What's new arround internet
| Src | Date (GMT) | Titre | Description | Tags | Stories | Notes |
 |
2022-08-10 02:00:00 | U.S. Federal Court breach reveals IT and security maturation issues (lien direct) | In late July 2022, Politico ran a story detailing how the U.S. Department of Justice was investigating a recent data breach of the federal court system, which dated back to early 2020. The chair of the House Judiciary Committee, Jerrold Nadler (D-NY), described the breach as a “system security failure of the U.S. Courts' document management system.”On the same day, July 28, 2022, the U.S. Government Accountability Office (GAO) published the report GAO-22-105068 “U.S. Courts: Action Needed to Improve IT Management and Establish a Chief Information Officer.” The GAO report described systemic shortcomings in the administration of the U.S. court system, including the lack of a CIO, to oversee the substantive infrastructure.To read this article in full, please click here | Data Breach | ||
 |
2022-08-09 10:08:23 | Twilio Suffers Phishing Based Data Breach (lien direct) | Twilio, the communications giant, has confirmed that hackers accessed customer data after successfully tricking employees into handing over their corporate login credentials. The company, based in San Francisco, allows users to build voice and SMS capabilities, such as two-factor authentication (2FA), into applications, said that it became aware that someone gained “unauthorised access” to information […] | Data Breach | ||
|
2022-08-09 09:25:56 | How to stay safe from cybercriminals and avoid data breaches (lien direct) | A data breach is any person's nightmare. It can affect you mentally and financially, and an 100% unhackable device or account necessitates taking precautionary measures. Hackers target small and medium businesses as they don't have the resources to pay for cybersecurity tools and network upgrades to protect their data against the latest cybercriminals' tricks as […] | Data Breach | ||
 |
2022-08-09 07:24:25 | Twilio Suffers Data Breach After Employees Fall Victim to SMS Phishing Attack (lien direct) | Customer engagement platform Twilio on Monday disclosed that a "sophisticated" threat actor gained "unauthorized access" using an SMS-based phishing campaign aimed at its staff to gain information on a "limited number" of accounts. The social-engineering attack was bent on stealing employee credentials, the company said, calling the as-yet-unidentified adversary "well-organized" and "methodical | Data Breach Threat | ||
 |
2022-08-09 00:00:00 | Twitter data breach affects 5.4M users (lien direct) | >Categories: PrivacyTwitter has confirmed a data breach on July 2. (Read more...) | Data Breach | ||
 |
2022-08-08 21:29:35 | How to find out if you are involved in a data breach -- and what to do next (lien direct) | Here's a guide highlighting the tools you can use to determine if your account is at risk. | Data Breach | ||
 |
2022-08-08 18:16:46 | (Déjà vu) Twilio discloses data breach that impacted customers and employees (lien direct) | >Communications company Twilio discloses a data breach after threat actors have stolen employee credentials in an SMS phishing attack. Communications company Twilio discloses a data breach, threat actors had access to the data of some of its customers. The attackers accessed company systems using employee credentials obtained through a sophisticated SMS phishing attack. Twilio is […] | Data Breach Threat | ||
 |
2022-08-08 14:17:51 | Email marketing firm hacked to steal crypto-focused mailing lists (lien direct) | Email marketing firm Klaviyo disclosed a data breach after threat actors gained access to internal systems and downloaded marketing lists for cryptocurrency-related customers. [...] | Data Breach Threat | ||
|
2022-08-08 10:37:06 | Twilio discloses data breach after SMS phishing attack on employees (lien direct) | Cloud communications company Twilio says some of its customers' data was accessed by attackers who breached internal systems after stealing employee credentials in an SMS phishing attack. [...] | Data Breach | ||
|
2022-08-05 22:08:30 | Twitter confirms zero-day used to access data of 5.4 million accounts (lien direct) | >Twitter confirmed that the recent data breach that exposed data of 5.4 million accounts was caused by the exploitation of a zero-day flaw. At the end of July, a threat actor leaked data of 5.4 million Twitter accounts that were obtained by exploiting a now-fixed vulnerability in the popular social media platform. The threat actor offered […] | Data Breach Vulnerability Threat | ||
|
2022-08-05 12:00:00 | Twitter confirms zero-day used to expose data of 5.4 million accounts (lien direct) | Twitter has confirmed a recent data breach was caused by a now-patched zero-day vulnerability used to link email addresses and phone numbers to users' accounts, allowing a threat actor to compile a list of 5.4 million user account profiles. [...] | Data Breach Vulnerability Threat | ||
|
