Welcome to the Identity Theft Resource Center's Weekly Breach Breakdown for January 12th, 2024. I'm Alex Achten. Thanks to Sentilink for supporting the ITRC and this podcast.

Each week, we look at the most recent events and trends related to data security and privacy. Today, I will discuss the evolution of Quick Response Codes – also known as QR codes – and give you the latest on the increase in scams around these digital barcodes.

Follow on LinkedIn: www.linkedin.com/company/idtheftcenter/
Follow on Twitter: twitter.com/IDTheftCenter

The Weekly Breach Breakdown Podcast by ITRC - QR Code Red - S5E2

Mother of All Breaches. The Midnight Blizzard attack. Nation state cyber conflicts. January 2024 has seen a blitz in cyber  attacks. In this week's episode, hosts Stan Wisseman and Rob Aragao delve into the alarming start to the new year.

1.    Mother of All Breaches (MOAB):

·       Unprecedented Scale: Over 26 billion records compromised, impacting major platforms like Twitter, LinkedIn, Adobe, and Dropbox, along with government agencies worldwide.

·       Data Complexity: The breach includes not only credentials but also sensitive data, creating substantial value for malicious actors.

·       Organization: The breach was meticulously organized, posing a significant threat to data security and privacy.

2.    Midnight Blizzard Attack:

·       Notorious Group: Midnight Blizzard, also known as Cozy Bear and APT29, resurfaces 

·       Targeted Organizations: Microsoft and HPE were among the targets, with a focus on compromising Office 365 exchange environments.

·       Attack Strategy: Utilizing password spraying and brute force, the attackers gained access to a legacy test nonproduction account, subsequently creating malicious OAuth applications.

·       Specific Targeting: The attackers selectively targeted executives, cybersecurity teams, and legal teams, aiming to gather intelligence on Microsoft's activities.

3.    State-Sponsored Cyber Warfare (Russia vs. Ukraine):

·       Escalating Tensions: Ongoing cyber warfare activities between Russia and Ukraine intensify, with a warning of disruptive and destructive attacks.

·       Advanced Tactics: Russian cyber forces, particularly Midnight Blizzard, demonstrate advanced capabilities, impacting Ukrainian e-services, utility companies, and online banking.

·       AI Integration: Ukraine effectively employs AI in its defense, utilizing facial recognition and cyber capabilities to counter cyber threats.

The hosts emphasize the importance of proactive measures, including password changes, multi-factor authentication adoption, and vigilant identity governance. The discussion underscores the evolving landscape of cyber warfare, encompassing both kinetic and cyber threats.

Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via reimaginingcyber@gmail.com

2024 Unleashes Unprecedented Cyber Breaches - Ep 82

Introducing Bytes and Brews, our newest podcast series where we break down the latest happenings in tech and data. In our debut episode, we explore pivotal lessons from 2023 shaping the landscape for 2024. Discover how businesses are transforming data into potent AI assets, with the key player being unstructured data – constituting 80% of enterprise data estate. Join us as we discuss challenges, unveil five strategic moves to leverage your data, and explore the impact of Unified Data Management (UDM). Your data is more than just information; it’s your strategic advantage.
Tune in to our latest podcast. Hit play now and join the conversation!.

Bytes And Brew - Unveiling 2023’s Data Learnings for a Thriving 2024

We've all seen the news, another business suffering a ransomware attack. With more organisations suffering attacks than turning a profit, you could be one incident away from disaster – financially, operationally and reputation-ally. Not to mention the average 3-week downtime to recover – if you’re lucky!
 
Businesses truly can't afford to suffer a ransomware attack. So, what can you do to protect yourself?
We sat down with Anthony Spiteri the Regional CTO APJ for Veeam, and discussed just that!
 
Anthony gives us all the insider information on:
- Increases in ransomware attacks and the multifaceted risks involved.
- The commonality of attacks and the financial implications businesses face
- Any potential costs and impacts businesses may face
- Quick tips businesses can use to proactively prevent ransomware attacks

This episode's expert guests: 
Anthony Spiteri, Regional CTO APJ - Veeam
Stephanie Duthie, Manager - Digital and Communications - CT
**** 
Listen to this podcast now or follow to hear new content each month:   
🔹 Spotify: https://hubs.ly/Q01v_n8Q0   
🔹 Apple: https://hubs.ly/Q01v_p_x0   
🔹 SoundCloud: https://hubs.ly/Q01v_pbc0
****
 
