Tax information of five million Bulgarians were exposed in a massive data breach at country's national tax agency. Not only do the government need to worry about the leaked data, they are also subjected to GDPR penalties.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
Cyber insurance providers wants to be sure that the company is proactively managing their cybersecurity risk and one of the requirements is to implement multi-factor authentication (MFA) for all applications and APIs. what is the fastest and most cost-effective path to connecting all your self-hosted apps to your identity platform and enabling MFA?
Norfund, the sovereign wealth fund of Norway, has lost over $10 million to BEC scam and it appears that the scammers had spent months inside the networks leading to the fraud.
Cosmetics giant Estée Lauder is notifying customers of a ten-month-old data breach stemming from Oracle EBS that leaked the personal information of its employees.
Since patching is problematic and traditional perimeter security is ineffective for Ripple20 vulnerabilities, Zero Trust security may be the right answer.
A hybrid cloud environment is the reality for most organizations. Unfortunately, this set up can quickly create issues around both accessibility and security due to the challenges in managing identity across vastly different systems.
There's a common misconception that the AI label automatically makes a cybersecurity solution better when that's far from the truth. Organizations don't need AI or ML tools to improve cybersecurity.
Security researchers discovered a command and control (C2) server for MajikPOS and Treasure Hunter POS malware variants with over 167,000 stolen credit cards worth over $3.3 million.
Google's Threat Analysis Group has announced it is providing free USB security keys to a collection of politicians, activists and other high-risk individuals likely to be targeted by nation-state hackers.
UK Police have arrested a 17-year-old suspected Scattered Spider member accused of the MGM hack that disrupted casinos and hotels in Las Vegas on September 12, 2023, costing over $100 million in recovery.










