Weekly #cybersecurity digest to your inbox

Starbucks Devs Leave API Key in GitHub Public Repo

One misstep from developers at Starbucks left exposed an API key that could be used by an attacker to access internal systems and manipulate the list of authorized users. [...]

Go to article at

15.5.2020

Cloud Storage Misconfiguration

Why Third-Party Security is Critically Important in 2020

The new year has only just begun, and many CISOs and compliance professionals are making third-party risk management a priority. Similar to how those who never received flu shots may suddenly decide to vaccinate during a particularly bad flu season, companies that never had a formal third-party security process are now focusing attention on how to create and implement one.   The post Why Third-Party Security is Critically Important in 2020 appeared first on Security Boulevard.

Go to article at

15.5.2020

Supply Chain Attacks

CEOs quit social media to keep them secure | Avast

Cyber threats now command the corporate sector’s full attention. The post CEOs quit social media to keep them secure | Avast appeared first on Security Boulevard.

Go to article at

15.5.2020

Business-Email-Compromise,CyberNow

Visa's plan against Magecart attacks: Devalue and disrupt

Beginning last summer, Visa begun throwing considerable resources at combating Magecart -- a type of attack were cybercriminals hack into an online store to plant malware that collects payment card data as users enter personal details in checkout forms. Speaking to ZDNet in a phone interview this week, Visa Senior Director of Payment Systems Intelligence David Capezza says Visa's strategy against Magecart groups is to "devalue and distrupt." Through this approach Capezza says Visa aims to devalue the data attackers can steal from online stores, and then disrupt existing operations and prevent future attacks. Visa's plan to devalue payment card data involves the rollout of new technologies like the Visa Token Service and Click To Pay systems. The Visa Token Service is a new payment mechanic through which payment card numbers and details are replaced by a token. However, as Visa and its partners on the payments market are rolling this new checkout experience to a broader audience, Visa's security team has also been spending its time disrupting existing Magecart operations as much as possible.

Go to article at

15.5.2020

Supply Chain Attacks

Understanding The Ripple Effect: Large Enterprise Data Breaches Threaten Everyone

Go to article at

15.5.2020

CyberNow

Why the Latest Marriott Breach Should Make Us "Stop and Think" About Security Behaviors

Marriott International has experienced their second data breach

Go to article at

15.5.2020

Employee Negligence

Texas bank attacked with DoppelPaymer ransomware — attackers’ report

It’s getting uglier out there.  Both Maze Team and the DoppelPaymer ransomware teams seem to be attempting to increase...

Go to article at

15.5.2020

Ransomware

Most IT leaders believe remote workers are a security risk

57 percent of UK IT decision makers still believe that remote workers are a security risk, and that they will expose their organization to the threat of a data breach, according to a survey by Apricorn. This figure has inclined steadily from 44 percent in 2018 and 50 percent in 2019. The rise could reflect a corresponding increase in the number of remote workers, or an enhanced awareness of the risks of doing so as … More → The post Most IT leaders believe remote workers are a security risk appeared first on Help Net Security.

Go to article at

15.5.2020

Employee Negligence

T-Mobile Suffers a Data Breach, Again

T-Mobile has begun notifying customers of a security breach that might affect an undetermined number of them, possibly revealing their names and addresses, phone numbers, account numbers, rate plans and features, and billing information. Wireless carriers are a prime target for hackers because they hold large databases of customers and data that command a high […] The post T-Mobile Suffers a Data Breach, Again appeared first on Security Boulevard.

Go to article at

15.5.2020

Illegal Personal Data Processing