Learn more on this topic here:
Should you make a Ransomware Payment - https://www.ct.com.au/articles/insight/should-you-make-ransomware-payment
Disaster recovery: Getting your feet faster after Ransomware attack - https://www.ct.com.au/events/disaster-recovery-getting-your-feet-faster-after-ransomware-attack
Managed Services, Cyber Security - https://www.ct.com.au/products/managed-services/cyber-security
Veeam Ransomware backup - https://www.veeam.com/solutions/data-security/ransomware-backup.html?ad=menu-solutions
Veeam data backup and replication - https://www.veeam.com/vm-backup-recovery-replication-software.html?ad=menu-products

Defending Your Business: Ransomware Protection Strategies with Anthony Spiteri

Data privacy and control are crucial aspects of data management, especially in today's data-driven world. Woz CDP's approach to data privacy and control sets it apart as a trusted partner for enterprises looking to protect their data and comply with regulations. By prioritizing data privacy and control, Woz CDP helps businesses build trust with customers and avoid regulatory issues, ultimately enabling them to focus on growth and innovation.

How Woz CDP Ensures Data Privacy And Control

In this episode, Stan and Rob sit down with Felix Asare, a seasoned cybersecurity leader with extensive experience in the financial sector, including roles at Allianz and Putnam Investments. They delve into the cybersecurity landscape within the financial industry, exploring why it's a prime target for cybercriminals.

Felix breaks down the appeal of targeting the financial sector,
emphasizing the shift from physical to digital methods of theft due to the
lucrative nature of financial data. He highlights the importance of regulations
in setting security standards and explains how compliance, while necessary,
isn't sufficient for robust cybersecurity.

The conversation extends to the risks posed by the software
supply chain, particularly third-party vendors, and the challenges of
maintaining oversight in a complex ecosystem. Felix shares insights into
mitigating risks associated with open-source software and the need for rigorous
approval processes.

They also discuss the emergence of smart contracts and the
security implications of blockchain technology. Felix underscores the
importance of auditing smart contracts and maintaining vigilance in the face of
evolving threats like deepfake technology.

Lastly, the discussion turns to the role of AI in cybersecurity
defense, with Felix emphasizing its potential to enhance response times and
analyze data. However, he also cautions against overreliance on AI and the need
for human validation to combat emerging threats effectively.

Overall, the episode provides valuable insights into the
evolving cybersecurity landscape within the financial sector and the strategies
employed to mitigate risks and enhance security posture.

Evolving Security in Finance - Ep 85

🎙️ Tune-in for another edition of FortinetLIVE as #Fortinet’s Don Walling is joined by Sherron Burgess, Chair, Board of Directors, #Cyversity to discuss fostering diverse talent and creating exciting career opportunities in #cyber. 👩‍💻

👉 https://www.fortinet.com/training/education-outreach-program?utm_source=social&utm_medium=soundcloud-org&utm_campaign=sprinklr

FortinetLIVE #64 - Pioneering Career Opportunities with Cyversity

Tune-in for another episode of #FortiGuardLIVE, as #FortiGuardLabs’ Jonas Walker and Aamir Lakhani discuss deception techniques they see being used throughout 2024 including:
 
➡️ Deep Fakes
➡️ Social Engineering
➡️ Counter Deception
 
Read more about Deception Tactics: https://www.fortinet.com/blog/industry-trends/offensive-defense-using-deception-against-ransomware-attacks?utm_source=social&utm_medium=youtube-org&utm_campaign=sprinklr

FortiGuardLIVE #59 - Deep Fakes and Deception Tactics

In this episode of "The Backbone of Business: Reliable Connectivity," host, GXC's Allen Proithis, and VDC Research Analyst Rowan Litter delve into how private cellular networks are pivotal for the digital evolution of businesses. 

They explore the networks' support for emerging technologies and the need for superior coverage, optimal security, and upgraded reliability..

The discussion highlights challenges such as deployment costs, network complexity, and integration issues. 

They also spotlight key industries investing heavily in private cellular networks, complementing traditional WiFi and legacy systems to provide comprehensive coverage, seamless connectivity across indoor and outdoor spaces, and enhanced mobility.

To learn more about private cellular networks be sure to reach out to us at meshup@gxc.io and stay tuned for more episodes!

GXC MeshUp | Episode 013 | The Backbone of Business: Reliable Connectivity

Beware of Okta Phishing Attack Linked to CryptoChameleon! Stay vigilant against fraudulent attempts to steal your sensitive information. Learn how to protect yourself from potential cyber threats and keep your data secure.

Okta Phishing Attack Facilitated By CryptoChameleon!

In today's fast-paced digital world, customer data is at the heart of every successful marketing strategy. Woz, a leading cloud-based Customer Data Platform (CDP) and marketing technology company, understands the importance of leveraging customer data to drive business growth and engagement. With their innovative solutions, Woz empowers enterprises to collect, transform, and activate data for unparalleled customer insights and personalized experiences.

