NIST releases first encryption tools to resist quantum computing

August 14, 2024 at 03:38PM The U.S. National Institute of Standards and Technology (NIST) has unveiled three encryption standards to withstand potential cyber threats from quantum computing technology. Based on the meeting notes, the U.S. National Institute of Standards and Technology (NIST) has released the first three encryption standards specifically designed to withstand potential cyberattacks … Read more

460k Impacted by Kootenai Health Ransomware Attack

August 14, 2024 at 06:57AM Healthcare provider Kootenai Health in Idaho reported a data breach affecting over 460,000 individuals’ personal and health information. The breach, linked to the 3AM ransomware gang, involved unauthorized access to the network and the exfiltration of sensitive data. Affected individuals are receiving 12 months of credit and identity protection services. … Read more

Hackers leak 2.7 billion data records with Social Security numbers

August 11, 2024 at 12:28PM Approximately 2.7 billion records of personal information for individuals in the United States were exposed on a hacking forum, revealing names, social security numbers, all known physical addresses, and potential aliases. It seems like the meeting notes are discussing a serious data breach involving almost 2.7 billion records of personal … Read more

UK IT provider faces $7.7 million fine for 2022 ransomware breach

August 7, 2024 at 02:54PM The UK’s ICO has provisionally decided to fine Advanced Computer Software Group Ltd (Advanced) £6.09M for failing to protect the personal information of tens of thousands in a ransomware attack. The breach impacted 83,000 people and various healthcare products. The final decision is pending Advanced’s response, potentially totaling $7.74 million. … Read more

Cencora confirms patient health info stolen in February attack

August 1, 2024 at 12:37PM Pharmaceutical company Cencora has verified that patients’ protected health information and personally identifiable information (PII) was compromised in a cyberattack in February. Based on the meeting notes, it appears that Pharmaceutical giant Cencora has confirmed that patients’ protected health information and personally identifiable information (PII) was exposed in a February … Read more

Data pilfered from Pentagon IT supplier Leidos

July 24, 2024 at 09:40AM Internal documents stolen from IT services provider Leidos Holdings, contracted with the US Department of Defense and other agencies, have been leaked. The files are said not to contain “sensitive customer data,” but the incident emphasizes the need for stronger security measures. The company, with a workforce of 47,000, and … Read more

Verizon Subsidiary Settles With FCC for $16M Over Three Data Breaches

July 24, 2024 at 08:39AM Telecommunications provider TracFone Wireless has agreed to a $16 million civil penalty to settle investigations into three data breaches involving the compromise of customer information. The breaches, occurring between Jan 2021 and Jan 2023, exploited APIs and led to unauthorized access to customer information. TracFone will implement an information security … Read more

How to Securely Onboard New Employees Without Sharing Temporary Passwords

July 23, 2024 at 06:28AM Specops Software addresses the inherent security risks in traditional employee onboarding methods by offering a First Day Password feature with Specops uReset. This tool eliminates the need to share initial passwords and empowers new employees to create secure passwords through a verified system. By using this method, organizations can significantly … Read more

End-user cybersecurity errors that can cost you millions

July 22, 2024 at 10:39AM In today’s fast-paced organizations, end-users’ seemingly harmless actions may lead to catastrophic cybersecurity incidents. Human error accounts for 95% of incidents, costing an average of USD 4.45 million globally. Common missteps include allowing unauthorized device access, misdelivery of sensitive information, password reuse, exposing remote interfaces, and misusing privileged accounts. Strict … Read more

Data of Millions of mSpy Customers Leaked Online

July 15, 2024 at 10:06AM Over 310GB of data from spyware maker mSpy, including 2.4 million unique emails, was leaked online and obtained by data breach notification site Have I Been Pwned. The leaked data includes user information, attachments, and support tickets from high-profile individuals. mSpy, advertised as a parental control application, has been misused … Read more