Canadian Military, Police Impacted by Data Breach at Moving Companies

November 21, 2023 at 08:39AM The Canadian government has reported a data breach involving two moving and relocation services firms contracted by the government. The breach exposed personal information of present and former public service employees, as well as members of the Canadian Armed Forces and Royal Canadian Mounted Police. The government is offering credit … Read more

EU Tightens Cybersecurity Requirements for Critical Infrastructure and Services

November 15, 2023 at 04:05PM The European Union’s NIS2 Directive aims to enhance the security and resilience of network and information systems in the EU. Organizations operating within the EU must comply with the directive, which includes training and awareness, cybersecurity risk management measures, reporting obligations, and the use of EU certification schemes. Noncompliance can … Read more

Azerbaijan Agencies Sign Cyber-Partner Deals

November 13, 2023 at 01:30PM Azerbaijan and Turkmenistan have signed a memorandum of understanding (MOU) to cooperate on cybersecurity issues, particularly in the field of information security. The specific details of the agreement were not disclosed. This partnership follows reports of targeted attacks on Azerbaijani businesses and Israel’s assistance in training cyber specialists. Similar collaborations … Read more

Medical Company Fined $450,000 by New York AG Over Data Breach

November 9, 2023 at 11:49AM US Radiology Specialists, a major private radiology group, has been fined $450,000 by the attorney general of New York over a data breach caused by a ransomware attack. The breach compromised the personal and health information of nearly 200,000 patients, including 92,000 New Yorkers. The attackers gained access to the … Read more

Beware, Developers: BlazeStealer Malware Discovered in Python Packages on PyPI

November 8, 2023 at 08:27AM A set of malicious Python packages, disguised as obfuscation tools, have been discovered on the Python Package Index (PyPI) repository. The packages contain a malware called BlazeStealer, which allows attackers to gain control over compromised systems. The campaign began in January 2023 and includes eight packages. The malware can steal … Read more

American Airlines pilot union hit by ransomware attack

November 3, 2023 at 01:51PM The Allied Pilots Association (APA), a labor union representing American Airlines pilots, has disclosed a ransomware attack on their systems. The union is working to restore their systems and determine the full impact of the incident. It is unclear if pilots’ personal information was compromised. This follows previous data breaches … Read more

Stanford schooled in cybersecurity after Akira claims ransomware attack

October 30, 2023 at 10:53AM Stanford University is investigating a cybersecurity incident after being attacked by the Akira ransomware group. The group claimed to have stolen 430 GB of data. The attack appears to be limited to the Department of Public Safety. This is the third ransomware attack on Stanford in recent years. Akira is … Read more

CISO Skills in a Changing Security Market: Are You Prepared?

October 30, 2023 at 03:08AM CISOs today require a combination of technical and business skills. They must be critical thinkers who can contribute to strategic business discussions. They need to educate and communicate effectively with boards and decision-makers. CISOs benefit from diverse perspectives gained through different industries and roles. They must also promote a multi-layered … Read more

Japanese Watchmaking Giant Seiko Confirms Personal Data Stolen in Ransomware Attack

October 26, 2023 at 10:39AM Japanese watchmaker Seiko has confirmed a data breach caused by a ransomware attack that occurred a few months ago. The attack resulted in the compromise of customer, business partner, and employee data. The ransomware group, BlackCat and ALPHV, claimed responsibility for the attack and leaked over 2TB of information when … Read more

Seiko says ransomware attack exposed sensitive customer data

October 25, 2023 at 12:44PM Seiko, the Japanese watchmaker, has confirmed a Black Cat ransomware attack that led to a data breach compromising sensitive customer, partner, and personnel information. 60,000 personal data items were compromised across multiple departments. The cybercriminals claimed to have stolen production plans, employee passport scans, and confidential technical schematics of Seiko … Read more