Explore

FactFableFactFable
Why Most Teams Misread Famous BEC Fraud Incidents in U.S. History

Why Most Teams Misread Famous BEC Fraud Incidents in U.S. History

Business Email Compromise (BEC) costs billions, yet many companies misinterpret the lessons from major attacks, focusing on the wrong security solutions.
Rapid ReadRapid Read
Ropes Gray Sponsors Webinar on Cyber and Data Breach Response for Healthcare and Life Sciences

Ropes Gray Sponsors Webinar on Cyber and Data Breach Response for Healthcare and Life Sciences

Ropes & Gray LLP is sponsoring a webinar titled 'Cyber and Data Breach Response for Healthcare and Life Sciences Organizations.' This event addresses the persistent threat of cyberattacks targeting healthcare and life sciences entities, which frequently result in regulatory investigations and class action litigation. The webinar will cover critical decisions made in the immediate aftermath of a data breach, emphasizing how these initial actions can influence notification obligations and litigation risks. It will also highlight the importance of preparedness, including incident response plans, tabletop exercises, robust vendor contracts, and regular risk assessments, as key strategies to mitigate exposure. The session aims to provide practical guidance for organizations in these vulnerable sectors.
TrendlineTrendline
Vanguard Group Reports Data Security Incident Exposing Social Security Numbers in Vermont

Vanguard Group Reports Data Security Incident Exposing Social Security Numbers in Vermont

Vanguard Group Reports Data Security Incident Exposing Social Security Numbers in Vermont
Rapid ReadRapid Read
Cybersecurity Experts Detail Evolving Threat Landscape and Defensive Strategies

Cybersecurity Experts Detail Evolving Threat Landscape and Defensive Strategies

The cybersecurity threat landscape is characterized by increasing diversification and sophistication, according to cybersecurity experts. Threats range from state-sponsored Advanced Persistent Threats (APTs) targeting national infrastructure to opportunistic ransomware groups seeking financial disruption. Modern attacks are often multi-stage campaigns, moving beyond simple malware detection to include sophisticated phishing for credential harvesting, supply chain compromises, and vulnerabilities in Internet of Things (IoT) devices. Organizations are urged to adopt a proactive, multi-layered security posture, integrating robust technical controls with meticulous policy enforcement and rigorous employee training. Key areas of focus include next-generation firewalls, intrusion prevention systems, multi-factor authentication (MFA) secured Virtual Private Networks (VPNs), and network segmentation. The shift from perimeter defense to identity-centric security models, particularly Zero Trust Architecture (ZTA), i...
TrendlineTrendline
Splunk, a Cisco Company, Advances Digital Resilience with Unified Security and Observability Platform

Splunk, a Cisco Company, Advances Digital Resilience with Unified Security and Observability Platform

Splunk, a Cisco Company, Advances Digital Resilience with Unified Security and Observability Platform
Rapid ReadRapid Read
Connecticut Attorney General Tong Secures $10 Million Settlement and Reforms from Perry Johnson Companies for Medical Data Breach

Connecticut Attorney General Tong Secures $10 Million Settlement and Reforms from Perry Johnson Companies for Medical Data Breach

Connecticut Attorney General William Tong, in collaboration with the attorneys general of Michigan and New Jersey, has announced a $10 million settlement with Perry Johnson & Associates, Inc. (PJ&A) and its affiliated companies. This settlement addresses a March 2023 data breach that exposed the private medical data of 13.3 million individuals nationwide, including approximately 107,960 Connecticut residents. PJ&A, an information technology company, provided services such as coding, billing, and recording to healthcare organizations across the U.S. The investigation revealed that hackers gained access to PJ&A's systems using an employee's credentials because the company did not require multi-factor authentication for remote access. Over several months, hackers harvested passwords and accessed unencrypted files containing sensitive personal and health information. Despite PJI's software identifying the hacker's activity, it was not configured to alert security personnel, and PJ&A only became aware of the br...
TrendlineTrendline
Alvaka Offers Specialized Cybersecurity Services for Aerospace Industry to Combat Targeted Threats

