Security News

HealthEquity, a leading provider of health savings account (HSA) services, has announced it suffered a data breach recently, resulting in compromised customer protected health information (PHI). It is understood the breach was detected on March 25, 2024, after abnormal activity was flagged from a business partner's device. Once an investigation was carried out, it was revealed that a threat actor had accessed and exfiltrated data from HealthEquity's SharePoint system. HealthEquity mobilised and launched a forensic...

As the demand for lithium-ion batteries surges, driven by the electric vehicle (EV) boom and renewable energy storage needs, the security of the lithium supply chain has never been more critical. Leaders in market intelligence for battery materials highlight the increasing importance of robust cybersecurity measures to protect this vital industry.   Why Cybersecurity Matters The lithium supply chain involves complex networks of mining, processing, and manufacturing, often spanning multiple countries and involving numerous stakeholders. With...

OX Security, the pioneer in Active Application Security Posture Management (Active ASPM), today issued the OSC&R community’s inaugural software supply chain threat report, "OSC&R in the Wild: A New Look at the Most Common Software Supply Chain Exposures." Based on a nine-month analysis of over 100 million alerts, tens of thousands of code repositories, and 140,000 real-world applications, the report is the first comprehensive analysis of the severity of vulnerabilities across the software supply kill...

Outpost24 has launched its Outpost24 Exposure Management Platform, a new integrated exposure management solution designed to empower organizations to continuously monitor and proactively remediate threats against the growing attack surface.  As a result of digital transformation, increased adoption of SaaS applications, and the use of cloud technologies, businesses are seeing a rapidly expanding attack surface, making critical assets more vulnerable. Alongside this expanding attack surface, organizations are seeing an explosion of vulnerabilities and a shortening...

New research into password usage for new accounts during the onboarding process, has revealed a worrying trend where easily guessable passwords are left unchanged for new starters, presenting significant security risks for organisations. The findings from Secops Software, an Outpost24 company, analysed 651 million compromised passwords which highlighted a list of 120,000 commonly used password for new team members. At the top of the list was the term "User", appearing 41,683 times. "Temp" was second...

The Met Police, a long with a host of other global law enforcement agencies, have dismantled a criminal gang that used a technology service to facilitate fraudulent text messages, leading to theft from victims. The scam primarily targeted younger individuals familiar with the internet. The technology service, LabHost, aided scammers in sending deceptive messages and directing victims to fake websites resembling legitimate online payment or shopping services. The criminals obtained identity information, including card numbers...

Third-party cyber-attacks remain one of the most significant threats facing organisations across the globe. Most recently, Bank of America, a multinational investment banking and financial services corporation, began notifying customers that a November 2023 hack against one of its service vendors resulted in the exposure of personally identifiable information (PII).  The breach occurred following a security incident against Infosys McCamish Systems (IMS), a subsidiary of Infosys that provides deferred compensation plan services to Bank of...

Salt Security, the API security company, has been named the winner of the API Security category in the 2023 CISO Choice Awards. Judged by a panel of distinguished CISOs at large organisations across the world, the CISO Choice Awards honour security vendors who provide top-tier differentiated security solutions, valuable to CISOs and their enterprises. Salt, utilising powerful cloud-scale big data and time-tested artificial intelligence (AI) algorithms, protects APIs across their full lifecycle and delivers the...

New research this week has given warning to employees to be on alert to emails seemingly from human resources (HR) as they could be fraudulent. In fact, the findings from KnowBe4's latest phishing report has highlighted that fraudulent HR emails remain a prevalent tactic employed by cybercriminals. Such deceptive emails may encompass subjects like alterations in dress code policies, updates on training sessions, changes in vacation policies, or a wide range of other topics. These deceptive...

Flagstar Bank is notifying customers that a data breach targeting a third-party vendor has resulted in the exposure of personal customer information. Flagstar uses the vendor in question, Fiserv, for transaction processing and mobile banking services. The notice sent out on Friday states that Fiserv is one of the many organisations impacted by the headlining mass MOVEit file transfer hack.  Prior to its 2022 acquisition by New York Community Bank, Flagstar previously had assets of over $31...