Data Breach Today

JANUARY 4, 2021

Ransomware, Phishing Incidents, Vendor Hacks Prevail Hacking incidents, including ransomware and phishing attacks, as well as security incidents involving vendors dominated the federal tally of major health data breaches in 2020.

Data breaches 333

Data breaches Phishing Ransomware Security 333

Krebs on Security

OCTOBER 13, 2020

Worst in terms of outright scariness is probably CVE-2020-16898 , which is a nasty bug in Windows 10 and Windows Server 2019 that could be abused to install malware just by sending a malformed packet of data at a vulnerable system. CVE-2020-16898 earned a CVSS Score of 9.8 (10 10 is the most awful).

Security 312

Security Cybersecurity IT 312

Data Breach Today

FEBRUARY 5, 2021

data breaches in 2020 isn't all good news; it reflects that hackers are changing their tactics, says James Lee of the Identity Theft Resource Center, who offers an analysis of the center's new data breach report. James Lee of the Identity Theft Resource Center Discusses Reasons Behind Breach Decline The decline in the total number of U.S.

Data breaches 279

Data breaches IT 279

Krebs on Security

MAY 12, 2020

” For example, Satnam Narang from Tenable notes that two remote code execution flaws in Microsoft Color Management ( CVE-2020-1117 ) and Windows Media Foundation ( CVE-2020-1126 ) could be exploited by tricking a user into opening a malicious email attachment or visiting a website that contains code designed to exploit the vulnerabilities.

Security 276

Security Risk Access IT 276

Data Breach Today

MARCH 15, 2021

public schools faced a record number of cyber incidents in 2020, with over 400 attacks reported. Experts Say Increase Owes to Lack of Funding, Virtual Learning U.S.

Cybersecurity 363

Cybersecurity IT 363

Dark Reading

MAY 30, 2023

Targeted attacks against Saudi Arabia and other Middle East nations have been detected with a tool that's been in the wild since 2020.

118

118

Data Breach Today

MARCH 17, 2021

intelligence agency reports conclude that Russia and Iran tried to interfere in the 2020 presidential election via disinformation campaigns, but found "no indication that any foreign actor attempted to alter any technical aspect of the voting process," including voting results.

331

331

Data Breach Today

JANUARY 27, 2021

Researchers Say Pandemic Triggered Surge in Activity The number of distributed denial-of-service attacks launched in 2020 surpassed 10 million, up from 8.5 million in 2019, according to NetScout's Atlas Security Engineering and Response Team.

Security 306

Security 306

Data Breach Today

JULY 22, 2021

Justice Department for his alleged role in a July 2020 hack of Twitter and additional incidents involving TikTok and Snapchat. Spanish Police Arrested UK Citizen Joseph O'Connor at Request of US Prosecutors A U.K. citizen was arrested in Spain Wednesday at the request of the U.S. This is the third arrest in the Twitter case so far.

290

290

Krebs on Security

SEPTEMBER 8, 2020

Among the chief concerns for enterprises this month is CVE-2020-16875 , which involves a critical flaw in the email software Microsoft Exchange Server 2016 and 2019. “We have seen the previously patched Exchange bug CVE-2020-0688 used in the wild, and that requires authentication. . We’ll likely see this one in the wild soon.

Security 249

Security Ransomware Authentication IT 249

Krebs on Security

APRIL 14, 2020

Near the top of the heap is CVE-2020-1020 , a remotely exploitable bug in the Adobe Font Manager library that was first detailed in late March when Microsoft said it had seen the flaw being used in active attacks. Further reading: Qualys breakdown on April 2020 Patch Tuesday. SANS Internet Storm Center on Patch Tuesday.

Security 257

Security Libraries Authentication IT 257

Data Breach Today

JANUARY 5, 2021

Panel of Experts Discusses How Technology Can Mitigate Large-Scale Global Fraud What compliance lessons can be learned from major fraud cases in 2020, including the Goldman Sachs bribery case, the Wirecard mass corruption case and the Novartis bribery case? A panel of experts offers in-depth analysis.

Compliance 271

Compliance 271

Krebs on Security

APRIL 16, 2021

13, 2020, someone uploaded a suspected malicious file to VirusTotal , a service that scans submitted files against more than five dozen antivirus and security products. “In August 2020, a U.S.-based 13, 2020 someone uploaded a file with that same name and file hashes. Image: VirusTotal.com.

Security 276

Security Authentication Cybersecurity Access 276

Data Breach Today

MARCH 16, 2021

intelligence agency reports conclude that Russia and Iran tried to interfere in the 2020 presidential election, but their attempts to manipulate votes proved unsuccessful. But Attempts to Manipulate Votes, Change Outcome Were Unsuccessful U.S.

Security 279

Security Access 279

Data Breach Today

OCTOBER 13, 2020

Blackbaud, Magellan Health Incidents Trigger Numerous Breach Notifications Hacking incidents involving ransomware attacks continue to dominate the 2020 health data breach tally, with incidents affecting two companies - Blackbaud and Magellan Health - accounting for numerous breach notifications by their clients.

