Though it did not suffer a security breach, PayPal is reporting that a massive credential stuffing attack appears to have yielded access to about 35,000 PayPal accounts.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
ODIN Intelligence, a law enforcement technology vendor, has experienced a chain of security incidents as of late including a defaced website (and possibly much worse). Company had already been a magnet for controversy over some of its more privacy-invasive products.
Some predictions for 2023. We will see most security frameworks continue to fail in 2023 for a simple reason: complexity. And the role of CISO will be elevated to be on the board or reporting directly to the CEO.
A third-party data breach involving a U.S. contractor exposed the personal information of over 2 million Aflac cancer and Zurich automobile insurance policyholders in Japan.
The increase in cybersecurity compliance requirements is an opportunity for Zero Trust strategies to be further embraced. This makes the best sense for the growing decentralized workforces which is one of the biggest trends to continue into 2023.
An established cybercrime gang leaked sensitive data, including unredacted child abuse files, after a ransomware attack on San Francisco Bay Area Rapid Transit Police department.
Security researchers had matched email addresses to account names, providing an indication that the data leak was legitimate, but Twitter says that the data was gathered via a variety of publicly available sources.
Royal Mail Group warned of disruptions in international export services and stopped accepting parcels for international delivery after a LockBit “cyber incident” caused severe disruption to export services.
The FCC launched a proceeding to strengthen data breach notification regulations for telecommunications companies to ensure faster reporting and to harmonize federal rules with states and other sectors.
Surveyed organizations reporting a 61% drop in ransomware attacks but the average cost of ransomware attacks remains high, even as study shows increasing complacency among organizations in keeping vital safety measures in place.










