CSO Magazine

MAY 28, 2021

The Russian hacking group behind the supply chain attack that poisoned software updates for the SolarWinds Orion platform has been perfecting its email-based attacks over the past few months to plant backdoors inside organizations. Sign up for CSO newsletters. ]. Sign up for CSO newsletters. ].

CSO 105

CSO Government Marketing Hacking 105

CSO Magazine

APRIL 5, 2022

million past and present customers of its investment services, as names, brokerage portfolio values and account numbers were compromised in a data breach. In an SEC filing made on Monday, Cash App parent company Block, Inc., said that it was working to contact roughly 8.2

Hacking 118

Hacking Data breaches Passwords Accountability 118

Security Boulevard

OCTOBER 16, 2022

Former Uber CSO Joe Sullivan was found guilty of obstructing a federal investigation in connection with the attempted cover-up of a 2016 hack at Uber, NIST and Microsoft say that mandatory password expiration is no longer needed but many organizations are still doing it, and how fake executive profiles are becoming a huge problem for […].

Passwords 52

Passwords CSO Hacking Accountability 52

CSO Magazine

MARCH 1, 2022

Late last week, a Twitter account purporting to represent Anonymous wrote that “The #Anonymous collective has taken down the website of the #Russian propaganda station RT News.” Cyber Partisans of Belarus claim train hacks. Presumed hacktivists hacked Russian EV charging stations. AgainstTheWest targeted Russian interests.

DDOS 115

DDOS Media Hacking CSO 115

CSO Magazine

AUGUST 11, 2022

On August 10, the firm stated that an employee’s credentials were compromised after an attacker gained control of a personal Google account where credentials saved in the victim’s browser were being synchronized. Bad actors published a list of files from this security incident to the dark web, Cisco added.

Hacking 92

Hacking Accountability Cybersecurity 92

Security Affairs

FEBRUARY 22, 2021

In response to the malicious activity, the company permanently banned the account used by the attacker and deployed new “safeguards” to prevent similar attacks in the future, but ClubHouse was not able to ensure that it will not happen again. Lets talk about the Clubhouse 'hack' which wasn't. ” reported Bloomberg.

CSO 82

CSO Internet Internet Surveillance 82

SecureWorld News

JUNE 26, 2023

While these Wells Notices are official investigations, they are a sign of a potential intent to investigate the CISO and CFO. Barton Kalsu and CISO Tim Brown have both been with Austin, Texas-based SolarWinds since before the breach that impacted at least nine federal agencies and approximately 100 organizations.

CISO 88

CISO CSO Data privacy Cyber Risk 88

CyberSecurity Insiders

MAY 16, 2022

By Amanda Fennell, CSO and CIO, Relativity. Security programs must shoulder accountability for setting employees in different roles up for success. Effective learning management systems are available that take into account the human attention span. In certain circumstances, anyone, even a security professional, can be hacked.

CSO 131

CSO Passwords Password Management Accountability 131

CSO Magazine

JUNE 8, 2022

As Microsoft points out, “When we look at hacked accounts, more than 99.9% Microsoft will soon change the mandate to multi-factor authentication (MFA) with changes to Microsoft 365 defaults. don’t have MFA, making them vulnerable to password spray, phishing and password reuse.

Authentication 112

Authentication Passwords Phishing Accountability 112

SC Magazine

MARCH 10, 2021

A hacking collective compromised roughly 150,000 internet-connected surveillance cameras from Verkada, Inc., Such revelations create intrigue as to whether a more insidious actor could perform a similar hack in order to conduct industrial espionage by spying on development and production activity.

Surveillance 129

Surveillance IoT Accountability Passwords 129

Malwarebytes

MARCH 23, 2022

Both are saying that the criminal hacking group acquired access to a user account with access to some customer data. In an article on Okta’s website , CSO David Bradbury provided a timeline of the incidents which took place in January. Okta provided a more detailed update later in the day, which we have summarised below.

