vulnerability. Researchers discover critical vulnerabilities in Honeywell’s ControlEdge Unit Operations Controller. The DoD releases their Cybersecurity Reciprocity Playbook. Hackers leak a database with millions of Americans’ criminal records. Mastercard speeds fraud detection with AI. On our Learning Layer segment, host Sam Meisenberg and Joe Carrigan continue their discussion of Joe's ISC2 CISSP certification journey, diving into Domain 5: Identity and Access Management. Remembering a computing visionary. Our 2024 N2K CyberWire Audience Survey is underway, make your voice heard and get in the running for a $100 Amazon gift card. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. Learning Layer On our Learning Layer segment, host Sam Meisenberg and Joe Carrigan continue their discussion of Joe's ISC2 CISSP certification journey using N2K’s comprehensive CISSP training course, CISSP practice test, and CISSP practice labs. Joe and Sam dive into Domain 5: Identity and Access Management (IAM) and tackle a question together about biometric configuration. Try the question yourself before listening to the discussion! You are configuring a biometric hand scanner to secure your data center. Which of the following practices is BEST to follow? Decrease the reader sensitivity Increase the FAR Decrease the FRR Increase the reader sensitivity Selected Reading UK watchdog looking into Microsoft AI taking screenshots (BBC) How the new Microsoft Recall feature fundamentally undermines Windows security (DoublePulsar) CentroMed Confirms Data Breach Affecting an Estimated 400k | Console and Associates, P.C. (JDSupra) PNP suspends online services amid data breach probe (Philippine News Agency) Ivanti Patches Critical Code Execution Vulnerabilities in Endpoint Manager (SecurityWeek) Critical SAML Auth Bypass Vulnerability Found in GitHub Enterprise Server (Heimdal Security) Critical Vulnerability in Honeywell Virtual Controller Allows Remote Code Execution (SecurityWeek) DoD CIO debuts cybersecurity reciprocity playbook to streamline system authorizations, boost cybersecurity efficiency (Industrial Cyber) Criminal record database of millions of Americans dumped online (Malwarebytes) Mastercard Doubles Speed of Fraud Detection with Generative AI (Infosecurity Magazine) Gordon Bell, Legendary Designer of Computers, Dies at 89 (Gizmodo) Share your feedback. We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. Want to hear your company in the show? You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at [email protected] to request more info. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Transcript

Click on a timestamp to play from that location

0:00.0	You're listening to the CyberWire Network, powered by N2K. Some say Microsoft's recall should be. A breach of a Texas health care provider affects over 400,000.
0:25.0	Police in the Philippines shut down services following a breach.
0:28.0	Ivante patches multiple products.
0:31.0	GitHub fixes a critical authentication bypass vulnerability.
0:35.0	Researchers discover critical vulnerabilities in Honeywell's Control Edge Unit Operations
0:38.9	controller.
0:40.1	The DoD releases their Cybersecurity Reciprocity Playbook.
0:44.4	Packers leak a database with millions of Americans criminal records.
0:48.1	Mastercard speeds fraud detection with AI.
0:51.5	In our learning layer segment,
0:53.0	Post-Sam Meisenberg and Joe Kerrigan continue their discussion of Joe's
0:57.0	CISSP certification journey, diving into domain 5, identity and access management,
1:03.6	and remembering a computing visionary. It's Wednesday, May 22nd, 2024. I'm Dave Bitner, and this is your cyberwire Intel briefing. Thanks for joining us once again here today. It is great to have you with us.
1:44.0	The UK's Information Commissioners Office is questioning Microsoft about its new feature,
1:49.7	Recall, which takes frequent screenshots on new co-pilot plus PCs. Privacy advocates are
1:57.4	concerned about potential risks calling it a privacy nightmare. Microsoft states that recall is optional, keeps data local, and is designed with privacy in mind.
2:09.0	Users can control what recall captures and private browsing on edge is excluded.
2:15.0	However, the I.C.
2:17.0	emphasizes the need for rigorous risk management assessments before product releases.
2:22.0	Recall allows users to search past activity, including files and browsing history,
2:27.8	by capturing screenshots every few seconds.
2:31.3	Critics warn this could deter people from accessing sensitive information.
	...

Please login to see the full transcript.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from N2K Networks, Inc., and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of N2K Networks, Inc. and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.