QKS Group’s Exposure Management research provides a comprehensive analysis of how organizations are ...

As cyber threats continue to evolve in complexity and frequency, the importance of strong Security Monitoring cannot be overstated. Yet, many organizations underestimate and/or neglect this critical c...

YouTube video by ReconBee

we'll discuss the value of Understanding Third-Party Risk Management (TPRM) and how it may protect your company from unforeseen dangers

AHP–FMEA–bayesian integration, Adaptive maritime cyber risk, Autonomous surface vessel security, Port energy storage resilience

Experts emphasize the need to update security clearance for evolving cyber and business risks.

BOSTON--(BUSINESS WIRE)-- #CyberRiskManagement--CyberSaint, the leader in cyber risk management, today announced that attendee registration is now open for its annual STRONGER conference; the cybersecurity industry’s premier virtual and free conference…

BOSTON--(BUSINESS WIRE)-- #CyberRiskManagement--CyberSaint, the leader in cyber risk management, today announced that attendee registration is now open for its annual STRONGER conference; the cybersecurity industry’s premier virtual and free conference…

An Oklahoma man has filed a class action suit against a local insurance company over a data breach that spewed members' personal information over the internet.

Let's be real, the line between "credit risk" and "cyber risk" is basically gone. The same signals that help banks say "yes" to a loan, your identity, devices, accounts, cash-flow patterns, are the ex...

Personally speaking, Bring Your Own Device (BYOD) policies are awesome. Who doesn't love using their own phone or laptop at work? I already know where everything is.

