The FBI is warning that one of the world's most prolific and dangerous ransomware groups has now set its sights on the "airline ecosystem" of the region, and has already racked up successful cyber attacks against two major airlines.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
Cloud infrastructure provider Digital Ocean severed ties with the marketing automation provider Mailchimp after a security breach exposed its customer email addresses.
IBM's annual Cost of Data Breach report, created in conjunction with Ponemon Institute, shows no relief in sight for victims of breaches with a 10% jump in the global average cost on the year. The highest average cost per incident, $5.17 million, was incurred when the breached data was stored in public clouds.
Lloyd’s of London has issued a bulletin indicating that its cyber insurance products will no longer cover the fallout of cyber attacks exchanged between nation-states. This definition extends to operations that have "major detrimental impact on the functioning of a state."
Securing an organization’s unstructured data can be a significant challenge. Unstructured data is more difficult for an organization to monitor and track and is commonly in formats designed to move freely in and out of the organization.
Factoring External Attack Surface Management (EASM) into the equation means the math is clear for all. Insurance companies can better justify premium prices, while companies can demonstrate their cyber posture when applying for cybersecurity insurance.
76% of ransomware attacks in 2022 were tied to a known vulnerability that was made public between 2010 and 2019, and old vulnerabilities that were discovered as far back as 2015 are still commonly exploited.
New 4iQ report indicates that data breaches were up by over 420% from 2017, exposing a total of almost 15 billion identity records. Small businesses are being targeted much more frequently than previously thought and that even relatively tiny businesses are now on the menu for sophisticated hackers.
Internal documents indicate Microsoft entirely has its hands full addressing the security vulnerabilities rated "critical" and "important" that Mythos Preview has surfaced, with additional hundreds more rated "moderate" or lower forced into a deferred maintenance status until some undetermined future date.
Medical data leaks are among the fastest-growing segments of cyber crime, and for good reason. Health care systems tend to operate on outdated systems that have inadequate security elements.










