Data breach of a popular online kids' game exposed personal details of 46 million users. The threat actor released 7 million records for free on a hacker forum.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
TeleMessage provides secure archiving services for a variety of messaging apps, including Telegram and WhatsApp. In this case, the security breach is of an unofficial Signal clone that parent company Smarsh offers called "TM SGNL."
Since the signing of Executive Order 14028, the Biden-Harris administration has announced several cybersecurity initiatives. Organizations should prepare for heightened scrutiny from multiple government agencies over their organizational cybersecurity standards and incident responses.
Conti is able to breeze through ransomware attacks in as little as three days thanks to a polished setup that has been years in the making: custom ransomware and tools, a disciplined working schedule and a business-like structure.
With specific guidance from an amended HITECH Act to include a comprehensive cyber policy, the healthcare industry will better secure patients’ data.
The McHire AI bot was created by Paradox.ai, which claims that 90% of McDonalds franchisees make use of it in their hiring pipeline. Hacking it apparently did not require any amount of technical knowledge at all, merely trying “123456” as an administrator password.
23andMe will pay $30 million to settle a data breach lawsuit from the 2023 credential stuffing attack that exposed the personal and genetic information of 6.9 million customers.
Cyber insurers have struggled to assess and quantify the risk they are underwriting. The only way the cyber insurance industry will be able to support the market's growing demand is through trust and transparency built upon quantifying digital risk through sound data science principles.
Because of the significant damage a DDoS attack can cause, many IT teams will put protecting against the threat high on their agenda. However, what many IT teams may be completely unaware of is that there are a wide variety of different types of DDoS attack vectors in a cybercriminals’ arsenal.
U.S. government-funded Android phones are found to contain unremovable pre-installed malware that leaves the phone vulnerable to invasive advertising and auto-installation of apps without user’s permission.