Woz CDP Insider Tips For Customer Growth Excellence

Welcome back to the Identity Theft Resource Center’s Weekly Breach Breakdown – supported by Sentilink. This is the episode for March 29th, 2024. I’m James Lee, the ITRC’s COO and each week on this podcast, we look at the most recent events and trends related to data security and privacy.

When it comes to cybersecurity these days, there’s one simple question vexing many people – especially CFOs – and that is this: If we’re spending more on cybersecurity than ever, why aren’t the number of cyber breaches going down?

Follow on LinkedIn: www.linkedin.com/company/idtheftcenter/
Follow on X: twitter.com/IDTheftCenter

The Weekly Breach Breakdown Podcast by ITRC - Don't Ask Me Why - S5E10

Dive into our latest episode of GXC's Monday MeshUp, Innovation at the Edge: How Private Networks and AI are Shaping the Future, hosted by Allen Proithis, we explore the game-changing role of private cellular communications in key sectors like oil, gas, mining, utilities, logistics, and ports. 

Joined by Patrick Parodi and Harish Nalinakshan from PwC, we delve into how private networks are driving automation and boosting efficiency in challenging environments.

We tackle the crucial role of security in our digital world, stressing the importance of safeguarding operations. Additionally, we examine the rise of generative AI and hybrid networks, forecasting a move towards seamless, automated solutions that enhance operational value.

This episode highlights the power of technology in addressing complex challenges, building trust, and propelling innovation for the future.

Listen now and be sure to check out more episodes of GXC's Monday MeshUp at gxc.io/podcasts/.

Episode 014 | Innovation at the Edge | How Private Networks and AI are Shaping the Future

In this gripping episode of Secure Talk, hosted by Justin Beals, we dive deep into the fascinating intersection of technology, governance, and society. Our special guest, Mark Listes, CEO of Pendulum, discusses his journey from a coding enthusiast to a champion of cybersecurity and democracy. The episode takes a compelling turn as we explore a riveting case study on a data breach involving Carta and Linear. Discover how internal governance and public narratives play crucial roles in securing data and maintaining trust.

Reputation as a risk: understanding the security threat of harmful narratives

Join host Justin Beals as he explores the art of human hacking with Chris Hadnagy, CEO of Social Engineer, LLC, and renowned author in social engineering. Discover Hadnagy's compelling journey through security and computer science, including pivotal incidents, pioneering social engineering frameworks, and collaborations with agencies like MI5 and the FBI. Gain insights into ego suspension, nonverbal communication, and defense strategies against social engineering, emphasizing empathy, education, and technology in cybersecurity.

Hacking the Human OS: Insights from Social Engineering Expert Christopher Hadnagy

Welcome to the Identity Theft Resource Center's Weekly Breach Breakdown for April 26th, 2024. I'm Alex Achten, Director of Communications & Media Relations of the ITRC. Thanks to Sentilink for supporting the ITRC and this podcast.

Each week, we look at the most recent events and trends related to data security and privacy. Today, I will discuss how identity criminals targeted a LastPass employee in a failed deepfake CEO call. I will also provide an update on the much-talked-about AT&T data event that stems back to at least 2021.

Follow on LinkedIn: www.linkedin.com/company/idtheftcenter/
Follow on X: twitter.com/IDTheftCenter

The Weekly Breach Breakdown Podcast by ITRC - First Impressions - S5E13

Join host Richard Simmons on 'HEAL Security Dispatch Daily Digest' where we dive into the current intersection of healthcare and cybersecurity intelligence. Topics include the Microsoft's cybersecurity strategy overhaul led by Chief Information Security Officer Charlie Bell, Google's reversion of a recent reCaptcha update due to a bug affecting Firefox for Windows, a study revealing significant financial losses for U.S. businesses due to cyber activity, CISA and FBI's alert on path traversal vulnerabilities, the White House's new NSM focusing on critical infrastructure security, scrutiny faced by UnitedHealth Group's CEO over the Change Healthcare cyberattack, a 10-step roadmap for inclusive health chatbots from the University of Westminster, and recent advancements in cystic fibrosis treatments. Tune in to stay updated on the critical developments affecting our digital world. 
healsecurity.com

Securing Healthcare: Navigating Cyber Threats and Innovations

A new update mandates that DMARC (Domain-based Message Authentication, Reporting, and Conformance) will be required for PCI DSS (Payment Card Industry Data Security Standard) compliance by 2025. This regulation signifies a crucial step in bolstering email security standards for organizations handling payment card data. DMARC plays a pivotal role in preventing domain spoofing and email phishing attacks by verifying the authenticity of incoming messages, thereby reducing the risk of fraud and unauthorized access to sensitive financial information. The requirement underscores the growing importance of email security in protecting financial data and preventing cyber threats, emphasizing the need for robust measures to safeguard sensitive information and maintain compliance with industry standards.

