July 28th, 2024

• KnowBe4 Catches Fake IT Worker From North Korea Planting Malware
• A New Competitor to Google Search
• FBI Says The Got Into Shooter’s Phone But Not Apps
• Oracle Agrees to Pay $0.52 Per Victim (Before Legal Fees) for Privacy Violation
• Is This the Start of Chevron Fallout? – Fifth Circuit Declares Universal Service Fee Unconstitutional
• Duty to Preserve Evidence in the Era of Social Media
• Largest US Trial Court, LA County, Shut Due to Ransomware

Security News for the Week Ending July 26th, 2024

This week’s news bites: Google rolls back decision to kill third party cookies, hackers cyber
attack Ukrainian heating systems in winter, CrowdStrike can’t catch a break, UK’s OFCOM fines
TikTok $2 million for failure to provide child safety info and in case you were wondering why
software has so many bugs.

Read details here.

We are not lawyers and do not pretend to be ones, even on the Internet, but if you need
technical help with preserving evidence, please contact us.

Mitch
www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.com
Mitch@CyberCecurity.com
720-891-1663

July 21st, 2024

• Hackers Launch ‘Trial’ Attacks on French Websites
• New Quantum Computer Outperforms Google’s Previous Record by 100x
• Singapore Banks to Phase Out One Time Passwords – to Improve Security
• Microsoft to Start Releasing Checkpoint Updates in Late 2024
• Cisco Scores a 10 – Too Bad This is Not Gymnastics
• EU Threatened Twitter With Fine of up to 6% of Global Revenue
• Three Cheers for an Honest 8-K Report
• Judge Tosses SOME of the SEC Lawsuit Against SolarWinds
• Judge Vacates Part of OCR Guidance on Online Tracking Technologies
• One-Third of Dev Pros Don’t Know About Secure Coding Practices
• Users of Li.FI Cross-Blockchain Protocol Lose at Least $10 Million
• Disney Suffers Large Breach of Internal Communications
• WazirX Exchange Hacked for $235 Million

Security News for the Week Ending July 19th, 2024

This week’s news bites: AT&T is the first to evade SEC’s 4 day breach rule, there is a silver
lining in everything, Britain’s new gov to introduce watered-down mandatory breach reporting,
FBI takes 40 minutes to crack Trump shooter’s phone and was your Friday as bad as
Crowdstrike’s or its customers.

Read details here.

The silver lining in the Crowdstrike failure is that it exposed a lot of business continuity
failures at companies, but also at their vendors. Companies who had no clue who
Crowdstrike was were no longer able to conduct business. This is a good reminder to
review your business continuity plan. If you need help, please contact us.

Mitch
www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.com
Mitch@CyberCecurity.com
720-891-1663

July 14th, 2024

• 30 Year Old Protocol Has Critical Flaw – Called BlastRADIUS
• Apple Bows Down to Russia – Again
• Apple Warns iPhone Users in 98 Countries About Mercenary Spyware Attacks
• You Know Those Claims About Demanding Warrants – Automakers Lie
• Microsoft Patch Tuesday is a Fun One
• Microsoft reminds users to upgrade or be unsupported in 90 days
• Supreme Court to Take Up Texas Law Requiring Tracking of Visits to Adult Websites
• Pranking Those Scam Call Centers
• Risks from IDing People Who Access Adult Websites
• AT&T Says Data on Nearly All Customers Compromised
• Ticketmaster and Hackers Trade Claims
• Debt Collector Now Says Twice As Many People Compromised; Medical Info Compromised
• Evolve Bank & Trust Breach Continues to ‘Evolve’
• Indiana County Files Disaster Declaration After Cyber Attack; Dallas County, TX Notifies Residents of Data Breach Nine Months After Attack

Security News for the Week Ending July 12th, 2024

This week’s news bites: cyber insurance prices trending down, US intelligence community says
Russia is trying to influence the election in favor of Trump, Florida pulls its ‘Dumb ID’ digital
driver’s license app and tells users to delete it, scammers “double scam” victims by offering to
help them recover and CISA broke into a federal agency and no one noticed – for five months.

Read details here.

Whether it is Ticketmaster and Snowflake or Affirm, Mercury and Wise with Evolve, we
see time and again that vendors, cloud providers and other third parties that companies
depend on, are the source of data breaches which ultimately cost them a lot of money. If
you depend on third parties and you have questions about their security, please contact
us.

Mitch
www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.com
Mitch@CyberCecurity.com
720-891-1663

July 7th, 2024

• Juniper Networks Scores a Perfect 10 – Unfortunately, this is NOT the Olympics
• Twilio Admits Hackers Stole MFA Phone Number for 33 Million Customers
• Largest Leak of Plain text Passwords in History – 9.9 BILLION UNIQUE Passwords
• OpenSSH Bug from 2006 Has Reappeared in 700,000 Vulnerable Systems
• Police Arrest Over 3,900 in Global Sting
• Meta’s EU “Pay or Consent” Model Faces More Scrutiny
• Crypto Friendly Silvergate Bank Pays $63 Million Fine to Keep Feds Happy
• A CISO’s Guide to Avoiding Jail After a Breach
• Defense Contractor Crown Forklift Hit by Ransomware; Tells Employees to File for Unemployment
• UPDATE: Car Dealer Software Maker Pays Multi-Million in Ransom
• Chicago Children’s Hospital Says 800,000 Affected by January Ransomware
• Ticketmaster Breach Far Worse Than We Knew

Security News for the Week Ending July 5th, 2024

This week’s news bites: speculative execution raises its ugly head again, large west coast credit
unit hit by ransomware – customers confused, car dealers lost over $600 million so far due to
CDK breach, EU hosting provider says they have to fight 840 mbps DDoS attacks and Brazil’s
data protection authority bans Meta from processing users’ data.

Read details here.

Car dealership cloud software vendor CDK was hit by a ransomware attack that took
them down for several weeks. The car dealers may ultimately lose a billion dollars as a
result. CDK may wind up having to reimburse those dealers, plus legal costs, plus fines,
plus reputational damage. If you are a cloud provider you need to do everything you can
to keep the hackers out and recover quickly. If you use cloud software and are not
interested in losing a billion dollars because your cloud vendor had less than stellar
cybersecurity practices, you need to make sure that you have a solid business continuity
plan. If either of these scenarios causes you to lose some sleep, please contact us.

Mitch
www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.com
Mitch@CyberCecurity.com
720-891-1663