Oracle Health data breach stemming from a legacy server affected multiple hospitals and healthcare organizations, potentially leaking sensitive patient information.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
The two data breaches are separate issues, but the common theme is criticism of Oracle's forthrightness about what exactly happened and what victims should expect going forward.
There are significant gaps in virtual appliance security, and many products are distributed with known, exploitable, and fixable vulnerabilities and on outdated or unsupported operating systems.
October is National Cyber Security Awareness Month and the time to focus on improving cyber security awareness training and boosting overall cyber security resilience.
73% of organizations intensified software supply chain security efforts to address risks posed by open source code used by 80% of the companies, a Synopsys/ESG study found.
In today’s corporate environment, everyone has become a privileged user accustomed to quick access and swift responses generated in seconds across platforms, vendors, and many different systems. A rigid and rule-bound access management system is no longer sufficient for companies that want to maintain a competitive edge.
The term protestware recently made global news when organizations in Russia and Belarus were attacked by malicious code that wiped their computers’ files. This malware was distributed through the popular open source JavaScript library, node-ipc, and was introduced by its maintainer in retaliation for Russia's invasion of Ukraine.
At least one major credit card fraud gang has switched focus to building out fake dating and customer support websites since 2019, tricking payment processors into granting them access, and running charges against stolen credit cards.
OpenAI did not comment on the Modal Labs incident specifically, but had previously released a statement indicating that the AI agent had ranged further afield than previously realized and had breached accounts at four other services in addition to the known Hugging Face incident.
As entire workforces remain in remote working conditions, the danger of insider threats is as unmistakable as ever. Learn how an insider threat could manifest itself and what organizations can do about it.










