IT Audit Labs

The recent cyberattack on UnitedHealth’s tech unit, Change, has exposed the personal information of 100 million individuals, marking one of the most significant healthcare data breaches in U.S. history. Key details of the breach: - Impact: Approximately one-third of Americans' private data may have been compromised. - Scope of Data: Health insurance member IDs, patient diagnoses, treatment information, social security numbers, and provider billing codes. - Ongoing Challenges: UnitedHealth continues to notify impacted individuals while investigating the full extent of the breach.
 Let’s connect about building a stronger, more resilient data security strategy for your organization. Source: Reuters #DataBreach #CyberSecurity #HealthcareSecurity #DataProtection #Ransomware #RiskManagement #CyberResilience #HealthcareIndustry Read Article: https://lnkd.in/gUC4ruZT

Our very own, Eric B., will be speaking on a panel at the Cyber Security Summit | cybersecuritysummit.org today, diving into some of the most critical emerging cybersecurity threats facing businesses today. Attending the summit? We’d love to connect! This is a great opportunity to exchange ideas and discuss strategies that will strengthen your security posture. #CybersecuritySummit #EmergingThreats #Cybersecurity #ITAuditLabs #Networking #InfoSec #proofpoint

Secure code is just the start of building safe software.  AI tools provide quick feedback on code security, but the rest of the development lifecycle still needs more focus.  For more insights on strengthening software security, listen to the full episode of The Audit podcast, featuring Francis Ofungwu, Nick Mellem, and Bill Harris, CISSP.  #Cybersecurity #InfoSec #SoftwareDevelopment #AI  

Out-of-the-Box Security Should Be the Standard As security professionals, we want technology that’s secure right from the start. Yet, as seen with Apple’s staggered software updates, it often falls on us to ensure data protection. In the latest episode of The Audit, Nick Mellem and Bill Harris, CISSP, meet with featured guest, Francis Ofungwu, to discuss why secure-by-default software matters and the role security pros play in safeguarding organizational data. Tune in every other week for insights from experts in the field! #SecureByDefault  #Cybersecurity #SoftwareSecurity #DevSecOps

Severe Vulnerabilities in End-to-End Encrypted Cloud Storage New research has uncovered major security issues in several E2EE cloud storage platforms. These flaws allow attackers to inject rogue files, tamper with data, and even bypass encryption to access sensitive information. Key Findings: - Attackers can manipulate data and metadata without sophisticated tools. - Encryption protocols can be downgraded or bypassed. - File sharing and key management systems are vulnerable.
 The study shows that E2EE cloud storage isn’t as foolproof as it may seem. Users should remain cautious and ensure they have additional security layers in place. Source: The Hacker News #CyberSecurity #DataProtection #CloudSecurity #EncryptionVulnerabilities #DataIntegrity #ZeroKnowledge Article: https://lnkd.in/gGfQ2Cx2

With new regulations like Cybersecurity and Infrastructure Security Agency's Secure by Design initiative and the EU's Digital Operations Resilience Act (DORA), software providers are being held accountable for delivering secure products from day one. No more relying on hardening guides – security must be built in from the start. Learn more about how these regulations impact software developers and the future of secure coding in our latest episode of The Audit featuring Nick Mellem, Bill Harris, CISSP, and Francis Ofungwu. #Cybersecurity #SoftwareSecurity #DevSecOps  

One of our favorite slides from last week's Wild West Hackin' Fest. Thanks so much to The Center for Internet Security for this insightful presentation, and to Black Hills Information Security for being such fantastic hosts as always! #WWHF2024 #CybersecurityInsights #InfoSec #Cybersecurity

Big thanks to Melisa Stivaletti for joining us on the latest episode of The Audit Podcast! 🎙️ Check out the full episode here: https://lnkd.in/g5viScnr #TheAuditPodcast #OSINT #AI #Cybersecurity

Supply chain software attacks are on the rise. Cybercriminals are evolving their tactics, using trusted vendor relationships to infiltrate networks through supply chain attacks. These breaches are particularly challenging to detect, making it essential to adopt a more holistic security approach. Now is the time to be proactive—anticipate these risks and fortify your defenses. Source: Cyber Security News #CyberSecurity #RiskManagement #SupplyChainSecurity #ProactiveProtection Source: https://lnkd.in/gPz_UH_U

Many free email services come with a hidden cost—your data. Google, Hotmail, and other providers often mine email content to build detailed user profiles. If your organization deals with sensitive information, switching to a privacy-focused provider like Proton Mail can be a step towards protecting internal communications. Watch the full episode for more insights on strengthening your organization’s email security posture.  #Cybersecurity #DataPrivacy #EmailSecurity #ITLeadership