IT Governance

NOVEMBER 6, 2023

When MOVEit was hacked by the Russian Cl0p ransomware gang in May, email addresses and links to government employee surveys were compromised. While investigating the incident, it discovered that confidential consumer information had been accessed by an unauthorised third party.

Data Privacy 97

Data Privacy Privacy Libraries Security 97

eSecurity Planet

MARCH 27, 2023

A quarter were financially motivated, and three of those were linked to ransomware operations. Exploitation of enterprise IT zero-day vulnerabilities are continuing into 2023, led by a Fortra GoAnywhere zero-day that has been behind more than a hundred attacks by the Clop ransomware group.

Cloud 104

Cloud Ransomware Risk Access 104

IT Governance

NOVEMBER 19, 2018

Organisations must always have access controls in place to ensure employees can only view information that’s necessary for their job. Your employees are the ones following your policies and procedures, so they are directly responsible for keeping threats such as ransomware and phishing at bay. Manage user privileges.

Security 105

Security Data breaches Risk Phishing 105

Hunton Privacy

AUGUST 15, 2022

As part of the “access privileges” requirements under Section 500.7 The CISO’s obligation to report to the senior governing body ( e.g. , board of directors) has been expanded to include plans for remediating inadequacies and timely reporting on material cybersecurity issues or major cybersecurity events.

Financial Services 55

Financial Services Cybersecurity Risk Passwords 55

Data Protection Report

AUGUST 11, 2022

The proposed changes mark a turn by NYDFS toward more specific, granular and prescriptive requirements notably with respect to governance, risk assessments and asset inventories (detailed below). Governance. Asset inventories and Access Controls. conduct an independent audit or their cybersecurity program at least annually.

Cybersecurity 58

Cybersecurity Risk Passwords Compliance 58

The Security Ledger

DECEMBER 4, 2018

. » Related Stories As Election Threats Mount, Voting Machine Hacks are a Distraction Cryptojacking and MikroTik’s Bad-Feeling Feel Good Patch Story Iranians Indicted in SamSam Ransomware Scheme. And: you’ve heard of Business Email Compromise attacks but what about Business Service Impersonation scams?

Business Services 40

Business Services Ransomware Sales Data breaches 40