IT Governance

FEBRUARY 21, 2024

402,437,094 known records breached in 240 publicly disclosed incidents Welcome to this week’s global round-up of the biggest and most interesting news stories. At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

IT Governance

JULY 31, 2019

University of Alabama discovers 10-year-old account breach (1,400). Pennsylvania-based software firm and healthcare provider accuse each other of data theft (unknown). TX-based Wise Health reports data breach caused by phishing attack (35,899). Libraries in Onondaga Co., Data breaches.

Data breaches 111

Data breaches Ransomware Personal data Government 111

KnowBe4

JUNE 20, 2023

1 Root Cause of Data Breaches Verizon's DBIR always has a lot of information to unpack, so I'll continue my review by covering how stolen credentials play a role in attacks. So, what does the report say about the most common threat actions that are involved in data breaches?

Data breaches 73

Data breaches Phishing Security awareness Ransomware 73

ForAllSecure

JUNE 16, 2021

With that an attacker couldn't necessarily intercept the data, but they could query the peloton API to get user data that they weren't supposed to. In other words, Peloton suffered from an API vulnerability that could potentially lead to a massive data breach. Okay, that's starting to get very personal.

Authentication 52

Authentication Communications IoT Security 52

ForAllSecure

JUNE 16, 2021

With that an attacker couldn't necessarily intercept the data, but they could query the peloton API to get user data that they weren't supposed to. In other words, Peloton suffered from an API vulnerability that could potentially lead to a massive data breach. Okay, that's starting to get very personal.

Authentication 52

Authentication Communications IoT Security 52

ForAllSecure

JANUARY 19, 2022

You might not think of it as a major aspect of security and yet, stolen credentials are really the key to data breaches today. So by that, I mean, if your developer libraries are available, it's easy to do. One of the eight required domains in the current CISSP certification process is Identity and Access Management, or IAM.

Passwords 52

Passwords Authentication Access Data breaches 52