2022-08-03 15:22:35 | APIs attacked in 94% of companies in past year (lien direct) | Salt Security, the API security company, today released the Salt Labs State of API Security Report, Q3 2022. In its latest edition, the bi-annual report found that 94% of survey respondents experienced security problems in production APIs in the past year, with 20% stating their organisations suffered a data breach as a result of security […] | Data Breach | ||
 |
2022-08-03 12:50:01 | New Data Breach Extortion Attack Begins with a Fake Duolingo or MasterClass Subscription Scam (lien direct) |
|
Data Breach | ||
 |
2022-08-02 22:30:39 | Black Kite: Cost of data breach averages $15 million (lien direct) | >With the median cost per incident coming in at $130,000, most data breaches do not cross the $1 million threshold. | Data Breach | ||
 |
2022-08-01 13:00:00 | How to Prepare for and Respond to a Data Privacy Breach (lien direct) | >Before I started covering cybersecurity, I thought the term ‘breach’ had a single meaning — that an attacker stole data from a computer system. I also thought all the different versions of the word meant the same thing. However, I’ve since learned the nuances and differences between a breach, a data breach and a data […] | Data Breach | ||
|
2022-08-01 10:39:47 | (Déjà vu) Congress Warns of US Court Records Data Breach (lien direct) | Lawmakers on the Hill revealed last week that a cyber-attack on the US justice system had compromised a public document management system. Jerrold Nadler (D-NY), chairman of the House Judiciary Committee, revealed the discovery at a hearing on oversight in the Justice Department. Nadler disclosed that three hostile actors had breached the Public Access to Court […] | Data Breach | ||
|
2022-08-01 07:44:00 | Global cost of data breach reaches record high of $4.35 million: IBM (lien direct) | The global average cost of data breaches reached an all-time high of $4.35 million in 2022 compared with $4.24 million in 2021, according to a new IBM Security report. About 60% of the breached organizations raised product and services prices due to the breaches.The annual report, conducted by Ponemon Institute and analyzed and sponsored by IBM Security, is based on the analysis of real-world data breaches experienced by 550 organizations globally between March 2021 and March 2022. According to the report, about 83% of the organizations have experienced more than one breach in their lifetime, with nearly half of the costs reported to be incurred more than a year after the breach.To read this article in full, please click here | Data Breach | ||
|
2022-08-01 05:07:00 | BrandPost: Solving the Challenges of Remediating Configuration Settings (lien direct) | A data breach can result in catastrophic consequences for any organization. Ensuring that your IT environment is safe from cyber threats can be a real challenge.To keep intruders out of your networks and data, you need more than up-to-date guidance. You also need to continually assess system configurations for conformance to security best practices and harden thousands of individual settings in your environment.But where do you start?Begin with recognized security best Practices The CIS Critical Security Controls (CIS Controls) are a prioritized set of actions that mitigate the most common cyber attacks. They translate cyber threat information into action. The CIS Benchmarks are secure configuration recommendations designed to safeguard systems against today's evolving cyber threats. Both CIS best practices provide organizations of all sizes with specific and actionable recommendations to enhance cyber defenses. Both are also mapped to or referenced by a number of industry standards and frameworks like NIST, HIPAA, PCI DSS, and more.To read this article in full, please click here | Data Breach Threat | ||
 |
2022-07-29 19:34:45 | 911 Proxy Service Implodes After Disclosing Breach (lien direct) | 911[.]re, a proxy service that since 2015 has sold access to hundreds of thousands of Microsoft Windows computers daily, announced this week that it is shutting down in the wake of a data breach that destroyed key components of its business operations. The abrupt closure comes ten days after KrebsOnSecurity published an in-depth look at 911 and its connections to shady pay-per-install affiliate programs that secretly bundled 911's proxy software with other titles, including “free” utilities and pirated software. | Data Breach | ||
|
2022-07-29 16:44:16 | To settle with the DoJ, Uber must confess to a cover-up. And it did. (lien direct) | The 2016 Uber data breach affected the personal information of 57 million people. And then the company covered it all up. | Data Breach | Uber Uber | |
 |
2022-07-29 15:43:19 | Big Questions Remain Around Massive Shanghai Police Data Breach (lien direct) | Why was PII belonging to nearly 1 billion people housed in a single, open database? Why didn't anyone notice it was downloaded? | Data Breach | ||
 |
