Cybersecurity Without Insanity? It could be as simple as 3 – 2 – 1…

This week: There’s no silver lining for Google’s Cloud Services, your new car may be a risk to your privacy, and medical devices need cyber security (Ain’t that a surprise!).

 

3 – This cloud does not have a silver lining

A flood and fire in one of Google’s French data centres recently caused a widespread outage across one of its European regions.

Apparently, the outage was caused by a leaking water pump, which led to water being released into a battery room which then caused a fire. Some people have questioned how such an event in one building could have caused such a widespread problem across one of Google’s European regions. IT Pro recently reported on the event. It is never good when a headline includes the word ‘fiasco’.

It’s also a reminder as to why the DORA (Digital Operational Resilience Act) regulation is necessary, and why it brings major ICT providers under the direct supervision of regulators.

 

2 – Why driving a “dirty diesel” may be good for your privacy

“An investigation by Reuters found that groups of Tesla employees privately shared invasive and sensitive videos captured on customer cameras between 2019 and 2022.”

As recently reported in The Independent, videos recorded by some Tesla vehicles were shared on an internal messaging system. They included video footage of a naked customer and another video showing a car hitting a child at high speed. Apparently, one clip even showed the inside of Elon Musk’s garage.

Your new car could be as good at protecting your privacy as a 6 year old walking around with a live-streaming video camera!

 

1 – Medical devices need cyber security? Who knew?

The US Food and Drug Administration (FDA) has announced that new medical devices and related systems may no longer receive authorisation if they do not address cybersecurity risk.

As reported in SC Magazine, and mentioned recently by ISACA, device manufacturers will need to explain how they will address any cybersecurity vulnerabilities that are identified in the future. This will probably result in people being told to install updates onto their medical devices.

I just hope people will be better at updating their pacemakers than they are at updating their home computers!

 

 

PS I discuss the latest news, and delve into how to manage cyber risks and regs without losing your sanity, on the “Cybersecurity Without Insanity” podcast.
All episodes are accessible from https://www.codeinmotion.ie/podcast or wherever you get your podcasts.