Data breaches 317

Data breaches Ransomware 317

Krebs on Security

MARCH 10, 2020

Recorded Future warns exploit code is now available for one of the critical bugs Redmond patched last month in Microsoft Exchange ( CVE-2020-0688 ), and that nation state actors have been observed abusing the exploit for targeted attacks. CVE-2020-0852 is one just four remote execution flaws Microsoft patched this month in versions of Word.

Security 259

Security IT 259

Data Breach Today

MARCH 5, 2021

Proceeds Boosted via Big Game Hunting, Data Leaking, Hitting Healthcare Sector Ransomware dominated the online-enabled crime landscape in 2020, some security experts say, thanks to the massive profits it's been generating and the relative ease of use for attackers - including support from a burgeoning cybercrime-as-a-service market.

Ransomware 279

Ransomware Security Marketing IT 279

Data Breach Today

FEBRUARY 13, 2020

Coronavirus Will Not Alter Plans for Event in San Francisco While public health concerns over the spread of the coronavirus are leading to the cancellation of some international events, the RSA Conference 2020 will proceed as scheduled in San Francisco Feb.

293

293

Data Breach Today

FEBRUARY 17, 2020

Cybersecurity Infrastructure and Security Agency has released its cybersecurity plan for the run-up to the 2020 presidential election, outlining the agency's role as a facilitator that will assist federal, state and local agencies in protecting critical election infrastructure. CISA Describes Its Role as Security Facilitator The U.S.

Cybersecurity 279

Cybersecurity Security IT 279

Data Breach Today

MARCH 10, 2020

WatchGuard's Corey Nachreiner on Threat Report's Top 3 Predictions New ransomware variants are targeting managed service and cloud service providers: This is one of the predictions made by WatchGuard Technologies for 2020. CTO Corey Nachreiner discusses the top three predictions.

Ransomware 264

Ransomware Cloud 264

Krebs on Security

DECEMBER 8, 2020

Microsoft today issued its final batch of security updates for Windows PCs in 2020, ending the year with a relatively light patch load.

Security 278

Security Risk IT 278

Data Breach Today

MARCH 25, 2020

A Guide to Video Interviews With Thought Leaders at This Year's Event At RSA Conference 2020 in San Francisco, Information Security Media Group's editorial team conducted more than 130 video interviews with industry thought leaders. Here are the highlights.

Information Security 213

Information Security Security 213

Data Breach Today

MARCH 2, 2020

Hal Lonas of OpenText Shares Cybersecurity Predictions Webroot just released its 2020 Threat Report. How has the landscape changed, and what cybersecurity predictions are made for 2020? Hal Lonas of OpenText shares insights and outlines the next round of research into artificial intelligence and machine learning.

Artificial Intelligence 165

Artificial Intelligence Cybersecurity IT 165

Krebs on Security

JANUARY 14, 2020

As first reported Monday by KrebsOnSecurity, Microsoft addressed a severe bug ( CVE-2020-0601 ) in Windows 10 and Windows Server 2016/19 reported by the NSA that allows an attacker to spoof the digital signature tied to a specific piece of software.

Security 221

Security Authentication Access IT 221

Data Breach Today

FEBRUARY 18, 2020

"The Human Element" is the theme of the RSA Conference 2020, but there are plenty of technology-rich topics in store for attendees, including session tracks that focus on election security, open source tools, product security and anti-fraud. Britta Glade, a conference director, previews the event.

Security 165

Security 165

Data Breach Today

MARCH 5, 2020

For 2020, the panel focused on such topics as facial recognition, election integrity and the never-ending crypto wars, while giving shout-outs to bitcoin and blockchain.

Blockchain 235

Blockchain Privacy 235

Data Breach Today

FEBRUARY 13, 2023

Here's Where Risk Management Is in 2023 This discussion on risk management emphasizes the challenges of implementing effective risk management practices in the real world, using the pandemic as a global example of risk management.

Risk 130

Risk 130

Data Breach Today

MARCH 6, 2020

ForeScout's Ellen Sundra on Security Priorities and Challenges It's relatively easy to list an enterprise's cybersecurity priorities for 2020. But who owns them? What are the hurdles to completing these projects? These can be tougher questions to answer, says Ellen Sundra of ForeScout.

Security 179

Security Cybersecurity IT 179

Security Affairs

MAY 28, 2021

Researchers at industrial cybersecurity firm Claroty have discovered a high-severity vulnerability in Siemens PLCs, tracked as CVE-2020-15782 , that could be exploited by remote and unauthenticated attackers to bypass memory protection. Claroty’s blog post describes the PLC sandbox and the role CVE-2020-15782 could play in an attack.

Cybersecurity 144

Cybersecurity Access Security Information Security 144

Security Affairs

JANUARY 3, 2021

Data from major cyber security firms revealed that tens of billion records have been exposed in data breaches exposed in 2020. Below a list of top incidents: There were a number of major data breaches that took place in 2020, in many cases stolen records flooded the cybercrime underground and were used credential stuffing attacks.

Data breaches 129

Data breaches Security Archiving Passwords 129