California State Comptroller’s office leaked details of 9,000 people after a Microsoft 365 email account of an Unclaimed Property Division employee was hacked in a phishing attack.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
Recent research shows that one third of enterprises lose more than 10% of their associated technology assets when offboarding workers, and 42% experience unauthorized access to SaaS applications and cloud resources.
According to a new report, cyber threats facing telehealth services has increased exponentially during the pandemic. Nevertheless, the healthcare industry’s cyber resiliency has improved dramatically.
The 2019 Information Security Forum (ISF) Threat Horizon report contains information security risks that illustrate the importance, if not urgency, of updating cybersecurity measures fit for Fourth Industrial Revolution technologies.
A ransomware attack on fintech firm Marquis Software Solutions has impacted at least 74 banks and credit unions across multiple states, leaking customer data of over 400,000 people.
Fear of Russian hackers infiltrating voting machines in the last U.S. presidential election has led to a new bill to enlist hackers to find vulnerabilities.
The integration of AI into cybersecurity has evolved significantly. Initially, AI assistants primarily supported threat research and rapid intelligence processing,...
Indian cryptocurrency exchange platform WazirX has suffered a security breach that allowed the suspected North Korean Lazarus group to steal $230 million worth of crypto assets.
Threat actors exploited Log4Shell vulnerability on unpatched VMware servers to gain access, move laterally, deploy malware, and exfiltrate sensitive information.
Microsoft announced a breach where they uncovered misconfigured security rules in one internal database that exposed 250 million customer service records for almost whole of December.










