DNA Test Firm: 2.1 Million Affected by Legacy Database Hack

Marianne Kolbasuk McGee • November 30, 2021

An Ohio-based DNA testing company reported to regulators that the information of more than 2.1 million individuals contained in a legacy database was accessed and acquired in a hacking incident detected in August. The archived database contained personal information collected more than a decade ago.

3rd Party Risk Management

Why Ransomware Is a Game Changer for Cyber Insurance

Latest

Fraud Management & Cybercrime

Changing the Rhetoric of Security

Anna Delaney • November 30, 2021

In her latest book, "Rhetoric of InSecurity: The Language of Danger, Fear and Safety in National and International Contexts," academic Dr. Victoria Baines questions the imagery and rhetoric we use to communicate safety and security issues and their impact on the workforce.

3rd Party Risk Management

Forrester Predictions: Rethinking Supply Chain Management

Anna Delaney • November 30, 2021

Forrester's Sandy Carielli and Jeff Pollard discuss their latest research, Predictions 2022: Cybersecurity, Risk and Privacy, which highlights the need for gaps in third-party relationships, collaboration and trust to be addressed.

Breach Notification

Senate Considering Several Cyber Measures in Annual NDAA

Dan Gunderman • November 29, 2021

Following the holiday recess, U.S. lawmakers are picking up several legislative priorities starting Monday, including progress on the annual defense spending bill, which contains amendments that would require incident reporting for critical infrastructure providers, among other measures.

Cybercrime

The Best Gift for the Holidays? An Incident Response Plan

Anna Delaney • November 26, 2021

In the latest weekly update, four editors at Information Security Media Group discuss important cybersecurity issues, including why security teams are still unprepared for cyberattacks over weekends and holidays, which experts warn is when attackers love to strike.

3rd Party Risk Management

Essential Preparations for the Holiday Season Attack Surge

Anna Delaney • November 26, 2021

The latest edition of the ISMG Security Report features an analysis of how organizations can reduce risk especially over holidays and weekends, when attackers are most likely to strike. Also featured: Highlights from Ireland's IRISSCON 2021 cybercrime conference; what's ahead for COVID-19 and the workplace?

Cybercrime

Ukraine's Secret Service Busts 5 Alleged 'Phoenix' Hackers

Mihir Bagwe • November 25, 2021

The Secret Service of Ukraine has arrested five Ukrainian citizens on suspicion of being part of a cybercrime group called Phoenix, which it says has been tied to hacking hundreds of mobile devices, stealing personal data and also selling "hacking as a service" to others.

Cybercrime

Report: China to Target Encrypted Data as Quantum Advances

Dan Gunderman • November 23, 2021

Chinese threat actors may increasingly look to steal sensitive, encrypted data in hopes of decrypting it with quantum computing technology in the years ahead, according to a new report. Researchers say Chinese threat actors may target government, business and academic data with long-term value.

Business Continuity Management / Disaster Recovery

COVID and the Holidays: What You Need to Know

Tom Field • November 23, 2021

COVID-19 deaths are down in some parts of the U.S., but infection rates are up. What does this mean as the nation kicks off its holiday season with Thanksgiving? Pandemic expert Regina Phelps shares insight on how to approach the holidays and what it will take to attain an endemic state.

3rd Party Risk Management

US Cybersecurity Alert: Hackers Won't Respect Thanksgiving

Mathew J. Schwartz • November 23, 2021

The U.S. government warns all businesses that they're at elevated risk of online attacks during Thanksgiving, given attackers' proclivity to strike on weekends and holidays. The alert is a reminder of the importance of having in place well-practiced incident response plans. Here's where to start.

3rd Party Risk Management

'The Shared Responsibility That Cyberspace Is'

Anna Delaney • November 23, 2021

A new report by Huawei Technologies USA and Reuters calls for greater international collaboration around transparency and cyber accountability. "Just having requirements isn't good enough. There needs to be an ability to tell whether or not the requirements are being met," says CSO Andy Purdy.

Application Security

Update: GoDaddy Breach Hits Managed WordPress Customers

Mihir Bagwe • November 23, 2021

Web hosting giant GoDaddy confirms that a data breach which affected about 1.2 million of its active and inactive Managed WordPress customers, has also hit Managed WordPress users tsoHost, Media Temple, 123Reg, Domain Factory, Heart Internet, and Host Europe.

Cybercrime

Cybersecurity Unplugged: Start on the Zero Trust Journey

Steve King • November 23, 2021

Drawing on his deep background in technology, government and law, cybersecurity adviser Tony Scott delves into many pressing issues in cybersecurity today - including zero trust. In this episode of "Cybersecurity Unplugged," he says organizations should get started on the journey now.