Breaches: Page
-
Alex Wong via Getty Images
Data breaches, poor cyber practices raise cost of borrowing: study
Research from the American Accounting Association shows banks have raised interest rates on companies where customer data has been hacked.
By David Jones • June 7, 2021 -
Peter Macdiarmid via Getty Images
Why CISOs can't afford to have data breach fatigue
Security teams monitor thousands of alerts per day, which are hard to escape even in off hours, as news about data breaches becomes mainstream.
By Sue Poremba • June 1, 2021 -
Explore the Trendline➔
Getty Images
TrendlineManaging and securing identity sprawl
Cyber threat actors know the simplest way to hack into an enterprise and remain under the radar is with stolen, legitimate user credentials -- and AI is making managing and securing digital identities more challenging than ever.
By Cybersecurity Dive staff -
Sean Gallup via Getty Images
Compromised cloud costs companies $6.2M annually, study finds
Attackers heavily target Microsoft 365 and Google Workspace accounts using brute force or phishing attacks, according to Ponemon Institute research.
By David Jones • May 27, 2021 -
Stefani Reynolds / Stringer via Getty Images
As Colonial Pipeline returns to service, Congress looks to bolster utility-government security efforts
Several bills aim to boost public-private partnerships in securing the nations grid, which experts say are critical to keeping attackers at bay.
By Robert Walton • May 17, 2021 -
Getty Images
Password managers are a necessary — yet vulnerable — last line of defense
The Passwordstate breach is forcing CISOs and researchers to review vendors and reassess security practices.
By David Jones • May 4, 2021 -
Getty Images
First Horizon breach highlights rising threats against financial institutions
The attack shows the potential risk financial institutions face when trying to protect customer account data and financial assets.
By David Jones • April 29, 2021 -
Getty Images
Codecov hack — likened to SolarWinds — targets software supply chain
Third-party actors were able to linger inside the software-testing firm’s environment for months, exfiltrating customer data.
By David Jones • Updated April 30, 2021 -
Getty Images
Employees can't quit habit of writing down, sharing passwords
Amid heightened threats, workers are incorporating company names into passwords, writing them on sticky notes and sharing them via email.
By David Jones • April 6, 2021 -
Cybersecurity spending is up but so are breaches
Healthcare, media, entertainment and gaming experienced the greatest growth in breaches last year, coinciding with a "big shift" toward digital transformation, Canalys found.
By Samantha Schwartz • March 30, 2021 -
Security leaders: Expect more insider data leaks, threats in 2021
The rise stems from a lack of accurate insight from data loss prevention and cloud access security broker technologies.
By David Jones • March 29, 2021 -
Remote work gives rise to more executive credential theft
Threat actors are increasingly using social engineering to cultivate vulnerable end users and compromise networks, according to a CyberArk report.
By David Jones • March 25, 2021 -
55% of healthcare breaches feature ransomware: report
The healthcare industry is a favored target by cybercriminals: Hospitals cannot tolerate downtime or put off emergency patient care.
By Samantha Schwartz • March 10, 2021 -
Qualys confirms data breach related to Accellion after documents leak
The cloud security firm retained FireEye and insists the breach had no impact on production environments or its code base.
By David Jones • March 4, 2021 -
Companies overestimate ability to manage remote worker security
Employees working outside the office are granted excessive access privileges and are falling prey to phishing attacks, research from Tanium and PSB Insights found.
By David Jones • March 2, 2021 -
Senate SolarWinds hearing turns attention to breach notification laws, intel sharing
Amazon Web Services came under fire for declining to attend the hearing as top executives emphasized the need for faster disclosure and industrywide standards.
By David Jones • Feb. 24, 2021 -
Courtesy of Kroger
Accellion breach victim lists grows as Kroger discloses compromise
None of the organizations impacted by the Accellion hack so far have attributed who was responsible for the compromise.
By Samantha Schwartz • Feb. 22, 2021 -
Ransomware, poor security drove spike in healthcare breaches in 2020
A rise in ransomware and phishing attacks led to a 55% increase in healthcare breaches last year, according to Bitglass.
By David Jones • Feb. 17, 2021 -
Permission granted by Jacob Erling
Sponsored by AvananThe next generation of email security
Now, with a single approval of an API, every line of cloud business communication can be secured.
Feb. 16, 2021 -
Supply chain attacks renew focus on limiting privileged access to cloud data
Supply chain attacks and rapid shifts to cloud data storage have led companies to reduce access by third-party vendors and employees to sensitive data.
By David Jones • Jan. 29, 2021 -
Getty Images
Privacy investments mitigate security losses, report finds
Spending on data privacy has become a priority amid new concerns about COVID-19 data and remote work environments, a study from Cisco shows.
By David Jones • Jan. 26, 2021 -
Verizon: Software installation enables sneaky cyber espionage
Compared to other breaches, cyber espionage campaigns move "low and slow," said Verizon's John Grim.
By Samantha Schwartz • Jan. 22, 2021 -
2020 marked by fewer, but more damaging, data breaches
The total number of records exposed in data breaches — more than 37 billion — represented a 141% increase from 2019, Risk Based Security says.
By Naomi Eide • Jan. 21, 2021 -
Kendall Davis/Cybersecurity Dive
Microsoft's latest SolarWinds discovery highlights systemic supply chain weaknesses
Organizations are rushing to mitigate the full extent of the damage from compromise discovered three weeks ago.
By Naomi Eide • Jan. 4, 2021 -
Full impact of SolarWinds attack begins to emerge across tech sector, federal agencies
Several leading technology companies and other organizations are evaluating the impact of the SolarWinds breach and other recent nation-state attacks.
By David Jones • Dec. 23, 2020 -
Weighing the risks of disclosing a cyber incident
Not telling law enforcement or a regulator is an admission by an organization: We do not consider this cyber incident reportable.
By Samantha Schwartz • Dec. 10, 2020
Previous
