10 Recent Data Breaches!

Edward Snowden has called it "the story of the year".Pegasus is spyware developed by the NSO Group, an Israeli cyberarms company.In 2019, it gained notoriety after WhatsApp sued NSO saying over 1,400 users had been targeted using the technology - including many Indian journalists and activists.Now, a global consortium of over 80 journalists from 17 media platforms across 10 countries has released a report alleging that more than 50,000 phone numbers may have been selected for surveillance by way of the Pegasus software.

This would be the widest usage of the spyware yet.The alleged targets include government critics, members of opposition and journalists from countries such as Bahrain, Saudi Arabia, Azerbaijan, Rwanda, Hungary, Mexico - and India.How does Pegasus work?

What is the Pegasus Project?

And how does India feature in all this chaos?Click link to read: https://transfin.in/the-pegasus-project-explained-what-the-spyware-does-who-were-allegedly-targeted-and-the-india-angle

Identity fraud is a rapidly growing form of online lending fraud.

Lenders have lost over $6 billion by synthetic identity fraud in 2016.

As data breaches have been growing, synthetic identity fraud is becoming harder to detect by financial institutions.Source URL: https://www.bloglog.in/identity-fraud-what-online-lenders-should-know-about-it/

Privacy laws are also important.

Data breaches have affected millions of people who trust in companies like Equifax, Facebook, Marriott, Yahoo!, and many others to keep information secure.

Electronic recycling laws and privacy laws are amended and added in hopes of adding new or upgraded protections to the environment and its people.

Learn here about the e-waste and privacy laws to watch out for in 2021: https://eridirect.com/blog/2020/12/e-waste-and-privacy-laws-to-watch-for-in-2021/

Global Exchange: A new web app called "Shhgit' scans GitHub code repository for private crypto news!A security expert by name Paul Price launched a new tool called 'Shhgit'.

This tool scans across repositories which might be stolen by bad actors.

This can also cause security breaches.According to Paul Price, there are many other open-source tools like gitrob and trugglehog which can "commit history to find secret tokens from specific repositories, users or organizations.

"Price also added that "config files should be encrypted with an environment-based key.

"Although scanning for secrets in public code repositories has existed since the launch of GitHub, some recent data breaches, such as the Capital One hack that left the personal data of over 100 million individuals exposed, show severe implications of faulty security that can lead to reputational damage and huge fines.

Price states that his tool can help in finding any secrets accidentally committed in real-time, which should give developers the time to delete any sensitive information before hackers can have a field day with anybody’s private information.

Connected automotive cybersecurity solution will enable smart cars to deliver new experiences while managing risks associated with system vulnerabilities, data breaches and threats to the systems' integrity and safety.

Error plague, invalid solutions, data breaches, and other tech risks you run into when outsourcing software development. How to avoid them?

Financial services make every effort to stay secure, but they still make up at least 35% of all data breaches.

According to a Twitter poll in November 2019, the poll concluded that the Banking and Financial sector is battling with a huge number of cyber threats.

Banks and financial organizations are a target for hacking.

Mitigating data leakages and fraud prevention is a major aspect of the institutions’ security, but it is becoming more difficult as cyber threats such as Wi-Fi hacking and web-based applications evolve and become more sophisticated.Read more at AndroGuru: https://www.androguru.com/2020/04/04/top-cybersecurity-threats-to-financial-services-in-2020/ 

There is no doubt about the fact that the best passwords will counter dictionary attacks and brute force but at the same time should be easily remembered.

Often, the researchers come up with news on data breaches.https://www.justwebworld.com/how-to-create-a-strong-password/

Hard drive shredding toronto allows you to reduce the risks of data breaches and achieve compliance with data protection legislation.

People who are working for the Department of Defense (DoD) may already know how much of an emphasis has been placed in recent times on cybersecurity.

The DoD has published Defense Acquisition Federal Regulation Supplement (DFARS) in 2015 which stipulated that all those private contractors who are working for the DoD must abide by the rules and standards of NIST SP 800-717 on cybersecurity.

And this rationale behind DFARS act is to safeguard the country's defense supply chain against the data breaches and threats posed by cyber attackers both domestically and internationally.

This led to forcing more than 300,000 private DoD contractors by DFARS to adapt to these new standards and rules so that they comply with the present law system.During contract awards procedures, DoD actively discriminates against all those private companies or DoD contractor who is not possessing the necessary cybersecurity standards.

Despite the urgency whipped up by the DoD, thousands of private companies have yet to comply with the DFARS new standards and in fact, few private contractors have made false claims about their compliance.

In order to deal with these problems, DoD has created the Cybersecurity Maturity Model Certification (CMMC).What is CMMC Compliance:The DoD has created the Cybersecurity Maturity Model Certification (CMMC) compliance in order to ensure that all the private companies or contractors observe appropriate levels of cybersecurity controls.