Recent security breach at password manager LastPass does not appear to be an immediate threat to the encrypted vaults that customers use to store their passwords, but the hackers may have made off with source code and proprietary information.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
A security breach at numerous Polish water treatment plants enabled state-sponsored threat actors to manipulate industrial control systems across five cities.
Hackers exfiltrated not just internal game cheats, but the source code that underpins this system for certain Riot Games titles, including League of Legends. This creates the possibility of new game cheats and exploits being developed.
A security breach at Tata Electronics has leaked confidential proprietary data, including designs and specifications from major technology companies such as Apple and Tesla.
A security breach at France’s national bank registry has compromised the personal information of 1.2 million people, after a threat actor downloaded a database containing the information of all bank accounts in the country.
F5 has disclosed that an August breach exposed source code and customer data to what it calls "nation-state hackers." The company has not made an official attribution, but third-party security researcher sources are linking the attack to China's UNC5221.
New report from IANS Research and Artico Search shows that the average security budget is only up by 6% this year, representing a 65% decrease in cybersecurity spending from the prior year.
A security flaw at the U.K.’s business registry, Companies House, exposed the personal information of business executives and allowed unauthorized alteration.
Simply confirming that phone numbers are linked to WhatsApp accounts can be a security risk. Confirming that a number is registered and active makes it more valuable and more of a priority to spammers, scammers and hackers. The security flaw can also expose someone using the app in a country where it is banned.
A security flaw in “Claude in Chrome” enables any Chrome extension, including those without permissions, to execute privileged commands, steal data, and perform agentic actions.