CSO 85

CSO Engineering Passwords VPN 85

The Security Ledger

FEBRUARY 19, 2019

And, in our second segment, Sam Bisbee the CSO of the firm ThreatStack joins us to talk about last month's hack of the PEAR open source package manager and why data deserialization attacks are a growing threat to projects that use open source components. Vijay Balasubramaniyan of Pindrop joins us to talk about it.

Authentication 40

Authentication CSO Artificial Intelligence Social Engineering 40

CSO Magazine

APRIL 6, 2021

The 2020 Verizon Data Breach Investigations Report (DBIR) notes that vulnerabilities accounted for nearly 20% of hacking breaches. Hackers are constantly on the lookout for poorly configured or unsecured systems. After all, when one system is left unsecured, it often means that others have been left unsecured as well.

Data breaches 87

Data breaches Cyber threats Accountability Technology 87

CSO Magazine

OCTOBER 6, 2022

These include a new Dark Web Insights tool that provides a breakdown of compromised passwords, a standalone authenticator app for enabling account multi-factor authentication (MFA), and a low-cost starter plan for small businesses. Password manager vendor Dashlane has announced updates to its suite of enterprise offerings.

Authentication 75

Authentication Small Business Password Management Passwords 75

McAfee

NOVEMBER 10, 2021

Under the guidance of Dan Meacham, VP of Global Security and Corporate Operations and CSO/CISO, the multi-billion dollar organization transitioned from on-premises data centers to the cloud in 2012. MVISION CNAPP helps me keep my system administrators and developers accountable for what they are doing. Unacceptable levels of risk.

Data breaches 93

Data breaches Risk CSO Media 93

Errata Security

JULY 19, 2020

Recently, Twitter was hacked. CEO : "I read about that Twitter hack. The CEO can't hire an excellent CSO unless they have enough competency to judge the qualifications of the CSO, and enough competency to hold the CSO accountable for the job they are doing. In this post, I describe how CEOs actually think.

CSO 51

CSO Cybersecurity Ransomware Hacking 51

The Last Watchdog

MARCH 25, 2019

If I go to a CSO and say, ‘We can secure your APIs,’ he’ll say, ‘Great, can you also find them for me?’ ” observed Dwivedi, Data Theorem’s founder. The problem wasn’t a hack, but a broken API. Instead, what it did was allow anyone with a usps.com account to modify a wildcard search without authentication permissions.

Digital transformation 154

Digital transformation Software Data breaches Authentication 154

McAfee

NOVEMBER 12, 2020

Everyone in the company and on the board should be responsible and accountable for good cybersecurity practices. In July 2020, we saw key high-profile Twitter accounts compromised. Everyone is responsible and accountable. It is not only the CISO, CSO or CIO’s responsibility to care and do the right thing.

Cybersecurity 61

Cybersecurity Government Risk Penetration Testing 61

Security Affairs

AUGUST 29, 2018

These evils include hacking, identity theft, online surveillance, and cyberstalking. We all know the dangers associated with hacking, identity theft, and internet surveillance, thanks to Facebook and other social networking platforms. Similarly, these hackers can hack your devices too.

Identity Theft 81

Identity Theft Internet Internet Surveillance 81

The Security Ledger

OCTOBER 29, 2018

» Related Stories Podcast Episode 112: what it takes to be a top bug hunter Podcast Episode 113: SAP CSO Justin Somaini and Election Hacks – No Voting Machines Required! Both those act as insulation against the worst possible hacking scenarios. Read the whole entry. »

Artificial Intelligence 40

Artificial Intelligence CSO Engineering Risk 40

SC Magazine

JUNE 11, 2021

After all, there are some mistakes you should absolutely never make – missteps that can cost your business its reputation, and get you into hot water with consumers, the hacking community or legal and regulatory authorities. There are important considerations when taking such an action.

Data breaches 101

Data breaches Media Identity Theft CSO 101

Spinone

DECEMBER 26, 2018

Consequently, when different sophisticated hacking techniques, types of assaults, and malware are learned, your innocent employees become your cyber security partners. What are the benefits of cyber security awareness trainings? You will create cyber awareness among your staff, as well as users, partners, customers.

Security Awareness 40

Security Awareness Risk Cyber threats Cyber Risk 40