DPS Consulting Group

📣 New updates on UnitedHealth Group's Change Healthcare ransomware attack back in February! Over 100 million people's private data were compromised, resulting in the largest healthcare data breach in US history. Sensitive data exposed includes health insurance IDs, patient diagnoses, Social Security numbers, and billing codes. 💭 ICYMI: Hacker group #BlackCat (aka ALPHV) attacked Change Healthcare in February 2024, affecting around one-third of the US population. The incident also led to major delays in bill processing, claims, payroll, and prescriptions across healthcare providers. According to UnitedHealth Group CEO Andrew Witty, threat actors accessed a Citrix remote access service that lacked MFA using stolen credentials. https://lnkd.in/gb38tZHm

When users agree to the privacy policy without reading

Let's break down AI bias in our new episode of A Beginner's Guide 🎥 A topic often misunderstood, even by the most seasoned tech professionals. From legal to ethical and technical perspectives, deepen your understanding of AI bias, how it creeps into AI systems, and how to reduce its risks. Many thanks to our special guest Tushar Puri, CEO of Pegasus One, for sharing practical insights on how companies can mitigate bias and build fairer AI solutions. https://lnkd.in/gUcb4GDY

True compliance isn’t just about following rules or checking boxes—it’s about creating a culture of doing the right thing. It's about integrity. When doing the right thing is part of your company culture, you build trust with your customers and partners. That’s what sets successful businesses apart.

🚨 𝐒𝐜𝐚𝐦 𝐖𝐚𝐫𝐧𝐢𝐧𝐠: 𝐀𝐈-𝐏𝐨𝐰𝐞𝐫𝐞𝐝 𝐂𝐚𝐥𝐥 𝐓𝐚𝐫𝐠𝐞𝐭𝐢𝐧𝐠 2.5 𝐁𝐢𝐥𝐥𝐢𝐨𝐧 𝐆𝐨𝐨𝐠𝐥𝐞 𝐔𝐬𝐞𝐫𝐬 🚨 A new scam targets Gmail users, posing as Google support to steal account access! It starts with a Gmail recovery notification. About 40 minutes later, you get a call from what looks like a Google support number. The polite AI-generated voice claims there’s suspicious activity on your account and asks if you’ve logged in from another country. The goal? To trick you into approving a recovery request and gain control of your account. 🚩 𝐑𝐞𝐝 𝐅𝐥𝐚𝐠𝐬 • Unsolicited recovery notifications: Did you request them? If not, don’t approve! • Calls from Google: Google doesn't call regular users unless you have a Business Profile. • Suspicious emails: Double-check if the email domain looks legitimate. • AI voice patterns: Listen for robotic pauses or perfect speech—it might not be human. https://lnkd.in/eSGURSEt

Pic of the Day #infosec #cybersecurity #cybersecuritytips #pentesting #cybersecurityawareness #informationsecurity

It's Cyber Security Awareness Month and don't forget, your business is not too small to get hit, but it might be too small to make the news. Many attacks on small business are not specifically targeting them, they often based on someone clicking on a phishing email, leaving an unpatched system exposed, or just not having good passwords and no MFA. For those wondering the motives behind attacking a small business, that is simple: 🇲🇴🇳🇪🇾 Here is some more perspective: Many threat actors live in areas where the median income is less than $500 USD per month, so getting just $12K from a small business is a years salary. There is also no much lower risk of US government action going after small companies because those resources are focused on the much larger ransomeware gangs going after the bigger companies.

When companies "care" about data privacy but don't update their security measures... ☕

Privacy isn’t just about regulations. It’s about earning your customers’ trust. Make privacy a priority in your business, and customers will feel safe with you.

🚨 𝐃𝐚𝐭𝐚 𝐁𝐫𝐞𝐚𝐜𝐡 𝐀𝐥𝐞𝐫𝐭: 𝐂𝐨𝐦𝐜𝐚𝐬𝐭/𝐅𝐢𝐧𝐚𝐧𝐜𝐢𝐚𝐥 𝐁𝐮𝐬𝐢𝐧𝐞𝐬𝐬 𝐚𝐧𝐝 𝐂𝐨𝐧𝐬𝐮𝐦𝐞𝐫 𝐒𝐨𝐥𝐮𝐭𝐢𝐨𝐧𝐬 (𝐅𝐁𝐂𝐒) 🚨 Over 237,000 customer records from Comcast were exposed in a data breach at the FBCS, a third-party debt collection agency used by Comcast until 2020. 𝐊𝐞𝐲 𝐃𝐞𝐭𝐚𝐢𝐥𝐬 📆 A 𝐫𝐚𝐧𝐬𝐨𝐦𝐰𝐚𝐫𝐞 𝐚𝐭𝐭𝐚𝐜𝐤 𝐥𝐚𝐮𝐧𝐜𝐡𝐞𝐝 𝐛𝐞𝐭𝐰𝐞𝐞𝐧 𝐅𝐞𝐛𝐫𝐮𝐚𝐫𝐲 14-26, 2024 by an unauthorized party, who encrypted some systems. 🗂️ 𝐒𝐭𝐨𝐥𝐞𝐧 𝐜𝐮𝐬𝐭𝐨𝐦𝐞𝐫 𝐝𝐚𝐭𝐚 𝐢𝐧𝐜𝐥𝐮𝐝𝐞𝐬 SSNs, names, addresses, dates of birth, Comcast account numbers, and ID numbers (used internally by FBCS). ⏮️ Exposed data 𝐝𝐚𝐭𝐞𝐬 𝐛𝐚𝐜𝐤 𝐭𝐨 2021. Xfinity and Comcast systems were not compromised, but Comcast is offering 12 months of free identity theft protection through CyEx Identity Defense Complete, which includes credit monitoring. 𝐁𝐞𝐬𝐭 𝐏𝐫𝐚𝐜𝐭𝐢𝐜𝐞𝐬 𝐭𝐨 𝐅𝐨𝐥𝐥𝐨𝐰 • Conduct regular security audits to make sure your IT systems are up-to-date and free from vulnerabilities. • Vet third-party vendors thoroughly and make sure they follow strong data protection policies. • Encrypt sensitive customer and business data to protect it from unauthorized access. • Train your team on recognizing phishing attempts, suspicious emails, and malicious links. • Use MFA as an extra layer of security for all your accounts and data. • Regularly back up your data in case of ransomware attacks. https://lnkd.in/grDTkZEB