New Update: DMARC to be Mandatory for PCI DSS Compliance by 2025

obile App Developers in Bangalore - GSA techworld

If you're looking for expert mobile app developers in Bangalore, GSA techworld is the team to trust. Visit their website today to discuss your project and get started with your app development journey.

https://gsatechworld.com/mobile-app-development-in-bangalore/

GSA techworld is a team of expert mobile app developers based in Bangalore, with expertise in Android, iOS, hybrid, web app, and prototype development. With a focus on performance and user experience, the team can help automate your business operations, drive more sales, and manage data securely.

Mobile App Developers In Bangalore

Welcome to GXC's Monday MeshUp, a podcast that gives you an inside look at GXC, our private cellular network platform GXC Onyx, and the latest industry news to enable a world where enterprises can trust wireless connectivity to be simple.

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

Woz is a leading tech company that uses cutting-edge AI technology to power a cloud-based Customer Data Platform (CDP) and marketing solutions. With more than 100 integrations, our top priority is ensuring data privacy while excelling in optimizing campaigns across various platforms. At Woz, our Predictive AI analyzes trillions of touchpoints to uncover valuable insights, driving superior customer acquisition, fostering exponential growth, and refining retention strategies. As the go-to strategic partner for businesses embracing data-driven marketing, Woz stands out as the ultimate ally in navigating the ever-evolving landscape of modern business.

Secure Talk reviews the latest threats, tips, and trends on security, innovation, and compliance. 

Host Justin Beals interviews leading privacy, security and technology executives to discuss best practices related to IT security, data protection and compliance. Based in Seattle, he previously served as the CTO of NextStep and Koru, which won the 2018 Most Impactful Startup award from Wharton People Analytics. He is the creator of the patented Training, Tracking & Placement System and the author of “Aligning curriculum and evidencing learning effectiveness using semantic mapping of learning assets,” published in the International Journal of Emerging Technologies in Learning (iJet). Justin earned a BA from Fort Lewis College.

Introducing Bytes and Brews, the podcast where we break down the latest happenings in tech and data.

The FortiGuard Labs Threat Intelligence Podcast provides highlights and commentary about the ever-evolving cyber threat landscape.
Join Fortinet’s top threat experts as they delve into today’s critical cybersecurity topics.
 
FortiGuard Labs is the global threat intelligence and research organization at Fortinet. Its mission is to provide customers the industry’s best threat intelligence to protect them from malicious cyberattacks. Using millions of global network sensors, FortiGuard Labs monitors the worldwide attack surface and employs artificial intelligence (AI) to mine that data for new threats.
The efforts of the global team of experienced threat hunters, researchers, analysts, tool developers, and data scientists enable FortiGuard Labs to keep all Fortinet products updated with the best threat identification and protection information available

Advanced Phishing Protection and Anti-Phishing Solution for Your Small Business. Get total phishing protection against spear phishing, ransomware, CEO fraud, impersonation, and other sophisticated email attacks with advanced threat defense – that also integrates seamlessly with Office 365 and most on-premise or cloud hosted email solutions.

Fortinet’s cybersecurity podcast provides highlights and commentary about securing the largest enterprise, service provider, and government organizations around the world.
Join Fortinet’s top experts as they discuss today’s most important cybersecurity topics.
 
The Fortinet Security Fabric platform addresses the most critical security challenges and protect data across the entire digital infrastructure, whether in networked, application, multi-cloud or edge environments. Both a technology company and a learning company, the Fortinet Network Security Institute has one of the largest and broadest cybersecurity training programs in the industry. Learn more on the Fortinet Blog.

Explore the critical intersection of cybersecurity and business impact while gaining insights into CISO priorities with "Reimagining Cyber." Stay informed on the latest cybersecurity news, trends, and solutions tailored for today's CISOs and CIOs. Episodes cover a range of topics, including the role of AI in cybersecurity, preventive measures to stop cyber attacks, response strategies for cyber attack victims, cybersecurity challenges in healthcare, the future landscape of cyber security, computer security essentials, managing cybersecurity budgets, and the implications of SEC rulings.

Engage with industry experts and CISOs who share their perspectives on what matters most in the cybersecurity landscape. Hosted by Rob Aragao and Stan Wisseman, seasoned Security Strategists with CyberRes, this podcast is your go-to resource for staying updated on cybersecurity developments and addressing common challenges in the rapidly evolving digital landscape.

New tracks tagged #Datasecurity