Alvaka Offers Specialized Cybersecurity Services for Aerospace Industry to Combat Targeted Threats

Alvaka Offers Specialized Cybersecurity Services for Aerospace Industry to Combat Targeted Threats
Rapid ReadRapid Read
GAO Report Highlights FAA's Ongoing Cybersecurity Vulnerabilities in Aviation Systems

GAO Report Highlights FAA's Ongoing Cybersecurity Vulnerabilities in Aviation Systems

A recent report from the Government Accountability Office (GAO) indicates that the Federal Aviation Administration (FAA) still has significant work to do in protecting its systems from cyber threats, particularly those related to the electromagnetic spectrum. The GAO's review focused on whether the FAA was effectively identifying and mitigating spectrum-related cyber threats that could impact aviation navigation and flight control. The report specifically examined vulnerabilities in two key aircraft communication applications, ACARS and CPDLC. While the FAA has recognized threats like interference, spoofing, and jamming, the GAO found a disconnect between this recognition and the implementation of detailed, specific risk assessments for individual systems. Many systems reviewed lacked up-to-date standards, required controls, and consistent data categorization, hindering the FAA's ability to monitor real-time threats. Additionally, coordination practices with federal partners, while established, were not fu...
TrendlineTrendline
Wells Fargo Seeks Principal Cybersecurity Incident Response Engineer for Complex Investigations

Wells Fargo Seeks Principal Cybersecurity Incident Response Engineer for Complex Investigations

Wells Fargo Seeks Principal Cybersecurity Incident Response Engineer for Complex Investigations
TrendlineTrendline
Singapore Airlines Customer Booking Records Potentially Exposed in Amadeus Cybersecurity Incident

Singapore Airlines Customer Booking Records Potentially Exposed in Amadeus Cybersecurity Incident

Singapore Airlines Customer Booking Records Potentially Exposed in Amadeus Cybersecurity Incident
Rapid ReadRapid Read
Northeastern University Issues Guidelines for Protecting Personal Devices and University Information

Northeastern University Issues Guidelines for Protecting Personal Devices and University Information

Northeastern University has released comprehensive guidelines aimed at protecting personal devices and university information. The university emphasizes that securing personal devices is crucial for safeguarding both individual and institutional data, as students and staff frequently use their phones, tablets, and personal computers to access Northeastern email, join Microsoft Teams meetings, approve multi-factor authentication (MFA) requests, and access university files. The guidelines cover essential security practices, including using strong passcodes, enabling automatic screen locks, keeping operating systems and apps updated, utilizing device encryption, and removing unused or untrusted applications. It also advises against bypassing built-in security restrictions like jailbreaking or rooting. The university stresses the importance of locking devices when unattended and using secure network connections like NUwave or eduroam on campus, and GlobalProtect VPN off-campus.
Rapid ReadRapid Read
U.S. Experiences Surge in Cyber Operations, Leading Global Targets in Q3 2026

U.S. Experiences Surge in Cyber Operations, Leading Global Targets in Q3 2026

The United States was the most frequently targeted country for cyber operations in the third quarter of 2026, experiencing 64 incidents. This comes amidst a significant global increase in publicly disclosed cyber operations, with 227 recorded incidents—a 40.1% rise from the previous quarter and 36 more than the long-term quarterly average. The European Repository of Cyber Incidents (EuRepoC), in collaboration with DCSO, reported that 86% of these incidents involved actual 'damage' after intrusion, including data theft (60%) and system outages (42%). Notably, the 'ShinyHunters' group conducted a severe attack on the U.S. Federal Bureau of Investigation (FBI), stealing over 3 TB of data on FBI employees. This attack was followed by a coordinated operation by U.S. and international authorities, leading to several arrests. Additionally, the military conflict surrounding Iran continued to impact the U.S. cyber ecosystem, with several incidents targeting water supply systems in multiple states, including New Jer...