Healthcare organizations are vulnerable to data breaches due to insecure file-sharing practices. Metomic reports that 25% of publicly shared files and 68% of private files shared externally contain Personal Identifiable Information (PII). 77% of private files shared internally hold sensitive data. Failing to update or remove access permissions leaves organizations …
IBM’s 2024 Cost of a Data Breach Report shows a 10% rise in the global average cost of breaches, now at $4.88 million. However, organizations using AI and automation saved $2.2 million on average, highlighting the financial benefits of these technologies. As breaches grow more disruptive, AI plays a crucial …
A Fortune 50 company paid $75 million to the Dark Angels ransomware group, setting a new record for ransom payments. Zscaler ThreatLabz revealed massive payout, which broke the previous record of $40 million held by CNA. The company hasn’t been officially named, many speculate it’s Cencora, a pharmaceutical giant hit …
Walmart’s Cyber Intelligence Team has discovered an unknown PowerShell backdoor linked to a new variant of the Zloader/SilentNight malware. This sophisticated backdoor provides threat actors with access to systems for reconnaissance and deployment of additional malware. It employs advanced obfuscation techniques, making detection challenging. The backdoor’s discovery highlights a broader …
HealthEquity has revealed that a data breach at a third-party vendor compromised the personal and health information of 4.3 million individuals. The breach, identified on March 25, exposed protected health information (PHI) and personally identifiable information (PII) stored in an unstructured data repository outside of HealthEquity’s core systems. Attackers gained …
Senators Ron Wyden and Ed Markey have called on the Federal Trade Commission (FTC) to investigate the car data privacy practices of major car manufacturers. Their investigation revealed that companies like Hyundai, General Motors, and Honda have been sharing and selling drivers’ data, including location information, often through deceptive consent …
The city of Columbus, Ohio, is working diligently to restore its systems following a significant cybersecurity incident. The attack has disrupted multiple resident-facing IT services, although essential services like 911 and employee payroll remain operational. The city first alerted the public through a brief Facebook statement, and officials have since …
In the second quarter of 2024, ransomware and business email compromise (BEC) attacks constituted 60% of all cyber incidents, as reported by Cisco Talos. Technology was the most targeted sector, accounting for 24% of incidents, reflecting a 30% increase from the previous quarter. Attackers are focusing on tech firms as …
Experienced cybercriminals are moving away from large ransomware-as-a-service (RaaS) platforms due to increased law enforcement actions and internal scams like the AlphV/BlackCat gang’s exit scam. These criminals are now creating their own ransomware using leaked tools. Despite the change, experts warn that ransomware and extortion incidents are unlikely to decrease. …
The Department of Health and Human Services (HHS) faces significant cloud security vulnerabilities, as highlighted in a recent audit by the Office of Inspector General (OIG). The report reveals weaknesses in a dozen security controls and inadequacies in HHS’ cloud inventory processes. Critical issues include a lack of multifactor authentication …
