Cybersecurity News
Six Flags to Pay $36M Over Collection of Fingerprints
Illinois Supreme Court rules in favor of class action against company’s practice of scanning people’s fingers when they enter amusement parks.
22 June 2021
Did Companies Fail to Disclose Being Affected by SolarWinds Breach?
The SEC has sent out letters to some investment firms and publicly listed companies seeking information, Reuters says.21 June 2021
Software-Container Supply Chain Sees Spike in Attacks
Attackers target companies' container supply chain, driving a sixfold increase in a year, aiming to steal processing time for cryptomining and compromise cloud infrastructure.21 June 2021
Wegmans Exposes Customer Data in Misconfigured Databases
Cleanup in aisle "Oops": The supermarket chain said that it misconfigured two cloud databases, exposing customer data to public scrutiny.
21 June 2021
Data Leaked in Fertility Clinic Ransomware Attack
Reproductive Biology Associates says the data of 38,000 patients may have been compromised in the April cyberattack.21 June 2021
Bugs in NVIDIA’s Jetson Chipset Opens Door to DoS Attacks, Data Theft
Chipmaker patches nine high-severity bugs in its Jetson SoC framework tied to the way it handles low-level cryptographic algorithms.
21 June 2021
Baltimore County Public Schools' Ransomware Recovery Tops $8M
The school district has spent seven months and a reported $8.1 million recovering from the November attack.21 June 2021
Embryology Data Breach Follows Fertility Clinic Ransomware Hit
Approximately 38,000 of RBA's customers had their embryology data stolen by a ransomware gang.
21 June 2021
How Cyber Safe is Your Drinking Water Supply?
Amid multiple recent reports of hackers breaking into and tampering with drinking water treatment systems comes a new industry survey with some sobering findings: A majority of the 52,000 separate drinking water systems in the United States still haven't inventoried some or any of their information technology systems -- a basic first step in protecting networks from cyberattacks.21 June 2021
Agent Tesla RAT Returns in COVID-19 Vax Phish
An unsophisticated campaign shows that the pandemic still has long legs when it comes to being social-engineering bait.
21 June 2021
iPhone Wi-Fi Crushed by Weird Network
… until you reset network settings and stop connecting to a weirdly named network, that is. FUD is spreading. iOS Wi-Fi demolition is not.
21 June 2021
Are Ransomware Attacks the New Pandemic?
Ransomware has been a problem for decades, so why is government just now beginning to address it?21 June 2021
State‑sponsored or financially motivated: Is there any difference anymore?
What does the increasingly fuzzy line between traditional cybercrime and attacks attributed to state-backed groups mean for the future of the threat landscape?
The post State‑sponsored or financially motivated: Is there any difference anymore? appeared first on WeLiveSecurity
21 June 2021
Attackers Find New Way to Exploit Google Docs for Phishing
Tactic continues recent trend by attackers to use trusted cloud services to send and host malicious content.18 June 2021
Accidental Insider Leaks Prove Major Source of Risk
Research reports highlight growing concerns around insider negligence that leads to data breaches.18 June 2021
This Week in Database Leaks: Cognyte, CVS, Wegmans
Billions of records were found exposed this week due to unprotected databases owned by major corporations and third-party providers.18 June 2021
11 Security Certifications to Seek Out This Summer
The more you know, the more you grow. The Edge takes a fresh look at leading security certifications that can help advance your career.
18 June 2021
What’s Making Your Company a Ransomware Sitting Duck
What's the low-hanging fruit for ransomware attackers? What steps could help to fend them off, and what’s stopping organizations from implementing those steps?
18 June 2021
Carnival Cruise Cyber-Torpedoed by Cyberattack
This is the fourth time in a bit over a year that Carnival’s admitted to breaches, with two of them being ransomware attacks.
18 June 2021
Week in security with Tony Anscombe
5 steps to take to minimize damage from a ransomware attack – The double-edged sword of OSINT – Watch out for vishing scams
The post Week in security with Tony Anscombe appeared first on WeLiveSecurity
18 June 2021