Page 2 - Zero Trusts News Today

Bidens New Executive Order Looks to Address Data Privacy July 21, 2021 September 30, 2021 Twitter Photo: Ahundt via Pixabay/CC In his latest executive order, President Joe Biden is asking the U.S. Federal Trade Commission to establish new rules over how tech firms can collect and use data from their customers, as a way to offer more privacy protections for American consumers. The focus on how large tech firms such as Facebook, Google and Amazon collect and use consumer data is one part of an e...

Get Permission Kaseya CEO Fred Voccola has defended his companys actions but acknowledged those affected by a ransomwware attack are "very, very frustrated." (Source: Kaseya) Global software vendor Kaseya worked in earnest for three months to resolve flaws in its VSA monitoring and management software, but ultimately lost the race with ransomware attackers, Dutch researchers say. On Wednesday, the researchers who had found flaws in VSA released a timeline and description of issues that give m...

Get Permission IT services provider Synnex Corporation, which counts the Republican National Committee as a customer, says on Tuesday that an intrusion attempt against it may be related to Fridays mass ransomware attack. However, Republican National Committee Chief of Staff Richard Walters told Information Security Media Group in an emailed statement that no breach of its systems occurred. “Over the weekend, we were informed that Synnex, a third-party provider, had been breached," Walters ...

Kaseya: Up to 1,500 Organizations Hit in Ransomware Attack July 21, 2021 September 30, 2021 Compliance Twitter Screenshot of Kaseyas remote IT management software VSA, which was compromised by ransomware attackers (Source: Kaseya) Software vendor Kaseya said late Monday that it believes 800 to 1,500 organizations - mostly small businesses - were compromised via the sweeping ransomware attack that exploited its VSA remote IT management software. Up to 60 of its own customers were compromised, ...

Biden Orders Investigation of Kaseya Ransomware Attack July 21, 2021 September 30, 2021 Compliance Twitter U.S. President Joe Biden has ordered federal intelligence agencies to investigate the incident involving IT management software vendor Kaseya, which sustained a suspected REvil ransomware attack on Friday. Attackers reportedly compromised Kaseyas remote monitoring system, VSA, forcing the company to urge its managed service provider customers to temporarily shut down their on-premise serv...

US Tracking Brute-Force Attacks Linked to Russia July 21, 2021 Compliance Twitter Get Permission The National Security Agency, the FBI and other agencies are tracking an ongoing Russian cyberespionage campaign in which attackers are using brute-force methods to access Microsoft Office 365 and other cloud-based services, according to an alert published Thursday. The campaign, which started in 2019, has targeted "hundreds" of businesses, government agencies and organizations worldwide, mainly i...

CISA Tool Helps Measure Readiness to Thwart Ransomware July 21, 2021 dangun127) • July 1, 2021     Get Permission The U.S. Cybersecurity and Infrastructure Security Agency has released a Ransomware Readiness Assessment audit tool to help organizations size up their ability to defend against and recover from attacks. The tool expands the agencys broader Cyber Security Evaluation Tool, which guides network defenders t...

Get Permission Federal prosecutors have filed seven new criminal charges against Paige A. Thompson, the woman accused of breaching Capital One bank in 2019, which compromised the personal data of 100 million Americans, including exposing hundreds of thousands of Social Security numbers, according to a superceding indictment filed in the case. Thompson, who is free while awaiting trial and has pleaded not guilty, now faces up to 20 years in federal prison if convicted of the federal charges, ac...

GAO: HHS Needs to Improve Cybersecurity Info-Sharing Efforts HealthInfoSec) • June 29, 2021     Get Permission The Department of Health and Human Services must improve collaboration among several of its key internal entities, as well as with external partners, in order to bolster cybersecurity threat intelligence sharing in the healthcare and public health sector, says a watchdog agency report. The Government Accoun...

Microsoft Edge Vulnerabilities Let Hackers Steal Data Compliance @prajeetspeaks) • June 29, 2021     Get Permission Microsoft recently released updates for the Edge browser, including a fix for a bypass vulnerability that could allow a remote attacker to bypass implemented security restrictions. In a UXSS attack, vulnerabilities in the browser itself or in the browser plug-ins are exploited. Researchers say that an ...