April has just sped by! And you know what that means. Our April news roundup is right here, ready for you to speed through. From another huge data breach to security updates strengthening accounts on ChatGPT, here’s everything you need to know this month in IT.
Capita Data Breach
Earlier last week, Capita experienced its second major data breach. Following an incident in 2023, this may be seen as the last straw for many relying on Capita. Capita is the UK’s leading AI-enabled business process outsourcer, and the incident involved a failed link to a pension portal, exposing the data of almost 100 scheme members. Although it was shut down quickly, 138 users had accessed the data.
In a statement, permanent secretary Cat Little noted that Capita did not deliver the expected levels of IT, automation, and portal functionality, which significantly affected their ability to manage the volumes of work since launch.
At a time when security, performance, and trust are critical, businesses like yours need more than a faceless supplier. This serves as a reminder that high-quality cybersecurity is not just an added perk but a necessary investment for your business.
Time to ditch passwords for passkeys
The National Cyber Security Centre (NCSC) said it was overhauling decades of security practice to recommend passkeys as the most secure login option. Top platforms such as Google, Apple, and X already give users the option to use passkeys over passwords.
According to the NCSC, they can offer more protection as they are unique to each site you register on, and no secret information is shared. Instead of creating and remembering a password, your device generates a secure key pair.
Passkeys work using device-based cryptographic keys. They are highly phishing resilient and offer built-in multi-factor authentication. Authentication is given when a user proves the device is theirs, such as with facial recognition or a fingerprint.
AI-generated fraud on the rise
AI is increasingly being used for good, but there’s no doubt people are also using it for harm. Frightening statistics show that deepfake-enabled fraud attempts increased by more than 1,300% year-over-year. On top of this, 1 in 10 adults globally have encountered an AI voice scam.
AI-driven attacks are changing the landscape, and it’s not slowing down. Want to find out how managed IT support can help protect your business? Chat to one of our friendly experts today.
OpenAI roll out Advanced Account Security to protect at-risk accounts
With so much talk of hacking and compromising, OpenAI announced last week that it is adding an optional new level of account protection to add an extra layer of security. Titled Advanced Account Security, the feature enforces strict access controls that make account takeover far more difficult.
This comes following OpenAI announcing the next phase of its cybersecurity strategy, alongside a new model designed specifically for use by digital defenders – GPT-5.4-Cyber, announced early April.
Users who enable this added layer of security will no longer use passwords. Instead, they must add two physical security keys or passkeys to significantly reduce the risk of phishing attacks. However, if a user has issues with account recovery, they will no longer be able to seek aid from OpenAI’s support team, as they won’t have control over the account or recovery options. This is so that attackers can’t break into accounts by targeting support portals.
You’re all caught up!
Looking for managed IT support in Sheffield or want to be kept in the loop? We can help. Whether you’re based in Sheffield, South Yorkshire, or further afield, let us take you for a coffee to discuss how we can help your business thrive!
