A third-party data breach on Morgan Stanley’s account maintenance contractor Guidehouse leaked customers' data via an Accellion hack in Jan 2021 and reported half a year later.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
Most businesses are concerned about cloud security. However, only a few adopted specialized online cloud security capabilities, while the majority were using inappropriate tools.
Most businesses are more vulnerable to emerging risks such as malware and ransomware attacks than traditional threats yet there are coverages gaps in their cyber insurance policy.
Palo Alto Networks’ researchers discovered that 96% of cloud containers on public registries were prone to vulnerabilities and misconfigurations that could result in a supply chain attack.
Technical ability and mindset, Python coding language, and the CISSP certification are among the most desired skills for cyber security jobs, SpecOps' study found.
Employees took cybersecurity shortcuts during the remote working period believing that they weren't as important and that their IT departments would protect them and handle their faults.
Study showed that most popular home routers contain known vulnerabilities in their firmware, with no security updates over the last 12 months for 46 out of 172 router models.
Ransomware gang Cl0p posted a list of victims of its MOVEit cyber attacks. Among what it calls the 'first batch' of its targets are both federal and state government agencies, major banks and investment firms, and universities.
The damage tally from the massive MOVEit data breach continues to go up, as a US government contractor is reporting that 8 to 11 million records of health data have been exposed.
German banks Deutsche Bank AG, ING, Postbank, and Commerzbank’s subsidiary Comdirect, have leaked customer data via third-party service provider MOVEit data breach.










