The biggest hack of the year
The mass-exploitation of MOVEit Transfer software has rapidly cemented itself as the largest hack of the year so far. So what?
Cyber 3-2-1: Central Bank data breach, RMM tool security, and the mistakes that startups make
Cyber 3-2-1: The Central Bank of Ireland reminds us that data protection is not just about IT security. MSP + RMM is the perfect combination for cyber attackers. And startups are under attack from cyber attackers. And questionnaires!
Cyber 3-2-1: You may be the next porn star, law firms need to upgrade their security defences, and SMEs need to close their front doors.
Cyber 3-2-1: Deepfakes are going mainstream, UK law firms have been warned about an increase in cyber attacks, and Irish SMEs need to close their front doors.
Cyber 3-2-1: A look at the 2023 Verizon Data Breach Investigation Report
Cyber 3-2-1: A look at the 2023 Verizon Data Breach Investigation Report: 95% of attackers are financially-motivated. Ransomware is one of their favourites, and email continues to be the most common way in.
Cyber 3-2-1: Irish doctors fear ransomware, Australian firms are under attack, and a €75 million fine in Sweden.
Cyber 3-2-1: Irish doctors are terrified about ransomware, Australian firms are under attack, and the Swedish regulator issues a €75 million sanction.
Cyber 3-2-1: Attacks on 2 service providers; phishing remains the doorway of choice.
Cyber 3-2-1: More attacks on service providers (this time Evide and SD Worx), and further evidence that phishing is the most common way for ransomware attacks to start.
Cyber 3-2-1: We are not clueless – We are just overwhelmed.
Cyber 3-2-1: $300k for not keeping software up-to-date, and the need to consider the human element in our security strategy. We ain’t clueless – We’re just overwhelmed.
Cyber 321: 3rd February 2023
Cyber 3-2-1: What have traffic lights, JD Sports, and Microsoft OneNote got in common? They all star in this week’s Cyber 3-2-1. Also this week, reminders as to why regulators are so keen for us to get better at third-party risk management, especially when it comes to our IT service providers.
What has Groundhog Day got to do with cybersecurity?
If we don’t implement some simple defences, we don’t need Punxsutawney Phil to tell us that unsophisticated cyber attacks will continue to succeed.
One way to make sure cybersecurity is being managed appropriately.
If you are accountable for cybersecurity, but rely on others to manage it on your behalf, how do you make sure they aren’t making a mess of it?