Barnes & Noble was hit by a suspected ransomware attack that prevented customers from accessing their libraries and exposed their personal information, including email addresses and transaction history.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
Barracuda ESG zero-day attacks by Chinese state-sponsored threat actors compromised multiple U.S. state, local, and tribal government email servers. Over 200,000 private and government organizations worldwide depend on Barracuda email security gateway (ESG) appliances.
The British Broadcasting Corporation (BBC) has notified the UK's Information Commissioner's Office (ICO) and the Pensions Regulator of an employee data breach affecting 25,000 BBC Pension Scheme members.
Supply chain security is in the news once again as a cyber attack on Zellis, a UK-based payroll provider, has led to the compromise of numerous organizations. Among the biggest names impacted by the attack are the BBC, British Airways and major UK drugstore chain Boots.
One of the most significant barriers for cybercriminals when trying to compromise a user account is Multi-Factor Authentication (MFA). But what happens when users are overrun by notifications? Enter MFA bombing attacks to exploit MFA fatigue.
$1.3 million BEC attacks on three large financial services companies in U.K. and Israel shows how far cyber criminals are willing to go and what they are capable of.
While compliance leaders must have an abundance of technical prowess, truly successful compliance executives today are the ones that seamlessly blend hard with soft skills.
Retail behemoth Bed, Bath & Beyond said it suffered a data breach after a hacker compromised an employee in a targeted phishing attack that granted them access to data storage devices.
Beijing’s Justice Bureau says that Wangshendongjian Technology has provided it with the capability to capture mobile phone numbers and email addresses associated with the sending device. AirDrop sharing encryption has been in question for some time.
The Chinese hackers were able to dwell for at least several months in 2023 and captured about 5% to 10% of all of the emails sent by the Belgian State Intelligence Service during that time.










