article thumbnail

National Safety Council data leak: Credentials of NASA, Tesla, DoJ, Verizon, and 2K others leaked by workplace safety organization

Security Affairs

User Table Schema | Source: Cybernews As a huge number of emails were leaked, platform users could potentially experience a surge in spam and phishing emails. It’s advisable for them to externally verify the information contained in emails and exercise caution when clicking links or opening attachments.

Passwords 137
article thumbnail

The Week in Cyber Security and Data Privacy: 29 January – 4 February 2024

IT Governance

Enforcement Uber fined €10 million for GDPR breaches The Dutch data protection authority, Autoriteit Persoonsgegevens, has fined Uber €10 million for failing to be transparent about its data retention practices and making it difficult for drivers to exercise their data privacy rights.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Username (and password) free login with security keys

Imperial Violet

This is an effective defense against phishing, phone number takeover, etc. Of course, there are other manufacturers who make security keys and, if it advertises “CTAP2” support, there's a good chance that it'll work too. But those Yubikeys certainly do. In that case one probably doesn't want to bother with a PIN etc.

Passwords 114
article thumbnail

Treating cybersecurity like workplace safety

CGI

When I worked with a major global chemical manufacturer, every meeting began with a PowerPoint presentation on safety, highlighting the importance of the topic. Conduct unannounced phishing exercises to test how susceptible your organization is to an attack (and train your employees to spot fake email messages!).

article thumbnail

Treating cybersecurity like workplace safety

CGI

When I worked with a major global chemical manufacturer, every meeting began with a PowerPoint presentation on safety, highlighting the importance of the topic. Conduct unannounced phishing exercises to test how susceptible your organization is to an attack (and train your employees to spot fake email messages!).

article thumbnail

Treating cybersecurity like workplace safety

CGI

When I worked with a major global chemical manufacturer, every meeting began with a PowerPoint presentation on safety, highlighting the importance of the topic. Conduct unannounced phishing exercises to test how susceptible your organization is to an attack (and train your employees to spot fake email messages!).

article thumbnail

2022 Cyber Security Review of the Year

IT Governance

Although Vladimir Putin and his sympathisers assured the world that they were simply conducting military exercises, the inevitable occurred on 24 February, when troops mobilised and war was declared. All signs pointed to a senior employee being tricked by a spear phishing or whaling scam.

Security 132