Page 4 - Incident & Breach Response - information risk management

Article

CDK Begins Restoring Systems Amid Ransomware Payment Reports

Chris Riotta • June 24, 2024

CDK Global, the auto dealership software solutions firm that supplies services to an estimated 15,000 dealerships in the U.S. and Canada, said it has begun the restoration process for its customers after a debilitating cyber incident caused disruptions.

Article

Auto Dealerships Using CDK Global Hit With Cyber Disruptions

Chris Riotta • June 21, 2024

CDK Global, a leading software and solutions providers for thousands of car dealerships across the United States and Canada, has launched investigations into consecutive cyber incidents that caused disruptions and shutdowns for several days at companies across the North Americas.

Article

Breach Roundup: Phishing Platform ONNX Targets Microsoft 365

Anviksha More • June 20, 2024

This week, ONNX targeted Microsoft 365, Symantec spotted Chinese espionage, AMD may have been breached, Cleveland vowed to defy hackers, Black Basta hit a Spanish firm, Pakistani hackers targeted India, Microsoft said it fixed flaws in Azure, and the U.S. and Indonesia held a cybersecurity exercise.

Interview

Managing Chaos in Massive Healthcare Sector Cyberattacks

Marianne Kolbasuk McGee • June 14, 2024

The chaos experienced by thousands of healthcare organizations in the wake of the massive Change Healthcare cyberattack and IT outage in February is proof that most organizations are simply unprepared for such devastating incidents, said Bryan Chnowski, deputy CISO at Nuvance Health.

Webinar

OnDemand | 2023 OT Cybersecurity Year in Review: Lessons Learned from the Frontlines

Marissa Costa, Senior Penetration Tester, Dragos , Jackson Evans-Davies, Director of Professional Services, Dragos , Hussain Virani, Senior Industrial Incident Responder, Dragos , Eddy Wade, Senior Industrial Consultant, Dragos • June 14, 2024

In the dynamic battleground of operational technology (OT) cybersecurity, the frontlines are where the most valuable lessons are learned. Join Dragos' panel of seasoned cybersecurity frontline experts as they draw on firsthand experiences from architecture reviews, incident response, and penetration testing in OT...

Article

Breach Roundup: US Federal Cyber Incidents Go Up

Anviksha More • June 13, 2024

This week, feds counted cyber incidents; Ukraine made arrest; Black Basta seemed to exploit flaw; 51 flaws in Patch Tuesday; SolarWinds, JetBrains patched flaws; Alan Turning Institute debunked paper on AI; Santander wants password changes; Christie's spoke of data breach and cyber pros face burnout.

Article

Cleveland Cyber Incident Prompts Shutdown of City IT Systems

Chris Riotta • June 11, 2024

The city of Cleveland, Ohio, is launching an investigation into an apparent cyber event that forced a shutdown of its information technology systems throughout the start of the week, officials said Tuesday, though additional details surrounding the incident remain unclear.

Article

Privacy Regulators Probe Impact of 23andMe's Mega Breach

Mathew J. Schwartz • June 11, 2024

Privacy regulators in the U.K. and Canada have launched a joint investigation into 23andMe after the direct-to-consumer genetic testing service suffered a massive data breach in October 2023 that led to the theft of 6.9 million individuals' ancestry details.

Article

Snowflake Hacking Spree Puts 165 Organizations at Risk

Akshaya Asokan • June 10, 2024

An investigation into info stealer-driven attacks on Snowflake customers shows that approximately 165 clients potentially had data stolen by financially motivated hackers, says cyber threat intel firm Mandiant. It attributed the attacks to a cluster of threat activity that it now tracks as UNC5537.

Article

Breach Roundup: Microsoft Deprecates NTLM Authentication

Anviksha More • June 6, 2024

This week, Microsoft deprecated NTLM authentication, a hacker put apparent Snowflake data up for sale, Ticketmaster confirmed its breach, the FBI disrupted LockBit, Cisco patched Webex flaws, pro-Russian hacktivists claimed a DDoS attack and Kaspersky launched a free virus removal tool for Linux.

Article

Scaling Threat Intel, Consulting: Mandiant's Way With Google

Michael Novinson • June 3, 2024

Sandra Joyce and Jurgen Kutscher highlight the significant advancements in Mandiant's threat intelligence and consulting services following Google's September 2022 acquisition, emphasizing improved scalability, engineering support and global reach as well as new focuses on AI and cloud threats.

Article

Snowflake Clients Targeted With Credential Attacks

David Perera • June 3, 2024

Hackers are targeting clients of artificial intelligence data platform provider Snowflake that lack multifactor authentication, the company warns. Threat actors are compromising organizations’ Snowflake customer tenants by using stolen credentials obtained by info-stealing malware, said Mandiant.

Article

Breach Roundup: Google AI Blunders Go Viral

Anviksha More • May 30, 2024

This week, Google AI search provided wrong answers, Internet Archive suffered DDos attack, Okta warned of credential stuffing, Canada shut down two tech firms, attackers delivered malware with Stack Overflow, Telefónica is probing breach, Iberdrola was breached and RansomHub said it hit Christie's.

Article

Court Orders Optus to Release Data Breach Report to Lawyers

Jayant Chakravarti • May 27, 2024

The Federal Court of Australia has rejected a request from telecommunications giant Optus to keep private a detailed digital forensic investigation report conducted by Deloitte into the massive data breach it suffered in 2022, exposing private information pertaining to nearly 10 million customers.

Article

ISMG Editors: UnitedHealth Group's HIPAA Breach Fallout

Anna Delaney • May 24, 2024

In the latest weekly update, ISMG editors discussed the implications of Kevin Mandia stepping down as Mandiant CEO; UnitedHealth Group's responsibility for a massive HIPAA breach at its subsidiary, Change Healthcare; and privacy concerns over large language models.

Incident & Breach Response

CDK Begins Restoring Systems Amid Ransomware Payment Reports

Auto Dealerships Using CDK Global Hit With Cyber Disruptions

Breach Roundup: Phishing Platform ONNX Targets Microsoft 365

Managing Chaos in Massive Healthcare Sector Cyberattacks

OnDemand | 2023 OT Cybersecurity Year in Review: Lessons Learned from the Frontlines

Breach Roundup: US Federal Cyber Incidents Go Up

Cleveland Cyber Incident Prompts Shutdown of City IT Systems

Privacy Regulators Probe Impact of 23andMe's Mega Breach

Snowflake Hacking Spree Puts 165 Organizations at Risk

Breach Roundup: Microsoft Deprecates NTLM Authentication

Scaling Threat Intel, Consulting: Mandiant's Way With Google

Snowflake Clients Targeted With Credential Attacks

Breach Roundup: Google AI Blunders Go Viral

Court Orders Optus to Release Data Breach Report to Lawyers

ISMG Editors: UnitedHealth Group's HIPAA Breach Fallout

Around the Network

How Mega Attacks Are Spotlighting Critical 3rd-Party Risks

Clinical Considerations When Recovering From Ransomware

Eliminating the Need for Stored Credentials in Healthcare

Gaining Better Visibility Into Medical Devices, IoT, OT

Cyber Insurers Are Intensely Scrutinizing Healthcare Clients

What Kind of People Do Cybersecurity for a Living?

Enhancing Cyber Defense with AI-Powered SOCs

Top 'Privacy by Design' Considerations for Medical Devices

Oswal: AI, Platformization Key to Network Security Evolution

Court's Web Tracker Ruling: What HIPAA Entities Should Know