The breach of the Microsoft Exchange email server software is estimated to have hit tens of thousands of victims. The Biden administration has formally declared that Chinese state-backed APT groups were behind the original cyber attacks.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
Report found that most organizations that suffered successful ransomware attacks since 2019 had perimeter defenses in place and had trained their employees on phishing.
Code signing is like a virtual mechanic, ensuring trust across the software supply chain by validating the identities of source code and verifying that it hasn’t been tampered with. Code signing isn’t new, but it has changed.
F5 Labs says web application security is the greatest cybersecurity challenge, and the cause for more than half of all the largest software security incidents experienced over the last 5 years.
Saudi Aramco data breach leaking 1 TB of proprietary company information and full employee profiles came about due to a third party security lapse at an unnamed contractor.
Fewer than half of IT professionals report feeling confident about their organisation’s cybersecurity since the pandemic. So, what are the biggest digital risks lying in wait for businesses looking ahead to working in a post-COVID world?
After the breach of Kaseya and thousands of clients downstream from it by REvil ransomware, the perpetrators disappeared abruptly but Kaseya appears to have received a decryption key nearly three weeks into the attack.
In a world where a single OT security breach can shut down an entire coastline’s worth of equipment, being prepared early will save your organization time and costs while helping to prevent major logistical headaches.
Second special directive from the TSA is requiring pipeline operators to implement specific mitigation measures and create contingency and recovery plans, though most of the details are being kept from the public.
A Japanese government official disclosed a data leak that exposed Olympics ticket buyers' account credentials but the Olympics organizers denied being the source of the breach.










