Infosecurity News

#InfosecurityOnline: Prepare for the Worst-Case Scenario to Build Resiliency
In a landscape of unpredictable cyber-risk, organizations must prepare for the worst-case cyber-scenario

NSA: Patch These 25 CVEs Exploited by Chinese Attackers
New advisory lists multiple bugs in remote access tools

#InfosecurityOnline: Beware of Malicious URLs and Rogue Redirects
How attackers are still utilizing URLs and what the victims can do

Pfizer Exposes Data on Hundreds of Prescription Drug Users
Pharma giant misconfigured cloud storage bucket

Major Data Breach at Ohio School District
Personal data of faculty, staff, and students exposed in data breach at Toledo Public Schools

#InfosecurityOnline: Tackling the Growing Scourge of Insider Threats
Tackling insider threats is now more important than ever

Iranian Millionaire Jailed for Violating US Sanctions
US imprisons CEO of payment platform that facilitated prohibited transactions for Iranian nationals

Morgan Stanley Fined $60m Over Data Disposal
Failure to properly oversee decommissioning of data centers lands Morgan Stanley a hefty fine

#InfosecurityOnline: How to Implement Effective Cloud Security
What best practices have emerged to secure the cloud environment?

IoT Security Foundation Launches Vulnerability Disclosure Platform
IoT vulnerabilty disclosure platform will enable vendors and researchers to resolve flaws

Orgs Struggling to Secure SaaS Applications Following Shift to the Cloud
Two-thirds of IT pros have less time to secure SaaS applications

Modern Attacks Include Supply Chain "Hopping" and Reversing Agile Environments
Modern attacks use supply chain island hopping and target digitally transformed businesses

Albion Online Forum Breach Exposes User Info
Admins says hacker got hold of emails and hashed passwords

#InfosecurityOnline: The Role of Data in Predicting Human Behaviors
How far can data go in identifying, understanding and predicting human behaviors?

US Indicts GRU Officers for NotPetya, Olympics Attacks and More
DoJ lists Sandworm team’s destructive attacks since 2015

UK: Russian GRU Hackers Targeted Tokyo Olympics
NCSC reveals Sandworm hackers may have been planning sabotage

Cyber-Attack on Mississippi Schools Costs $300,000
Board of Yazoo County School District votes to pay company $300,000 to recover files encrypted by threat actors

Instagram's Handling of Children's Data Under Investigation
EU’s leading GDPR regulator investigates Instagram for allegedly failing to protect children’s data

Waze Vulnerability Lets Attackers Track and Identify Users
Flaw in traffic-dodging app allows threat actors to track users and find out where they are going

Attacks on WAFs Triple in Size as Ransom Demands Re-Emerge
Large attacks on web application firewalls re-emerge in 2020



