Explore

FactFable FactFable
What 1Password vs. LastPass vs. Bitwarden Actually Looks Like in a Real Incident

What 1Password vs. LastPass vs. Bitwarden Actually Looks Like in a Real Incident

When a server gets breached, how do 1Password, LastPass, and Bitwarden protect your data? We break down their security models in a real-world test.
FactFable FactFable
What Okta: a complete product primer Actually Looks Like in a Real Incident

What Okta: a complete product primer Actually Looks Like in a Real Incident

A look at how identity management platforms function during a crisis, contrasting the on-paper promise with the reality of a major security breach.
FactFable FactFable
What Third-Party Risk for a Small Business Actually Looks Like in a Real Incident

What Third-Party Risk for a Small Business Actually Looks Like in a Real Incident

For a small business, the biggest threats can come from trusted partners. Here’s a look at what third-party risk means in the real world.
FactFable FactFable
How ISO 27001 Quietly Shapes Modern Security Architecture

How ISO 27001 Quietly Shapes Modern Security Architecture

Learn about ISO 27001, the international standard for information security, and how its framework invisibly underpins the safety of modern digital services.
Discover daily Discover daily
Today Marks the 2017 Disclosure That Sent Equifax Shares Tumbling

Today Marks the 2017 Disclosure That Sent Equifax Shares Tumbling

The 2017 Equifax data breach stands as a significant event in cybersecurity history, impacting over 140 million Americans. This incident, which exp...
FactFable FactFable
The Real Reason Security Engineers Disagree About cloud security engineer should read

The Real Reason Security Engineers Disagree About cloud security engineer should read

Experts disagree on what cloud security engineers must know. The debate isn't just about tools, but core philosophies on what 'security' means now.
FactFable FactFable
Why Most Teams Misread an Incident Response Plan for Critical Infrastructure

Why Most Teams Misread an Incident Response Plan for Critical Infrastructure

Many incident response plans for critical infrastructure fail not because they are poorly written, but because teams misunderstand their fundamental purpose.
Rapid Read Rapid Read
Attackers Exploit MikroTik Routers via Internet-Exposed SSH, CERT Polska Warns

Attackers Exploit MikroTik Routers via Internet-Exposed SSH, CERT Polska Warns

Attackers are actively exploiting MikroTik routers with internet-exposed Secure Shell (SSH) remote-access services to gain full administrative control without authentication, according to a warning issued by CERT Polska on September 5. The attacks have been observed since at least September 2. While CERT Polska's warning and a subsequent review by The Hacker News on September 6 did not specify the number of victims or the attackers' identities, MikroTik has released security updates to address the vulnerabilities. CERT Polska recommends immediate installation of these updates and a thorough check for unauthorized configuration changes. The vulnerabilities, collectively termed 'MikroTrick' by CERT, allow attackers to bypass authentication and gain administrative access, posing a significant threat to affected devices.
Rapid Read Rapid Read
FBI Investigates Potential Dark Web Sale of Millions of U.S. Drivers' Licenses

FBI Investigates Potential Dark Web Sale of Millions of U.S. Drivers' Licenses

The FBI is currently investigating the potential theft and sale of over 153 million digital scans of drivers' licenses from individuals in the United States and Canada on the dark web. This incident was initially reported by cybersecurity expert Brian Krebs through his blog, Krebs on Security. Krebs stated that he was able to verify the authenticity of at least nine drivers' licenses advertised for sale on a site called Nexus. Following Krebs' report on September 2, the Nexus site reportedly disappeared from the dark web. The source of this significant data breach remains unclear, but Krebs has indicated that Louisiana-based ID-verification company idscan.net could be a potential origin. Idscan.net provides services to various large organizations, including Hertz, Target, FedEx, and the United States Coast Guard. A spokesperson for idscan.net has confirmed that the company is investigating the issue. USA TODAY has not independently verified Krebs' assertions and has reached out to idscan.net for further co...
Rapid Read Rapid Read
USPS Warns Employees of Ongoing Phone Scams Targeting Login Information

USPS Warns Employees of Ongoing Phone Scams Targeting Login Information

The United States Postal Service (USPS) has issued a warning to its employees regarding persistent phone scams. Criminals are impersonating IT or Service Desk staff in an attempt to steal login credentials from USPS personnel. The USPS explicitly states that it will never contact employees via phone, text, or email to request passwords, multifactor authentication (MFA) codes, or direct them to external websites for login purposes. Employees are reminded not to share their LiteBlue login information, as doing so could lead to unauthorized changes to their accounts. The USPS advises all employees to report any suspicious activity directly to CyberSafe@usps.gov. This alert underscores the ongoing threat of phishing and social engineering tactics targeting corporate and government employees.
Trendline Trendline
UK Proposes New Regulations for Managed Service Providers, Impacting U.S. Firms

UK Proposes New Regulations for Managed Service Providers, Impacting U.S. Firms

UK Proposes New Regulations for Managed Service Providers, Impacting U.S. Firms
Trendline Trendline
Greenberg Traurig Confirms Cyber Attack, Limited Document Access by Unauthorized Actors

Greenberg Traurig Confirms Cyber Attack, Limited Document Access by Unauthorized Actors

Greenberg Traurig Confirms Cyber Attack, Limited Document Access by Unauthorized Actors