Modern healthcare operations are frequently plagued by ransomware attacks, but the recent attack on Change Healthcare marks a major turning point in terms of scale and consequence. In the context of an industry that is increasingly relying on digital platforms, there is a growing threat environment characterized by organized cybercrime, fragile third-party dependency, and an increasing data footprint as a result of an increasingly hostile threat environment.  With hundreds of ransomware incidents and broader security incidents already occurring in a matter of months, recent figures from 2025 illustrate just how serious this shift is. It is important to note that a breach will not only disrupt clinical and administrative workflows, but also put highly sensitive patient information at risk, which can result in cascading operational, financial, and legal consequences for organizations.  The developments highlighted here highlight a stark reality: safeguarding healthcare data does not just require technical safeguards; it now requires a coordinated risk management strategy that anticipates breaches, limits their impacts, and ensures institutional resilience should prevention fail.  Connecticut's Community Health Center (CHC) recently disclosed a significant data breach that occurred when an unauthorized access to its internal systems was allowed to result in a significant data breach, which exemplifies the sector's ongoing vulnerability to cyber risk.  In January 2025, the organization was alerted to irregular network activity, resulting in an urgent forensic investigation that confirmed there was a criminal on site. Upon further analysis, it was found that the attacker had maintained undetected access to the system from mid-October 2024, thereby allowing a longer window for data exfiltration before the breach was contained and publicly disclosed later that month.  There was no ransomware or disruption of operations during the incident, but the extent of the data accessed was significant, including names, dates of birth, Social Security numbers, health insurance details, and clinical records of patients and employees, which included sensitive patient and employee information. More than one million people, including several thousand employees, were affected according to CHC, demonstrating the difficulties that persist in early detection of threats and data protection across healthcare networks, and highlighting the urgent need for strengthened security measures as medical records continue to attract cybercriminals.  According to Cytek Biosciences' notification to affected individuals, it was learned in early November 2025 that an outside party had gained access to portions of the Biotechnology company's systems and that the company later determined that personal information had been obtained by an outside party.  As soon as the company became aware of the extent of the exposure, it took immediate steps to respond, including offering free identity theft protection and credit monitoring services for up to two years to eligible individuals, which the company said it had been working on.  As part of efforts to mitigate potential harm resulting from the incident, enrollment in the program continues to be open up until the end of April 2026. Threat intelligence sources have identified the breach as being connected to Rhysida, which is known for being a ransomware group that first emerged in 2023 and has since established itself as a prolific operation within the cybercrime ecosystem. A ransomware-as-a-service model is employed by the group which combines data theft with system encryption, as well as allowing affiliates to conduct attacks using its malware and infrastructure in return for a share of the revenue.  The Rhysida malware has been responsible for a number of attacks across several sectors since its inception, and healthcare is one of the most frequent targets. A number of the group's intrusions have previously been credited to hospitals and care providers, but the Cytek incident is the group's first confirmed attack on a healthcare manufacturer, aligning with a trend which is increasingly involving ransomware activity that extends beyond direct patient care companies to include medical suppliers and technology companies.  Research indicates that these types of attacks are capable of exposing millions of records, disrupting critical services, and amplifying risks to patient privacy as well as operational continuity, which highlights that the threat landscape facing the U.S. healthcare system is becoming increasingly complex.  As a result of the disruption that occurred in the U.S. healthcare system, organizations and individuals affected by the incident have stepped back and examined how Change Healthcare fits into the system and why its outage was so widespread.  With over 15 years of experience in healthcare technology and payment processing under the UnitedHealth Group umbrella, Change Healthcare has played a critical role as a vital intermediary between healthcare providers, insurers, and pharmacists by verifying eligibility, getting prior authorizations, submitting claims, and facilitating payment processes.  A failure of this organization in its role at the heart of these transactions can lead to cascading delays in prescription, reimbursement, and claim processing across the country when its operational failure extends far beyond the institution at fault.  According to findings from a survey conducted by the American Medical Association, which documented widespread financial and administrative stress among physician practices, this impact was of a significant magnitude. There have been numerous reports of suspended or delayed claims payments, the inability to submit claims, or the inability to receive electronic remittance advice, and widespread service interruptions as a consequence.  Several practices cited significant revenue losses, forcing some to rely on personal funds or find an alternative clearinghouse in order to continue to operate. There have been some relief measures relating to emergency funding and advance payments, but disruptions continue to persist, prompting UnitedHealth Group to disburse more than $2 billion towards these efforts.  Moreover, patients have suffered indirect effects not only through billing delays, unexpected charges, and notifications about potential data exposures but also outside the provider community. This has contributed to increased public concern and renewed scrutiny of the systemic risks posed by the compromise of an organization's central healthcare infrastructure provider.  The fact that the incidents have been combined in this fashion highlights a clear and cautionary message for healthcare stakeholders: it is imperative to treat cyber resilience as a strategic priority, rather than a purely technical function.  Considering that large-scale ransomware campaigns have been running for some time now, undetected intrusions for a prolonged period of time, as well as failures at critical intermediaries, it is evident that even a single breach can escalate into a systemic disruption that affects providers, manufacturers, and patients.  A growing number of industry leaders and regulators are called upon to improve the oversight of third parties, enhance the tools available for breach detection, and integrate financial, legal, and operational preparedness into their cybersecurity strategies.  It is imperative that healthcare organizations adopt proactive, enterprise-wide approaches to risk management as the volume and value of healthcare data continues to grow. Organizations that fail to adopt this approach may not only find themselves unable to cope with cyber incidents, but also struggle to maintain trust, continuity, and care delivery in the aftermath of them.

