NFT marketplace OpenSea acknowledged a data breach after an employee of a third-party email delivery vendor downloaded email addresses and shared them with an unauthorized party.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
The hybrid cloud offers a flexible and multi-faceted solution that combines the best of the private and public cloud, but with that comes specialized security risks and protocols. PAM-as-a-service can address these unique challenges.
Microsoft says Russia conducted a cyber espionage campaign against Ukraine's allies, mainly NATO members, to collect crucial information in parallel with the ground invasion.
The cybersecurity strategies developed last year are already falling short. With distributed remote workforces now a business norm, companies need to change how they think about security and get their employees to partner with them.
The data breach took place at the BWI Airport Marriott near Baltimore. A social engineering attack was executed on a member of the hotel staff, who unwittingly granted access.
More than ten years later, DevSecOps is still more of an idea than an effective practice. There is a better way to defend your cloud environment, and you can do it in three steps.
Inside sources at Sky Mavis claim that the record-breaking Axie Infinity crypto theft from the company's Ronin bridge in March stems from a fake job offer made to one of the company's senior engineers.
The Russia-Ukraine conflict has seen cyber warfare enter the mainstream and the risk of spill-over into unrelated businesses remains a possibility. Businesses should review their existing backup and recovery strategies and cyber incident response plans or they risk getting caught in the cyber crossfire.
An account takeover hit Disneyland's Facebook and Instagram, and the company took some of its social media presence offline for a short period as it recovered.
Attackers exfiltrated sensitive data from thousands of websites, desktop, and mobile applications in a supply chain attack leveraging typo-squatting in popular NPM packages.