2022-07-29 12:02:50 | OneTouchPoint Discloses Data Breach Impacting Over 30 Healthcare Firms (lien direct) | Mailing and printing services vendor OneTouchPoint has disclosed a data breach impacting more than 30 healthcare providers and health insurance carriers. Headquartered in Hartland, Wisconsin, OneTouchPoint offers print, marketing execution and supply chain management services to organizations in the healthcare sector. | Data Breach | ||
 |
2022-07-28 16:00:00 | Checklist 289: Breaches, Edits, and Heat (lien direct) | >IBM reports on the cost of a data breach - and it impacts you even if you haven't been involved in one. Plus: The latest iOS 16 beta shows that Apple is listening. | Data Breach | ||
 |
2022-07-28 00:00:00 | 2022 semble être sur la cible de l'année la plus basse des violations signalées par les grandes sociétés américaines dans les six premiers mois de 2022, les grandes sociétés américaines [de revenus> 2 milliards] ont déclaré le moins de violations de données au cours des cinq dernières années. 2022 seems to be on target for the lowest year of reported breaches by large US corporationsIn the first six months of 2022, large [Revenue >2bn] US corporations reported the fewest data breaches in the past five years.Read More (lien direct) |
âThe number of data breaches reported in the first 6 months of 2022 has put this year on track to be the lowest year of reports in the last 5 years for large [Revenue >2bn] US corporations. By looking at the rate at which data breach events have been reported so far this year, we predict that the number of events reported is expected to be15-20% of the number of breaches reported in 2021âPossible causes:Increased reporting delays: But the time to report has shown a decreasing trend over the last 4 yearsGenuine improvement in cyber defenses preventing data exfiltration Reduction in reporting requirements, or public disclosure preventionIn this analysis we look at all the reported cyber events which involve data exfiltration (data breach), allocated to the year in which the event started. Comparing the number of events reported at each point during the year then gives us an indication for the rate which can be compared between years.The data and populationThe data collected represents public reports of data breaches from US companies with an annual revenue above $2bn (Excluding public services).The data used includes breach events reported up to end of Q2 2022It is this area where the cyber reporting requirements are highest, there is a high level of data available. It is important to note that this will not be all events which occur, only those disclosed, but by looking for changes in the behavior we can look at the potential causes.Overall Breach CountAs of the end of Q2 2022, we have seen 18 breach reports of events occurring in 2022 compared to the 160 cyber events reported from 2021, and 292 from 2020. While we are only 50% through 2022, the number of events reported so far from the first half is 25% of the 2021 total reported at the same point through 2021. To fully compare 2022 against prior years we need to take into account a number of factors:Events not yet reported: some events have occurred but have not yet been reported either because they have not yet been discovered, or because the have been discovered but not publicly disclosedEvents not yet occurred: events which have yet to occur, in the second half of 2022 (and have not yet been reported)âââHow the year unfoldsTo explore how 2022 is emerging, we can look at the rate at which events are being reported. That is to show not just the total report to date, but how the total number of events reported in a year has emerged from the start of the year. To do this we plot the cumulative number of events reported vs the number of days from the start of each incident year.What we see is an indication of how many incidents have been reported from each year have been reported after the same number of days. A steep curve indicates a greater number of incidents reported per month.** Note that the event counts are lower because we do not have exact disclosure dates for all events.ââFrom the chart we can see that the number of reported cyber incidents after 6 months (180 days) of experience is low for 2022 compared with all other years since 2015. This leads us to believe that 2022 is on track to have a very low number of overall incidents reported.There could be a few explanations for thisReporting Delay: The time taken to report incidents has increased in 2022, and there will be a correction in the later part of the yearCybersecurity Investment: The overall number of incidents reported will be lower due to improvements in security postureRegulatory Action: the overall number of incidents reported will be lower due to changes in how the events are reported (or required to be reported)âReporting DelayTo consider if the low reported number of events in 2022 is being driven by an increase in a delay between a cyber event starting and it being reported, we have looked at the trend over the last 10 yearsThe chart below shows the trend over the last 10 years.âââThere has been a steady reduction in median reporting delay from 204 days in 2017 to 63 days | Data Breach Prediction Cloud | ★★★ | |