It is no secret that the technology of quantum computing is undergoing a massive transformation - one which promises to redefine the very foundations of digital security worldwide. Quantum computing, once thought to be nothing more than a theoretical construct, is now beginning to gain practical application in the world of computing.  A quantum computer, unlike classical computers that process information as binary bits of zeros or ones, is a device that enables calculations to be performed at a scale and speed previously deemed impossible by quantum mechanics, leveraging the complex principles of quantum mechanics.  In spite of their immense capabilities, this same power poses an unprecedented threat to the digital safeguards underpinning today's connected world, since conventional systems would have to solve problems that would otherwise require centuries to solve.   The science of cryptography at the heart of this looming challenge is the science of protecting sensitive data through encryption and ensuring its confidentiality and integrity. Although cryptography remains resilient to today's cyber threats, experts believe that a sufficiently advanced quantum computer could render these defences obsolete.  Governments around the world have begun taking decisive measures in recognition of the importance of this threat. In 2024, the U.S. National Institute of Standards and Technology (NIST) released three standards on postquantum cryptography (PQC) for protecting against quantum-enabled threats in establishing a critical benchmark for global security compliance.  Currently, additional algorithms are being evaluated to enhance post-quantum encryption capabilities even further. In response to this lead, the National Cyber Security Centre of the United Kingdom has urged high-risk systems to adopt PQC by 2030, with full adoption by 2035, based on the current timeline.  As a result, European governments are developing complementary national strategies that are aligned closely with NIST's framework, while nations in the Asia-Pacific region are putting together quantum-safe roadmaps of their own. Despite this, experts warn that these transitions will not happen as fast as they should. In the near future, quantum computers capable of compromising existing encryption may emerge years before most organisations have implemented quantum-resistant systems. Consequently, the race to secure the digital future has already begun. The rise of quantum computing is a significant technological development that has far-reaching consequences that extend far beyond the realm of technological advancement.  Although it has undeniable transformative potential - enabling breakthroughs in sectors such as healthcare, finance, logistics, and materials science - it has at the same time introduced one of the most challenging cybersecurity challenges of the modern era, a threat that is not easily ignored. Researchers warn that as quantum research continues to progress, the cryptographic systems safeguarding global digital infrastructure may become susceptible to attack.  A quantum computer that has sufficient computational power may render public key cryptography ineffective, rendering secure online transactions, confidential communications, and data protection virtually obsolete.  By having the capability to decrypt information that was once considered impenetrable, these hackers could undermine the trust and security frameworks that have shaped the digital economy so far. The magnitude of this threat has caused business leaders and information technology leaders to take action more urgently.  Due to the accelerated pace of quantum advancement, organisations have an urgent need to reevaluate, redesign, and future-proof their cybersecurity strategies before the technology reaches critical maturity in the future.  It is not just a matter of adopting new standards when trying to move towards quantum-safe encryption; it is also a matter of reimagining the entire architecture of data security in the long run. In addition to the promise of quantum computing to propel humanity into a new era of computational capability, it is also necessary to develop resilience and foresight in parallel. There will be disruptions that are brought about by the digital age, not only going to redefine innovation, but they will also test the readiness of institutions across the globe to secure the next frontier of the digital age. The use of cryptography is a vital aspect of digital trust in modern companies. It secures communication across global networks, protects financial transactions, safeguards intellectual property, and secures all communications across global networks.  Nevertheless, moving from existing cryptographic frameworks into quantum-resistant systems is much more than just an upgrade in technology; it means that a fundamental change has been made to the design of the digital trust landscape itself. With the advent of quantum computing, adversaries have already begun using "harvest now, decrypt later" tactics, a strategy which collects encrypted data now with the expectation that once quantum computing reaches maturity, they will be able to decrypt it.  It has been shown that sensitive data with long retention periods, such as medical records, financial archives, or classified government information, can be particularly vulnerable to retrospective exposure as soon as quantum capabilities become feasible on a commercial scale. Waiting for a definitive quantum event to occur before taking action may prove to be perilous in a shifting environment.  Taking proactive measures is crucial to ensuring operational resilience, regulatory compliance, as well as the protection of critical data assets over the long term. An important part of this preparedness is a concept known as crypto agility—the ability to move seamlessly between cryptographic algorithms without interrupting business operations.  Crypto agility has become increasingly important for organisations operating within complex and interconnected digital ecosystems rather than merely an option for technical convenience. Using the platform, enterprises are able to keep their systems and vendors connected, maintain robust security in the face of evolving threats, respond to algorithmic vulnerabilities quickly, comply with global standards and remain interoperable despite diverse systems and vendors. There is no doubt that crypto agility forms the foundation of a quantum-secure future—and is an essential attribute that all organisations must possess for them to navigate the coming era of quantum disruption confidently and safely. As a result of the transition from quantum cryptography to post-quantum cryptography (PQC), it is no longer merely a theoretical exercise, but now an operational necessity.  