In recent developments, Roku, a leader in the streaming media industry, has been struck by two significant cyberattacks, highlighting vulnerabilities even in well-established tech entities. The second of these incidents proved particularly severe, with the compromise of approximately 576,000 user accounts due to credential-stuffing attacks. This alarming breach accounts for a substantial number of affected…
Photo Credit: Uhaul | Source: Mike Mozart commons.wikimedia.org U-Haul, a prominent player in the moving equipment and storage rental industry, has recently been hit by a significant data breach that has affected approximately 67,000 customers. The breach was disclosed by the company on February 26, 2024. The breach occurred when an unauthorized individual gained…
The ongoing cybersecurity outage at Change Healthcare, a leading provider of healthcare technology solutions, has entered its sixth day, marking an extended disruption in the company’s operations. This continued downtime is causing significant concern among its customers and stakeholders. The Nashville-based firm has been grappling with a massive cyber incident since February 21, 2024. The…
In a significant shift in strategy, the Russian threat group known as “Midnight Blizzard” has begun targeting cloud-based services. This group is linked to the Russian intelligence services (SVR) and has been associated with high-profile cyberattacks on SolarWinds, Microsoft, and HPE. The group’s new approach involves leveraging service accounts and dormant accounts to gain access…
Photo Credit: Royal Canadian Mounted Police (RCMP) | Author Jamie McCaffrey, commons.wikimedia.org Canada’s Royal Canadian Mounted Police (RCMP) and Global Affairs Department have recently been targeted by cyberattacks, according to an official statement released on February 28, 2024. The entities have been grappling with these cyber incidents, which have disrupted their operations. The attacks…
Cencora Inc., a significant player in the pharmaceutical industry previously known as AmerisourceBergen, has recently fallen victim to a major data breach. The company discovered unauthorized access to its information systems on February 21, 2024, leading to potential exfiltration of personal data, as per their Form 8-K filing with the Securities and Exchange Commission (SEC).…
In a significant move aimed at fortifying digital defenses, the National Institute of Standards and Technology (NIST) has officially launched the second version of its Cybersecurity Framework. The updated framework is designed to provide organizations with a robust blueprint for managing and reducing cybersecurity risk, ensuring the protection of sensitive data, and safeguarding operational continuity.…