Even our favorite superheroes can’t defend us against cyberattacks. Image: GettyImages/Yuichiro Chino In May, Specops Software, a password management and authentication company, released a roundup of “Star Wars”-themed breached passwords for the sci-fi holiday May 4 also known as Star Wars Day. On Monday, the company brought the DC and Marvel universes into the fold and released a roundup of commonly used superheroes found on compromised password lists. Turns out, superhero characters used as passwords…

Containers are complex virtual entities that provide proven benefits to the business but also require strong security guidelines. Learn how to get the most out of container security best practices. Image: Avigator Fortuner/Shutterstock Containers, best defined as an operating system virtualization instance that can run applications, microservices and processes, are a staple in the technology industry. Containers’ flexibility and ease of deployment can help achieve faster deliverables and more robust environments. SEE: Kubernetes: A cheat…

The US authorities reportedly opened a record number of cases relating to healthcare fraud in 2020, as unscrupulous individuals tried to profit during the pandemic. Michael Granston, deputy assistant attorney general at the Department of Justice’s Civil Division, revealed the news during the American Health Law Association’s annual meeting this week, according to Bloomberg Law. The DoJ opened a total of 900 new cases last year, 580 of which were related to healthcare fraud, according to…

The zero-day vulnerability known as PrintNightmare now has an official CVE listing, but Microsoft is still investigating the severity of the bug. The public disclosure of the flaw came about in a comedy of errors this week. A Chinese research team at QiAnXin announced exploit code for a similar remote code execution (RCE) vulnerability in the Windows Print Spooler service (CVE-2021-1675), which Microsoft had patched in June. Mistaking this code for a project that they had been working on,…

Scammers are increasingly resourceful when coming up with scam techniques. But they often rely on long-standing persuasion techniques for the scam to work. So, you may hear about a new scam that uses a novel narrative, but there is a good chance that the scam relies on proven scam techniques once the narrative is stripped away. These scam techniques often exploit our characteristics and heuristics, or things that make us human and fallible. In this…

The US and UK authorities have issued a new warning of state-sponsored Russian threat activity, focused on stealing information from global targets. The new NSA, CISA, NCSC and FBI alert attributes the campaign, which has been ongoing since mid-2019, to military intelligence outfit APT28 (aka Fancy Bear, Strontium). The threat actors use a Kubernetes cluster to conduct “distributed and large-scale targeting using password spray and password guessing”. These brute force attempts to crack credentials are routed through…

A new massive LinkedIn breach made the headlines, the leak reportedly exposes the data of 700M users, more than 92% of the total 756M users. A new massive LinkedIn breach made the headlines, a database containing data of 700M users, more than 92% of the total 756M users, is available for sale on forums on the dark web. The exposed records include email addresses full names, phone numbers, physical addresses, geolocation records, LinkedIn username and…

By Kate Orekhova, Cleveroad company Health organizations deal with a large amount of sensitive personal information. That’s why they face challenges complying with tightening regulations, and they’re constantly combating increased cyber risks and adapting to digital transformation. The healthcare institutions have to prove that technologies and methods they adopted keep patients’ personal information secure and bring no risks. And using recognized standards and frameworks is a great decision. In this guide, we discuss how to…