Today, almost every digital system relies heavily on cryptographic mechanisms to ensure the security of software, protect sensitive data, and authenticate transactions in order to ensure that security is maintained. When quantum computing capabilities become available to malicious actors, these foundational security measures could become ineffective, resulting in the vulnerability of critical data around the world to attack and hacking.  Whether or not quantum computing will occur is not the question, but when. As with most emerging technologies, quantum computing will probably begin as a highly specialised, expensive, and limited capability available to only a few researchers and advanced enterprises at first. Over the course of time, as innovation accelerates and competition increases, accessibility will grow, and costs will fall, which will enable a broader adoption of the technology, including by threat actors.  A parallel can be drawn to the evolution of artificial intelligence. The majority of advanced AI systems were confined mainly to academic or industrial research environments before generative AI models like ChatGPT became widely available in recent years. Within a few years, however, the democratisation of these capabilities led to increased innovation, but it also increased the likelihood of malicious actors gaining access to powerful new tools that could be used against them.  The same trajectory is forecast for quantum computing, except with stakes that are exponentially higher than before. The ability to break existing encryption protocols will no longer be limited to nation-states or elite research groups as a result of the commoditization process, but will likely become the property of cybercriminals and rogue actors around the globe as soon as it becomes commoditised.  In today's fast-paced digital era, adapting to a secure quantum framework is not simply a question of technological evolution, but of long-term survival-especially in the face of catastrophic cyber threats that are convergent at an astonishing rate. A transition to post-quantum cryptography (PQC), or post-quantum encryption, is expected to be seamless through regular software updates for users whose digital infrastructure includes common browsers, applications, and operating systems.  As a result, there should be no disruption or awareness on the part of users as far as they are concerned. The gradual process of integrating PQC algorithms has already started, as emerging algorithms are being integrated alongside traditional public key cryptography in order to ensure compatibility during this transition period.  As a precautionary measure, system owners are advised to follow the National Cyber Security Centre's (NCSC's) guidelines to keep their devices and software updated, ensuring readiness once the full implementation of the PQC standards has taken place. While enterprise system operators ought to engage proactively with technology vendors to determine what their PQC adoption timelines are and how they intend to integrate it into their systems, it is important that they engage proactively.  In organisations with tailored IT or operational technology systems, risk and system owners will need to decide which PQC algorithms best align with the unique architecture and security requirements of these systems. PQC upgrades must be planned now, ideally as part of a broader lifecycle management and infrastructure refresh effort. This shift has been marked by global initiatives, including the publication of ML-KEM, ML-DSA, and SLH-DSA algorithms by NIST in 2024.  It marks the beginning of a critical shift in the development of quantum-resistant cryptographic systems that will define the next generation of cybersecurity. In the recent surge of scanning activity, it is yet another reminder that cyber threats are continually evolving, and that maintaining vigilance, visibility, and speed in the fight against them is essential.  Eventually, as reconnaissance efforts become more sophisticated and automated, organisations will not only have to depend on vendor patches but also be proactive in integrating threat intelligence, continuously monitoring, and managing attack surfaces as a result of the technological advancements.  The key to improving network resilience today is to take a layered approach, which includes hardening endpoints, setting up strict access controls, deploying timely updates, and utilising behaviour analytics-based intelligent anomaly detection to monitor the network infrastructure for anomalies from time to time.  Further, security teams should take an active role in safeguarding the entire network against attacks that can interfere with any of the exposed interfaces by creating zero-trust architectures that verify every connection that is made to the network. Besides conducting regular penetration tests, active participation in information-sharing communities can help further detect early warning signs before adversaries gain traction. Attackers are playing the long game, as shown by the numerous attacks on Palo Alto Networks and Cisco infrastructure that they are scanning, waiting, and striking when they become complacent. Consistency is the key to a defender's edge, so they need to make sure they know what is happening and keep themselves updated.

QKS Group’s Security Analytics and Automation market research includes a detailed analysis of the gl...

To provide insight into the Cyber Security scenario, this fourth annual edition of our Global Cyber Attack Report analyses more than 7,000 known attacks occurred in 2023 comparing them with the previo...

It sounds like the CISO Dallas event is shaping up to be a major cybersecurity..

It sounds like the North American Information Security Summit (NAISS ’25) will be an exciting event for professionals in the cybersecurity field. The summit in Austin, TX, will provide an […]

It sounds like you’re referring to the CISO event taking place in New York on May 28-29, 2025. This event will be an excellent opportunity for cybersecurity professionals to come […]

The state chief information officer presented a consolidated report required by Senate Bill 1090 listing IT budgets and project requests approved by the Legislative Assembly, outlined assumptions and agency variations in reporting, and said next steps will establish prioritization criteria and procedures.

House Bill 2130 raises Oregon Insurance Guarantee Association's payout cap to better protect consumers.