Recent research shows that one third of enterprises lose more than 10% of their associated technology assets when offboarding workers, and 42% experience unauthorized access to SaaS applications and cloud resources.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
Universal Healthcare Services switched to a manual system and diverting patients after a Ryuk ransomware attack crippled its systems. Four patients allegedly died during the attack.
Microsoft Power Apps appears to list all data types as public unless the default settings are changed. The data leak exposed several coronavirus tracing and vaccination portals, as well as at least one job applicant database that contained social security numbers.
By actively choosing to encrypt all data, all files, no matter where they are stored, we can finally build security into the only piece which has value – the data.
Companies globally are facing a shortage in cybersecurity talent that could be managed through training with the four Es, i.e. education, efficiency, embracing and engagement, in mind.
Mandiant analyzed data published from ransomware attacks and discovered that they exposed sensitive OT information that could be used to analyze targets to craft sophisticated attacks.
A joint cybersecurity advisory warns of Iranian hackers using brute-force attacks to compromise critical infrastructure to obtain initial access for sale to other threat actors.
The FBI says hackers who scraped credit card data by injecting malicious PHP code on an online checkout page were targeting U.S. businesses since September 2020.
A QR code phishing campaign exploits Microsoft Sway to distribute URLs to credential-stealing websites that also collect multi-factor authentication codes and session cookies.
New survey shows how well remote workers are adhering to their company’s security protocols in order to protect confidential information during the pandemic.










