AGS Cyber

🦠 Another 3rd party data breach folks 👾 This week its Comcast... They've just announced that 237,000 customers have had their SSN, dates of birth, names, and other sensitive data stolen via FBCS (Financial Business and Consumer Solutions) which performed debt collection services for Comcast until 2020. FBCS was breached via a ransomware attack, initially said no customer data was stolen, only to backtrack on that statement shortly thereafter. This breach also affected Truist Bank customers, and CF Medical (620,000 patient medical and insurance records stolen - HIPAA will have fun with that one) Third-party risk continues to be a huge threat when it comes to exposure, and seems its getting worse every year. What could have prevented or reduced the scope of this breach? ▪ Data Encryption - Sensitive data such as SSN, and other PII, should ideally be encrypted to prevent this type of data exfiltration ▪ Data Retention - Even though Comcast cut ties with FCBS in 2020, they still had records for years after.. ensuring regular purging of data would have prevented the scope from being this large ▪ Vendor Management - Finally, its up toComcast to tighten its vendor risk management program and conduct some due diligence ahead of partnering. Weak vetting of security programs enabled FCBS to hold sensitive Comcast customer data without an effective security program #CyberBreach #ThirdPartyBreach #DataBreach #Ransomware #CustomerData #CyberJobs #Cybersecurity https://lnkd.in/ecnuDY7W

Iranian hackers have attempted to access sensitive information from Donald Trump's presidential campaign, with the FBI currently investigating these claims. Interestingly, they also reached out to President Joe Biden's campaign, suggesting a strategy to create discord between the two. This incident highlights ongoing cybersecurity threats to political campaigns as the 2024 U.S. presidential election approaches, emphasizing the need for robust security measures against foreign interference in democratic processes. https://lnkd.in/enkKcnAR #CyberBreach #ElectionFraud #Cybersecurity #CyberJobs #CyberTalent

Another symbiotic relationship flourishes – and partnerships amongst those fighting “the good fight” are the only way for cybersecurity resilience to keep progressing in an ever-evolving threat landscape. Been saying it for years! This partnership between Arctic Wolf x Pepper Advantage will help protect not only Pepper Advantage, but all of its clients in every jurisdiction in which it operates. #CyberPartnerships #CyberJobs #Cybersecurity #ThirdPartyRisk https://lnkd.in/gQDYh3gy

Enterprise Security shortcomings (as much in terms of inherent vulnerability flaws, as it is the case in multi-vendor integration scenarios), are fast becoming a problem foisted onto end-customers. We’re seeing more and more evidence that the end consumer is beginning to feel the cost of loose security measures at the enterprise level, globally. Don’t get caught out. Be proactive, or you’ll be on the losing side! #cybersecurity #cyberjobs #cybertalent #proactivesecurity https://lnkd.in/ecaD6SK8

The cost of reactive vs proactive security policies will keep rising, no matter what. Been saying this for years! Don’t get caughtout like many of the UK’s public infrastructure & services institutions. Whether you’re an organization sitting on the private commercial sector, or the public side - you’re going to want to get ahead of the cyber threats inevitably coming your way. #CyberJobs #CyberCareers #CybersecurityTalent #IfYouAintFirstYoureLast #YouGottaGive #ALotOfPeopleGive https://lnkd.in/g7S8Rzvh

Over the past 2 years, we’ve seen a notable uptick in threat actors specifically targeting SLED institutions and related organizations. Data breaches, ransomware, social engineering campaigns, and system takedowns becoming a regular occurrence in this space too after a decade of growth in breaches in the private and commercial sectors. Just earlier this week, it was reported that a school district in northeastern Tennessee lost more than $3 million earlier this year after an employee was tricked into sending funds intended for online curriculum materials to a fraudster. Appropriate measures (cyber awareness training, protocols, and proactive security policies) must be implemented, as these threats are only multiplying! https://lnkd.in/eSctteqQ #CyberNews #CyberJobs #CyberCareers #Hiring 

👾Microsoft Patches Actively Exploited Windows Vulnerability 👾 Microsoft has recently addressed a critical vulnerability in Windows that was being actively exploited by attackers. The vulnerability, tracked as CVE-2024-38193, allows attackers to gain SYSTEM privileges on the latest Windows operating systems. A few things to note about this particular security issue: 1)The vulnerability affects the most recent versions of Windows. 2) It has been marked as "actively exploited" by Microsoft, indicating that attackers were already taking advantage of it in the wild. 3) Successful exploitation could grant an attacker the highest level of system privileges (SYSTEM). This security flaw was part of Microsoft's latest round of patches, which addressed nearly 90 vulnerabilities across Windows and various OS components. The fact that it was being actively exploited makes it particularly noteworthy, as it represents an immediate threat to Windows users. Microsoft's prompt action in releasing a patch highlights the importance of keeping operating systems and software up to date. Users and system administrators are strongly advised to apply the latest security updates to protect against this and other potential threats. This incident serves as a reminder of the ongoing cat-and-mouse game between software developers and cybercriminals, emphasizing the critical role of timely security patching in maintaining a robust cybersecurity posture. #CyberJobs #CyberBreach #ZeroTrust #CVE202438193 #AdvancedPersistentThreat #APT

👾 Computer engineer hacks own employer, demands $750K ransom 👾 Daniel Rhyne, a core infrastructure engineer at a U.S. industrial firm, turned against his employer in a bold cyber extortion attempt, demanding $750,000 in Bitcoin. Leveraging his expertise, Rhyne secretly created a virtual machine (VM) within the company’s network, granting himself unauthorised access to critical systems. On November 25th, 2023, the firm’s employees were startled by unexpected password reset notifications from the domain administrator account—a high-level access point capable of controlling company-wide systems. Shortly after, Rhyne sent a ransom email claiming he had locked out all IT administrators, deleted backups, and threatened to turn off 40 servers unless the organisation paid the ransom. Law enforcement quickly traced the attack back to Rhyne. Investigators discovered the hidden VM linked directly to his company computer, with web searches on his device matching commands used to compromise the network. Contact me to find out how AGS Cyber can help you find the right talent to protect your business. 👩💻 [email protected] https://lnkd.in/eKgbvdcx #hacked #cybercareers #cybersecurity #cybercrime