Fortress Information Security’s Post

What was the biggest data breache of 2023 ? In reflecting on the myriad of cybersecurity incidents we've witnessed this year, it's my opinion that the MOVEit Transfer breach stands out as the most consequential data breach of 2023. The discovery of a critical zero-day vulnerability in this widely-used enterprise file-transfer tool has had far-reaching implications, affecting a vast network of organizations and individuals. The breach, first brought to light in May by Progress Software, paved the way for the Clop gang to execute a series of devastating hacks. The statistics are staggering and paint a grim picture of the breach's magnitude: over 2,600 organizations compromised, and personal data of nearly 84 million individuals accessed. This includes major breaches at high-profile entities like the Oregon Department of Transportation, Colorado’s Department of Health Care Policy and Financing, and the U.S. government services contractor, Maximus. The scale and depth of this incident not only highlight the sophistication of modern cyber threats but also underscore a pressing need for more robust cybersecurity strategies across all sectors. What do you think is the biggest incident of 2023? #cybersecurity #Infosec #hacker #cyberattack #cybercrime #DataSecurity #privacy #cyberdefense #CloudSecurity #SecurityAwareness

Worried about a ransomware attack? You should be....and the only true defense is to have a data copy offline. Many large corporations have found this out the hard way after moving all of their data to expensive disk systems. Tape is old technology. Tape is not sexy. Tape is not super fast. What tape is, is safe. Tape is a low cost, last line of defense. And, it fits seamlessly in your existing backup routine using popular backup software. I love tape, when most companies hate it. Why? Because I know I'm right, and I love being right. I've seen too many instances of companies spending a fortune on large spinning disk systems to store years of data that should be in cold storage, refreshing it every 3 years with even more high cost systems to store data that is rarely, if ever, recalled. Be smart...and proactive. The right way to run a backup and archive system is always to have 2 online copies and 1 copy that is 100% offline. So, if you are currently running an old tape copy, good for you! If you are still paying the manufacturer to support it, well, maybe we should talk. But if you aren't running a proper backup and archive process, there's even more reason we should have a conversation, and soon. Just ask London Drugs, or in today's paper, the Toronto District School Board. Want more proof, take a look at the list of the most recent high profile attacks at https://lnkd.in/ghqvgkx9. The point is, just because you think you're company is safe, it's not. The best security software in the world all have one thing in common. Those programs were all written by humans. And they tend to follow rules and policies. Hackers are human too, and don't follow any rules. I always find it interesting that in the world of IT, where quantum shifts in infrastructure happen every 5 - 10 years (read RAM, Optical Storage, CD, Disk, SSD), tape is still around. Well, it's around because it's the only medium that solves the same problem today it did 40 years ago. It's the lowest cost insurance policy money can buy for your data. And today, your data is your business. We at Keltech Datasafe work with Spectra Logic. Spectra is one of the largest tape library manufacturers in existence, and they've been around for over 40 years. That's 40 years of the same technology! Oh, it's evolved over the years as far as capacity and speed, but it's effectively still tape. But here we are, 40 years later, and it's still a relevant discussion. What other technology do you know of that can say that? Oh, and when it comes to protection from ransomware attacks, they really know what they are talking about. I mean really know. You see, back in 2020, in the throws of Covid, they were the victims of a ransomware attack. You can read about it here: https://lnkd.in/gd_tXrGG

Why Securing Your Business is Crucial in Today's Digital Age 🚀🔒 In today's interconnected world, securing your business isn't just a good practice – it's a necessity. Cyber threats are evolving, targeting businesses of all sizes. Protecting your data, assets, and customer information from breaches not only ensures your operations run smoothly but also builds trust with your clients. Don't wait for a cyber attack to wake you up. Lets implement robust security measures now to safeguard your business's future. Stay safe, stay secure, get in touch! 🔐💼 #Claratti #CyberSecurity #BusinessProtection #DataSafety #StaySecure

Data breaches are becoming more frequent, and it's time to face the uncomfortable truth: our data is not as secure as we'd like to believe. With the lack of locality in cybersecurity, criminals can breach systems from anywhere in the world. It's a stark contrast to physical security, where criminals must be local to the property they want to breach. Are we heading towards a world where all our data is effectively public record? Share your thoughts in the comments. #Cybersecurity #DataPrivacy #AnalyticsMatters https://lnkd.in/gWk6amAW

This August, over 35K Augur predictions were confirmed by 3rd party threat research, including predictions on Sliver, Copybara, and Xworm. Follow the link for more details https://hubs.la/Q02NDSxz0 #cybersecurity #infosec #threatintelligence #predictivethreatintelligence

Local governments are increasingly becoming the targets of cyber criminals and hostile state actors. Having an incident response and recovery plan in place is a crucial first step. It is also vital that training is conducted so a local government's employees and vendors understand their role in a cyber incident and that the plan is tested and improved through regular exercises. 

🔒💥 Breaking News Alert! 💥🔒 Guess who forgot to secure their laundry? 🤦♂️ That's right, CSC ServiceWorks got a bit too excited about spin cycles and left some personal data out to dry in a 2023 cyberattack. Let's hope they remember to check their pockets for loose change next time! 💸🧺 👀 With cyber crooks on the prowl, no data is safe – not even your delicate delicates! As IT superheroes, how can we save the day and protect our clients from such sudsy slip-ups? 🦸♂️💻 Let's gear up with some brainpower! 🔐 Time to show off those cybersecurity capes and rescue the day! 👨💼👩💼 Let's predict the next target for these cyber pranksters – will it be a sushi-loving app or maybe an eco-friendly scooter sharing service? 🍣🛴 📈 Analyze. Adapt. Defend. It's not just about protecting data; it's about safeguarding trust and loyalty. Let's spin a new narrative and ensure our networks are as impenetrable as Fort Knox! 🔒🛡️ #ainews #automatorsolutions #CyberSecurity #DataBreach #ITSuperheroes #SafeguardingData Let's turn the tide against cyber villains and keep our digital world sparkling clean! 🌐✨ Your move, hackers! #CyberSecurityAINews ----- Original Publish Date: 2024-08-09 10:59

David Kellerman, Cymulate Field CTO, sheds light on a critical aspect of cybersecurity in the healthcare industry. "It's not about the investment; it's about the sector's appeal to cybercriminals." Despite serious cybersecurity efforts, healthcare remains a prime target due to its vital data and extensive, tech-reliant systems. Read more in this article by MedCity News. #Cybersecurity #HealthcareSecurity #DataProtection"

Between a rock and a hard place. A clear example of why banning the payment of ransomware, is an impossible mission to follow for governments and regulators, in the absence of any alternate solution. Albeit in the case of United Health there's no indication that it did anything to get data back, or prevent the rebuild of its infrastructure. The decision to pay when everything is going against you is a difficult one. More so when you find out that you're Critical National Infrastructure (CNI), have significantly affected national healthcare and responsible in part to a major national cyber outage. Thaddeus Dziekanowski Brian D. McCarthy Veritas GRC #cybersecurity #cyberriskmanagement #cyberattack #cyberregulation

Dedicated Internet Access, or DIA, is a reliable tool which boasts a strong bandwidth and enhances performance. However, a lot of organisations continue to use DIA without the appropriate protection. For example, Distributed Denial of Service (DDoS) attacks are becoming more and more sophisticated and adapt to advanced protection measurements. The risks involved with using DIA without DDoS protection are immeasurable. Zayo, one of our vendors, explains the challenges involved: https://bit.ly/3SPSQPm #Zayo #DDoS #DIA #CyberSecurity