A U.S. nuclear agency was among the victims of the SharePoint vulnerability chain, which was exploited to compromise over 54 organizations across the United States, Europe, and Asia.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
The Federal Bureau of Investigation (FBI) warns about AI-generated phishing text or deepfake audio messages impersonating senior U.S. officials targeting current and former state and federal officials and their contacts.
The USPTO says that an API vulnerability was present between February 2020 and March 2023, causing a data leak of about 61,000 private residential addresses attached to patent filings.
The Uber breach that affected 57 million people shows the near complete lack of care at the company with regard to customer data – as well as the company’s inability to learn from previous security mishaps. Are customers already desensitized after hearing data breach after data breach or will this be a wake-up call?
The Uber data breach resulted in the theft of a variety of internal company information, and stemmed from a third-party vendor. The thieves also got away with source code and employee personal information.
The Unique Identification Authority of India (UIDAI) has denied reports that the Aadhaar data breach has made masses of biometric data available to external players for a miniscule sum. Has big government in India simply overreached itself as far as its vision for this database is concerned?
A known state-sponsored hacking group from China has been sanctioned by the US Treasury Department for a campaign of cyber attacks over the past decade, and has been named by the UK's National Cyber Security Centre (NCSC) as the culprit in a 2021 cyber espionage campaign against parliamentarians.
Backed by funding of £210 million, the UK's new Government Cyber Action Plan aims to improve both cyber defenses for and ease of access to the nation's public services.
The UK financial regulator found that cyber insurance firms "mostly" weathered the stress test, in the sense that only a small number reported concluding the scenario with an amount of funds on hand that would put them beneath national solvency capital requirements.
The UK government has dropped its controversial plan to mandate an encryption backdoor into Apple's cloud storage systems, according to a statement by US Director of National Intelligence Tulsi Gabbard.










