The news of Google’s own Salesforce hack is also accompanied by a warning that there is now more clear evidence that ShinyHunters and Scattered Spider have formally joined forces, and that ShinyHunters is escalating to launching a leak site to put added pressure on its data breach victims.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
A data breach stemming from a third-party customer service database has affected European airlines Air France and KLM Royal Dutch Airlines.
When surveys show that 70% of SOC analysts experience burnout that adversely impacts their home lives, and 24% of CISOs are actively looking to leave their positions, we can't afford to dance around this topic or sugarcoat our reality.
Networking gear manufacturer Cisco has disclosed that a data breach stemming from a voice phishing (vishing) attack targeting a third-party CRM system leaked customer information.
French luxury giant Chanel has experienced a third-party data breach stemming from the ongoing Salesforce voice phishing campaign by ShinyHunters, affecting over a dozen companies.
A blog post by Nvidia’s Chief Security Officer David Reber refutes accusations made by the Chinese government of a backdoor in the company's AI chips that can be used as a remote kill switch.
What OpenAI described as a "short-lived experiment" is now over, as the company will no longer allow Google and other search engines to index certain types of ChatGPT conversations.
In today’s threat landscape, security professionals aren’t short on signals. Rather, they’re drowning in them. From endpoint telemetry to user activity to cloud platform events, we’re collecting more indicators than ever before. Despite the volume of alerts, or perhaps because of them, organizations still struggle to detect threats early and accurately.
St. Paul, Minnesota, Hit by Major Cyber Attack, State of Emergency Declared, National Guard Deployed
St. Paul, Minnesota’s state capital, was hit by a major cyber attack, prompting the declaration of a state of emergency, the deployment of the National Guard, and an FBI response.
As government agencies and critical infrastructure sectors increasingly adopt Internet of Things (IoT) devices to enhance operational efficiency, they inadvertently expand their attack surfaces. Proliferation of wireless technologies introduces significant new vulnerabilities.










