Industry News

Having an Incident Response Plan (IRP) is a systemic and essential aspect of cybersecurity for organizations. It ensures preparedness against cyber attacks, aids in minimizing damage, and facilitates rapid recovery. IRPs are specifically designed to detect, efficiently respond to, and recover from various security threats, such as ransomware or phishing attacks. Eperjesi, Ashlyn. 2023. “What […]

As the cyber threat landscape continues to rapidly evolve, a new cybersecurity paradigm has emerged: the zero trust model. This approach recognizes the importance of denying default access to data and applications, promoting a proactive stance of never trusting and always verifying for enhanced security. McDonald, Adrian. 2022. “New Cyber Threat Landscape Spurs Shift to […]

Penetration testing, or ethical hacking, has become a key process for organizations to identify and correct vulnerabilities in their systems before they can be exploited by cybercriminals. However, there are ethical and legal considerations that organizations must take into account in order to successfully conduct penetration testing in a responsible manner. Gillam, Jason. 2023. “What […]

Risk-Based Patch Management assists IT teams in optimizing their time by identifying the priority of threats. By prioritizing the mitigation of critical threats, it enables the team to concentrate their efforts on addressing the most urgent vulnerabilities. This approach allows the team to make significant progress in establishing an effective patch management strategy while ensuring […]

The BBC, British Airways and Boots have all confirmed data breaches as a result of an attack on Zellis, a British enterprise payroll provider.

Zellis has fallen victim to exploitation of a zero day (previously unknown) vulnerability in enterprise file transfer software “MOVEit Transfer.”

Japanese car maker Toyota this week announced that cloud configuration issues have led to years-long exposure of customer data.

The impacted environments, which are managed by Toyota Connected Corporation (TC), contain information related to the vehicles of Japanese customers, as well as the personal information of customers overseas.

The firm’s data, which was initially reported by Bleeping Computer, shows that 362 servers in the U.S. and 240 servers in Canada had been affected by the ransomware, as of this writing. More than 2,400 servers running the VMware ESXi hypervisor are currently impacted in total, and the U.S. and Canada rank second and fourth, respectively, in terms of […]

The sophistication of the technology employed by threat actors has increased along with the number of threats. Data has evolved as an essential resource of an intelligent business, used for everything from daily operations to developing long-term plans. Data security becomes increasingly tricky as its value and business importance increase. Organizations are becoming aware of […]

In the two weeks since the Hospital for Sick Children in Toronto was the target of a ransomware attack, the institution continues to deal with cybersecurity issues. Nick Westoll reports. It’s been two weeks since the Hospital for Sick Kids was the target of a ransomware attack, and not only are sick kids staff still […]