Patch Now: Critical TeamCity Bug Allows for Server Takeovers

February 7, 2024 at 01:33PM JetBrains has issued a security patch for a critical vulnerability in its TeamCity On-Premises server, which could be exploited by remote attackers to gain control over the server. This impacts all versions from 2017.1 to 2023.11.2. Users are urged to update to the patched version or install a security patch … Read more

Verizon alerts 63k employees their details were leaked by an insider

February 6, 2024 at 02:05PM Verizon is notifying over 63,000 individuals, mostly employees, about a personal data leak due to an insider’s actions. The leak involved names, addresses, Social Security numbers, and other sensitive information. Most impacted are current employees, with steps being taken to offer credit monitoring and strengthen security measures in response. Summary: … Read more

Verizon insider data breach hits over 63,000 employees

February 6, 2024 at 11:02AM Verizon Communications warns of an insider data breach affecting nearly half its workforce, involving sensitive employee information. The breach, discovered in December 2023, exposed data of 63,206 employees, including names, addresses, SSNs, and compensation details. While customer data is unaffected, Verizon is enhancing security measures and providing identity theft protection … Read more

How the SEC’s Rules on Cybersecurity Incident Disclosure Are Exploited

February 5, 2024 at 10:22AM Data security remains a top challenge for businesses, with a rise in vulnerabilities and cyberattacks. The SEC’s new rules for publicly traded companies aim to address this, but threat actors are finding ways to exploit them, as seen in a recent ransomware incident. Public companies must prioritize cybersecurity, have robust … Read more

Blackbaud settles with FTC after that IT breach exposed millions of people’s info

February 2, 2024 at 04:20PM Blackbaud, facing criticism from the FTC for a data breach that exposed millions of people’s information, has agreed to strengthen its IT defenses. The settlement includes deleting unnecessary customer data, updating its data retention policy, and implementing enhanced security measures. The SEC and attorneys general have also secured settlements over … Read more

Managing the hidden risks of shadow APIs

February 1, 2024 at 10:07PM APIs are critical in the digital economy but can pose data security risks due to their proliferation. Shadow APIs and lack of visibility exacerbate these challenges. F5’s solution emphasizes inventory management, discovery, validation, and comprehensive visibility. Utilizing AI and ML, it offers intelligent risk mitigation and assists in unified management … Read more

FTC orders Blackbaud to boost security after massive data breach

February 1, 2024 at 05:25PM Blackbaud settled with the FTC after poor security and data retention led to a 2020 ransomware attack affecting millions of people. The company is ordered to improve security, delete unneeded customer data, and create an information security program. Blackbaud must also establish a data retention schedule and notify the FTC … Read more

Keenan & Associates Reports Data Breach Exposing Social Security Numbers of More Than 1.5M

January 29, 2024 at 06:02PM Approximately 1.5 million consumers’ sensitive personal data, including Social Security numbers and health information, was compromised in a data breach at Keenan & Associates. The breach, caused by an August 2023 cyberattack, has prompted an investigation by Console & Associates, P.C. Victims are urged to protect themselves and consider seeking … Read more

Israeli Government: Smallest of SMBs Hit Hardest in Cyberattacks

January 29, 2024 at 10:28AM Approximately 33,000 small and medium businesses in Israel were targeted by cyberattacks last year, 7,000 of which suffered significant damage. Data from the Small and Medium Business Agency at the Israeli Ministry of Economy and Industry revealed that 5% of surveyed businesses experienced cyberattacks. Smaller businesses with 5-20 employees and … Read more

Top 3 Data Breaches of 2023, and What Lies Ahead in 2024

January 29, 2024 at 10:06AM The rise of cloud migration, AI, and machine learning has accelerated data usage and storage, prompting heightened awareness of data security in 2023. Notably, the MOVEit breach affected over 62 million individuals, while the Indian Council of Medical Research and 23andMe breaches exposed significant data and heightened sensitivity. Accountability and … Read more