 |
2022-07-27 20:12:10 | Uber\'s former head of security faces fraud charges after allegedly covering up data breach (lien direct) | The former Chief Security Officer of Uber is facing wire fraud charges over allegations that he covered up a data breach that saw hackers steal the records of 57 million passengers and drivers. Read more in my article on the Hot for Security blog. | Data Breach | Uber Uber | |
|
2022-07-27 17:21:51 | Average Data Breach Costs Soar to $4.4M in 2022 (lien direct) | Call it a 'cyber-tax': Those costs are usually passed on to consumers, not investors, as compromised businesses raise prices for goods and services. | Data Breach | ||
|
2022-07-27 14:10:49 | IBM Security: Cost of Data Breach Hitting All-Time Highs (lien direct) | A study commissioned by IBM Security says the global average cost of a data breach reached an all-time high of $4.35 million and warned that the absence of zero trust principles at studied organizations are pushing those costs even higher. | Data Breach | ||
 |
2022-07-27 11:34:53 | Twitter Data Breach From Former Gartner Cybersecurity Analyst (lien direct) | Following the news that Twitter suffered a data breach that saw 5.4 million users' details leaked online please find a comment below from Cyber security experts. The comment covers how the attack opens the door to high-profile attacks on famous users, with the likely outcome of crypto scam efforts, and the further threats that can […] | Data Breach | ||
|
2022-07-27 10:32:19 | T-Mobile agrees to pay customers $350 million in settlement over data breach (lien direct) | >T-Mobile has proposed to settle its 2021 data breach by paying $350 million, along with an incremental spend of $150 million in security. | Data Breach | ||
 |
2022-07-27 10:00:00 | Fallout from massive Shanghai Police data breach reverberates on dark web (lien direct) | >A surge in Chinese activity on a popular data breach site followed the June 30 post offering information on 1 billion residents of China. | Data Breach | ||
|
2022-07-27 09:47:11 | Cost of Data Breach Reaches $4.35m on Average Globally (lien direct) | The average cost of a data breach globally has reached a new high of $4.35m. This figure has increased by 13% since 2020, according to IBM. The IBM Cost of a Data Breach Report was compiled from interviews with 550 organisations in 17 countries that were breached between March 2021 and March 2022. The firm’s […] | Data Breach | ||
 |
2022-07-27 09:00:00 | data breach (lien direct) | Pas de details / No more details | Data Breach | ||
|
2022-07-27 04:01:55 | Average cost of data breach surpasses $4 million for many organizations (lien direct) | >Beyond the immediate costs of a data breach, almost half of the total costs occur more than a year after the incident, says IBM Security. | Data Breach | ||
|
2022-07-27 04:01:00 | What\'s New in the 2022 Cost of a Data Breach Report (lien direct) | >The average cost of a data breach reached an all-time high of $4.35 million this year, according to newly published 2022 Cost of a Data Breach Report, an increase of 2.6% from a year ago and 12.7% since 2020. | Data Breach | ||
 |
2022-07-27 03:00:00 | Is any organisation risk and data breach free? (lien direct) | >I walked into a business the other day. After a long conversation about the client's need for cybersecurity and the implementation of the ISO27001 security standard, we talked about their risk appetite. “We don’t accept any risk. We’re risk-averse” said the CEO. But, is this achievable? Given the complexity of our modern world, with diversity […]… Read More | Data Breach | ||
|
2022-07-27 01:46:42 | Wawa Agrees to Payment, Security Changes for \'19 Data Breach (lien direct) | A Pennsylvania-based convenience store chain will pay $8 million to several states over a 2019 data breach that involved some 34 million payment cards, authorities announced Tuesday. | Data Breach | ||
|
2022-07-26 11:34:02 | Uber Admits Covering Up 2016 Data Breach That Exposed 57M Users\' Data (lien direct) | Uber has admitted to covering up a massive cybersecurity attack that took place in October 2016, exposing the confidential data of 57 million customers and drivers, as part of a settlement with the US Department of Justice in order to avoid prosecution. More on the story here: https://www.theverge.com/2022/7/25/23277161/uber-2016-data-breach-settlement-cover-up | Data Breach | Uber Uber | |
|
2022-07-26 10:29:13 | Data Stolen in Breach at Security Company Entrust (lien direct) | Entrust suffered a data breach last month and the security company has confirmed that the attackers have stolen some files. | Data Breach | ||
|
2022-07-25 16:31:13 | Lock down your Neopets account: Data breach being investigated (lien direct) | >We take a look at claims that virtual pet favourite, Neopets, has had its user database breached, and what you can do about it. | Data Breach | ||
