Georgia’s university system was thought to be among the first wave of organizations compromised when the MOVEit breach emerged in May 2023, but notifications have just recently been issued to about 800,000 likely victims.
The State Department’s international cybersecurity strategy makes clear the US government hopes to be at the head of a global consensus that exerts influence over everything from the internet’s undersea cables on up in the digital sphere.
Another hole in a contractor’s defenses has led to a third party breach of a system containing sensitive government information, as the Ministry of Defense has confirmed that the financial information of some 272,000 UK armed forces personnel has been exposed.
CEO Satya Nadella has specifically noted that Microsoft’s security initiative and focus on cyber threats must always come ahead of any other concern, including feature additions and improvement and support for legacy products.
Aside from continuing employee- and staffing-related struggles, the Verizon DBIR report also sees something of a “golden age” of vulnerability exploitation developing for cyber criminals.
A report issued by South Korea’s National Police Agency indicates that the “big three” of North Korean hackers have all been involved in a project to hack national defense companies since at least late 2022.
The government has a valid theoretical national security concern, one that has already led to TikTok bans on most federal devices and at numerous state and local levels, but the argument is not landing well with a US public that has almost half its population on the app.
The Change Healthcare attack that leaked patient data and disrupted medical care across the US was indeed settled by a ransom payment. Now the former AlphV affiliate that perpetrated the attack has taken the data to a new extortion service and is demanding a second payment.
As the Ivanti and MITRE incident demonstrates, serious zero-day vulnerabilities continue to linger even at security-minded organizations. MITRE was penetrated by a chain of two specific Ivanti vulnerabilities that were reported to the public in January, and nation-state hackers have been blamed.
A recent law enforcement operation that took down the LabHost phishing service has raised some questions about the “mainstreaming” of cyber crime, as the London police found that young university students with no prior record of hacking or online criminal activity were among the suspects that were rounded up.