Nation-state cyber attacks double in three years
ComputerWeekly, Alex Scroxton
“Nation states are devoting significant time and resources to achieving strategic cyber advantage to advance their national interests, intelligence-gathering capabilities and military strength through espionage, disruption and theft. Attempts to obtain IP data on vaccines and attacks against software supply chains demonstrate the lengths to which nation states are prepared to go to achieve their strategic goals.” Read More
Discord and Slack are becoming potent tools for malware attacks
Fast Company, Steven Melendez
“Once a file containing malicious code is uploaded, attackers can also grab a freely accessible link to that file where it’s hosted on the chat system’s servers. Then, they can send that link to people via phishing emails, misleading texts, or any other method they have of reaching potential victims.” Read More
How the quick shift to the cloud has led to more security risks
TechRepublic, Lance Whitney
“The rise in security incidents has been triggered in part by the inability of many organizations to automate cloud security. Previous research from Unit 42 found that 65% of publicly disclosed security incidents in the cloud were due to customer misconfigurations, a problem that could have been addressed through automated security controls.” Read More
Ubiquiti’s Breach Notification: The ‘No Evidence’ Hedge
DataBreachToday, Mathew J. Schwartz
“Without good logs, it is very difficult to investigate an incident and confidently identify what happened and even … who may be behind the attack.” Read More
533 million Facebook users’ phone numbers and personal data have been leaked online
Business Insider, Aaron Holmes
“A database of that size containing the private information such as phone numbers of a lot of Facebook’s users would certainly lead to bad actors taking advantage of the data to perform social engineering attacks [or] hacking attempts.” Read More