Google Cloud will require mandatory multi-factor authentication (MFA) across all user accounts by 2025, urging organizations to switch as soon as possible for enhanced security. Starting this November, Google will guide administrators on implementing MFA and running tests to streamline the rollout. By early 2025, users logging in with passwords must enable MFA, with the requirement extending to federated users by late 2025. Experts, including Ed Russell from Qodea, advise organizations to proactively adopt MFA, provide training, and prepare for potential disruptions as the mandate approaches. Click here to read more about Google’s phased MFA rollout.

Australian Prime Minister Anthony Albanese announced plans to set a minimum social media access age of 16 for platforms like Instagram, TikTok, Facebook, X, and YouTube. The legislation, set to be introduced in two weeks, aims to protect children from harmful online content and pressures. Social media companies would need to take “reasonable steps” to enforce this rule, facing fines if they fail. Australia would be the first country to enforce an ID or biometric check for age verification, with no parental consent exemptions. Industry critics argue that bans could push teens toward unregulated internet areas, advocating instead for safer, age-appropriate online spaces.

For more insights, click here to read more.

House Speaker Mike Johnson hinted Republicans might repeal or revise the CHIPS and Science Act, a Biden-led initiative aimed at bolstering U.S. semiconductor production. After pushback, Johnson indicated he’d prefer to “streamline” rather than completely repeal the act. Additionally, Elon Musk’s influence looms large in the tech sector, with his support of Trump’s campaign potentially positioning his ventures (Tesla, SpaceX, Starlink, Neuralink, and xAI) for regulatory advantages under a Trump administration. Should Trump reduce federal AI oversight, states may step in, as Tennessee, Colorado, and California have already implemented AI-related regulations. Trump has suggested a preference for “deregulating whenever possible,” advocating for AI growth in areas aligned with “free speech and human flourishing.” Though specific policies remain unclear, the America First Policy Institute has proposed plans for executive orders to foster U.S. AI leadership and military advancements. Trump’s prior AI initiatives focused on research and privacy protection, but future directions remain to be seen.

For more insights, click here to read more.

A Pennsylvania court extended voting hours in Cambria County from 8 p.m. to 10 p.m. due to a technical issue that prevented voters from scanning their ballots when polls opened. A software malfunction in the Electronic Voting System (EVS) led to voter confusion, long lines, and some voters leaving without casting ballots. While the issue was unresolved at the time, voters are casting ballots on paper. Similar issues were reported in Bedford County and possibly in Blair, Somerset, and Luzerne counties. Election officials assure that all ballots will be counted, and IT specialists are working to address the problem.

For more insights, click here to read more.

A hacker known as Dark X claims to have accessed and stolen data from 350 million Hot Topic customers, including emails, addresses, phone numbers, and partial credit card details, exploiting credentials from a developer. This breach highlights the expanding role of “infostealers” — malware targeting passwords and cookies stored in users’ browsers. Infostealers like RedLine and LummaC2 facilitate extensive credential harvesting, often spread through social media platforms and dark web channels. With stolen data available on Telegram and marketplaces, infostealers continue to challenge tech giants like Google and Microsoft, which strive to block their exploits.

For more insights, click here to read more.

Sophos reports on the evolving tactics of Chinese APT groups Volt Typhoon, APT31, and APT41/Winnti after a five-year analysis of attacks. Initially, these groups conducted widespread, indiscriminate attacks, but since mid-2022, they have shifted to more focused operations against high-value targets like government agencies, critical infrastructure, and healthcare in the Indo-Pacific. Sophos observed increased use of stealth tactics, with attackers utilizing sophisticated malware and exploits targeting network devices, often blocking telemetry to evade detection. These adversaries, suspected to be tied to Chinese government interests, show significant resourcefulness, operational security, and firmware expertise.

For more insights, click here to read more.

Cybernews discovered an unprotected PayDo Elasticsearch instance containing millions of sensitive financial records, attributed to a firewall misconfiguration during AWS migration. Fortunately, no data breaches were confirmed, thanks to quick action by Cybernews and subsequent third-party audits. PayDo has enhanced its security with a predictive detection system and plans a bug bounty program. Lessons include ensuring accessible communication channels, sanitizing sensitive data, and implementing proactive error-prevention measures to limit exposure risk.

For more details, click here.

Delta Air Lines has sued CrowdStrike, claiming that a faulty update from the cybersecurity company caused a major system outage in July, leading to over 7,000 flight cancellations and costing Delta more than $500 million. Delta argues CrowdStrike failed to test the update properly, while CrowdStrike blames Delta’s outdated IT infrastructure for the slow recovery. The U.S. Department of Transportation is also investigating Delta’s prolonged recovery time and customer service response during the disruption.

For more details, click here to read more.

Companies are increasingly investing in AI, spurred by competitive pressure, though adoption varies. Some, like Blubrry and Roseman Labs, use AI strategically for content and healthcare improvements, while others face employee resistance due to job security concerns. Experts advise using AI for specific problems, not just trends, emphasizing ethical practices and employee training. Clear policies are recommended to prevent misuse, and careful adoption is key for genuine business value, allowing AI to assist rather than replace human roles.

For more details, click here to read more.