 |
2022-07-25 16:20:53 | T-Mobile to cough up $500 million over 2021 data breach (lien direct) | Technically, it's not a fine, and the lawyers will get a big chunk of it. But it still adds up to a half-billion-dollar data breach. | Data Breach | ||
|
2022-07-25 13:20:58 | Uber Settles With Federal Investigators Over 2016 Data Breach Coverup (lien direct) | Uber has entered a non-prosecution agreement to resolve a criminal investigation into the manner in which the company handled a 2016 data breach that impacted 57 million users and drivers. | Data Breach | Uber | |
|
2022-07-25 09:49:03 | Neopets Confirm Data Breach (lien direct) | As reported last week, over 69 million users of the site Neopets, a popular virtual pet website, may have had their data compromised in the first known US mega breach of the year. The company took to Twitter to confirm the news. Neopets is owned by Viacom. The Tweet said: “Neopets recently became aware that […] | Data Breach | ||
|
2022-07-25 00:51:25 | T-Mobile Settles to Pay $350M to Customers in Data Breach (lien direct) | T- Mobile has agreed to pay $350 million to customers affected by a class action lawsuit filed after the company disclosed last August that personal data like social security numbers had been stolen in a | Data Breach Hack | ||
|
2022-07-22 18:00:35 | Hacker selling Twitter account data of 5.4 million users for $30k (lien direct) | Twitter has suffered a data breach after threat actors used a vulnerability to build a database of phone numbers and email addresses belonging to 5.4 million accounts, with the data now up for sale on a hacker forum for $30,000. [...] | Data Breach Vulnerability Threat | ||
|
2022-07-21 12:24:11 | (Déjà vu) Neopets Data Breach Exposes Personal Data Of 69 Million Members (lien direct) | It has been reported that the virtual pet website Neopets has suffered a data breach leading to the theft of source code and a database containing the personal information of over 69 million members. Neopets is a popular website where members can own, raise, and play games with their virtual pets. Neopets recently launched NFTs […] | Data Breach Guideline | ||
|
2022-07-21 09:51:49 | (Déjà vu) Hacker Selling Data of Over 69 Million Neopets Members (lien direct) | Virtual pet website Neopets has suffered from a data breach leading to the theft of a database and source codes containing the sensitive information of over 69 million members. The Neopets website allows members to own, raise, and play games with their virtual pets. The popular website recently launched NFTs that will be used as […] | Data Breach Guideline | ||
|
2022-07-20 18:45:38 | Neopets data breach exposes personal data of 69 million members (lien direct) | Virtual pet website Neopets has suffered a data breach leading to the theft of source code and a database containing the personal information of over 69 million members. [...] | Data Breach Guideline | ||
 |
2022-07-20 10:00:00 | Everything to know about SaaS data security (lien direct) | This blog was written by an independent guest blogger. Software-as-a-service (SaaS) is becoming the dominant way enterprises access digital tools. While this delivery method has many advantages, from scalability to consistent security updates, it can create significant vulnerabilities if developers and users aren’t careful. Organizations today use more than 100 SaaS apps on average, and that figure keeps climbing. As these tools play an increasingly central role in how businesses operate, IT professionals on both sides must consider SaaS data security more carefully. SaaS data security impacts both providers and clients SaaS data security is so crucial because any vulnerabilities can affect multiple parties. If a breach occurs in a SaaS provider’s database, it could expose their commercial clients’ data. The infamous SolarWinds hack, which affected thousands of Orion users, highlights how one SaaS vulnerability can give attackers access to multiple organizations. When an event like this occurs, attackers could directly affect software users by stealing their data or installing malware on their devices. These steps, in turn, could affect their customers if they use the software to manage consumers’ data. All these ripple effects would come back to the SaaS provider in the form of lost trust and legal repercussions. Every party connected to SaaS can suffer considerable damage if a breach occurs. Consequently, all parties should take it seriously and the responsibility for improving security falls to both providers and users. Best practices for SaaS providers SaaS security begins with the companies that develop and sell the software. One of the most important steps for SaaS providers is to embrace the principle of least privilege. The only people, apps, and systems that should be able to access any data are those that absolutely need it. This will restrict lateral movement and make it easier to trace any potential breaches. Monitoring user activity is another important step. Logging all activity will reveal abnormalities that may signal an attempted attack, enabling faster responses. Automation is crucial here, as companies with fully deployed security automation identify breaches 55 days earlier and lose $1.49 million less than those without it on average. Encrypting all data both at rest and in transit will help further mitigate potential breaches. SaaS companies should also partner with reliable security vendors to offer users as much protection as possible. Similarly, SaaS providers can seek relevant security certifications. Certifications like the AICPA SOC 2 Type 2 offer assurance to customers that the company has met high standards for data security. This will both provide guidelines for reliable cybersecurity and attract more business. Best practices for SaaS users SaaS users can also take data security into their own hands. Since misconfiguration is the most common cloud vulnerability, the most important step is to address configuration gaps. IT teams must approach configuration carefully and frequently review SaaS permissions and processes to find and fix errors. Businesses should also look for trusted SaaS vendors. Just as SaaS providers should pursue security certifications, users should prefer to use software from companies that have these certifications. Reviewing providers’ data breach history and security | Data Breach Malware Vulnerability | ||
|
2022-07-19 10:00:00 | What roles do humans play in cyber breaches (lien direct) | This blog was written by an independent guest blogger. Data is the most valuable asset of any organization, and most employees have access to secure business data. This makes them the first line of defense against combating a cyber-attack. However, hackers target vulnerable employees with insecure devices and sophisticated techniques to access the company's network and compromise valuable data. Human error enables a vast majority of cybersecurity problems. Many employees are already aware of the dangers that their mistakes can pose. A study found that nearly 88% of all data breaches result from employee mistakes. In addition, 60% of cybersecurity professionals accepted that their staff is the weakest link in IT security. It is high time for organizations and employees to take measures to reduce the attack surface and ensure a robust cybersecurity culture. Why humans are the weakest link in any organization? The cybersecurity threat landscape is becoming complex and threatening even with practicing strict cybersecurity regulations and using emerging technologies. Against this growing threat landscape, 57% of businesses assume that their IT security team might become compromised, and the most significant threat against the cyber-attacks is their employees. Humans are the weakest link in any business organization and continue to drive data breaches. The Verizon Data Breach Incident Report 2022 finds that 82% of cyber breaches involved the human element. By human element, it is meant that a breach can occur because of clicking on a link in a phishing email, reusing the same old passwords, or using the internet without hiding their IP. For example, a notable venture capital firm, Sequoia Capital, got hacked in February 2021. The hacking incident occurred because employees fell victim to a phishing attack that exposed its investors' personal and financial information to third parties. Besides this, there are a few other reasons that make employees vulnerable: Inadequate software security Employees tend to be careless when they perform the same task regularly. It turns their work into something that focuses more on efficiency than carefulness. As a result, they start neglecting to follow proper security procedures and practices and often compromise the cybersecurity of the entire organization. They even neglect updates because they consume more time or the pop-ups are inconvenient, leaving software vulnerable to cyber-attacks. Moreover, some employees continue to use legacy software with known vulnerabilities. They typically use such software because they’re used to it - not because it has exclusive features. In addition, employees sometimes disable security update options because they think it hinders their work. Such actions compromise the entire security of the organization. Low security awareness Hackers easily install malware, spyware, or ransomware through vulnerable or careless employees. Most employees have low security awareness about the evolving cyber threats and attacks that expose them to malicious actors to access the company's data. Employees even use or download unauthor | Data Breach Malware Threat Guideline | ||
|
2022-07-16 04:07:33 | Checklist 287: Taking a Look at Lockdown Mode (lien direct) | >Apple's new Lockdown Mode fights back against mercenary spyware. Plus: a medical data breach and AirTag sounds explained. | Data Breach |
To see everything:
