CPO Magazine

#Hackers leveraged 139 compromised NHS email accounts to send thousands of malicious emails in a #phishing campaign that started in Oct 2021 and peaked in Mar 2022. #cybersecurity #respectdatahttps://www.cpomagazine.com/cyber-security/legitimate-nhs-email-accounts-exploited-in-credential-harvesting-phishing-campaign-and-advance-fee-scams/?utm_campaign=coschedule&utm_source=twitter&utm_medium=cpomagazine&utm_content=Legitimate%20NHS%20Email%20Accounts%20Exploited%20in%20Credential%20Harvesting%20Phishing%20Campaign%20and%20Advance-Fee%20Scams …

Current diplomat #phishing campaign makes use of legitimate email addresses that have been previously compromised, and opens with what appears to be an administrative notice from an embassy. #cybersecurity #respectdatahttps://www.cpomagazine.com/cyber-security/phishing-campaign-by-russian-hackers-uses-trello-dropbox-to-target-diplomats/?utm_campaign=coschedule&utm_source=twitter&utm_medium=cpomagazine&utm_content=Phishing%20Campaign%20by%20Russian%20Hackers%20Uses%20Trello%2C%20Dropbox%20to%20Target%20Diplomats …

The first cut of standards encompassed in the WP.29 regulation and ISO 21434 are defining the directive for implementing #cybersecurity management systems for the protection of vehicles. #respectdatahttps://www.cpomagazine.com/cyber-security/the-race-for-cybersecurity-regulation-compliance-is-on/?utm_campaign=coschedule&utm_source=twitter&utm_medium=cpomagazine&utm_content=The%20Race%20for%20Cybersecurity%20Regulation%20Compliance%20is%20On …

BlackCat #ransomware works with developers and money launderers linked to BlackMatter ransomware with extensive extortion networks and experience in ransomware operations. #cybersecurity #respectdatahttps://www.cpomagazine.com/cyber-security/fbi-alert-warns-of-blackcat-ransomware-that-compromised-60-organizations-in-4-months/?utm_campaign=coschedule&utm_source=twitter&utm_medium=cpomagazine&utm_content=FBI%20Alert%20Warns%20of%20BlackCat%20Ransomware%20That%20Compromised%2060%20Organizations%20in%204%20Months …

Some of the frustration also appears to stem from the fact that relatively junior employees must sign off on decisions made by senior engineers; any new use of customer data requires the formal approval of at least 3 "#privacy czars." #respectdatahttps://www.cpomagazine.com/cyber-security/unintended-consequences-of-apples-privacy-rules-internal-engineers-app-developers-feel-constrained-by-lack-of-incoming-information/?utm_campaign=coschedule&utm_source=twitter&utm_medium=cpomagazine&utm_content=Unintended%20Consequences%20of%20Apple%27s%20Privacy%20Rules%3A%20Internal%20Engineers%2C%20App%20Developers%20Feel%20Constrained%20by%20Lack%20of%20Incoming%20Information …

83% of requests are asking for access to data and 77% include deletion of personal information. #privacy #datarights #respectdatahttps://www.cpomagazine.com/data-protection/report-on-data-rights-illuminates-the-global-direction-of-access-and-deletion-requests/?utm_campaign=coschedule&utm_source=twitter&utm_medium=cpomagazine&utm_content=Report%20on%20Data%20Rights%20Illuminates%20the%20Global%20Direction%20of%20Access%20and%20Deletion%20Requests …

Sharing of data from COVID-19 contract tracing app may allow #hackers to steal information across different healthcare systems. #cyberattacks #respectdatahttps://www.cpomagazine.com/cyber-security/covid-19-contact-tracing-the-unreported-national-security-risk/?utm_campaign=coschedule&utm_source=twitter&utm_medium=cpomagazine&utm_content=COVID-19%20Contact%20Tracing%3A%20The%20Unreported%20National%20Security%20Risk …

Rapid7 explained that the use of compromised Codecov Bash Uploader script was limited to the development of internal tools and not for production code. #cybersecurity #respectdatahttps://www.cpomagazine.com/cyber-security/rapid7-says-codecov-supply-chain-attack-exposed-some-customer-credentials-and-source-code-repositories/?utm_campaign=coschedule&utm_source=twitter&utm_medium=cpomagazine&utm_content=Rapid7%20Says%20Codecov%20Supply%20Chain%20Attack%20Exposed%20Some%20Customer%20Credentials%20and%20Source%20Code%20Repositories …

Critics have argued that #FISA bulk collection constitutes a legal loophole that is sometimes knowingly applied for domestic #surveillance and warrantless searches that would otherwise not be permitted. #privacy #respectdatahttps://www.cpomagazine.com/data-privacy/fbi-warrantless-searches-more-than-doubled-in-2021-with-3-4-million-fisa-requests-agency-claims-unusual-surge-in-cyber-attacks-on-critical-infrastructure/?utm_campaign=coschedule&utm_source=twitter&utm_medium=cpomagazine&utm_content=FBI%20Warrantless%20Searches%20More%20Than%20Doubled%20in%202021%2C%20With%203.4%20Million%20FISA%20Requests%3B%20Agency%20Claims%20Unusual%20Surge%20in%20Cyber%20Attacks%20on%20Critical%20Infrastructure …

"#BigTech wants to avoid any more #privacy bills similar to California's #CCPA, which in turn takes numerous elements from the EU's #GDPR. #respectdatahttps://www.cpomagazine.com/data-privacy/big-tech-moves-to-influence-state-privacy-laws-laying-the-groundwork-for-a-federal-push/?utm_campaign=coschedule&utm_source=twitter&utm_medium=cpomagazine&utm_content=Big%20Tech%20Moves%20to%20Influence%20State%20Privacy%20Laws%2C%20Laying%20the%20Groundwork%20for%20a%20Federal%20Push …

#PKI can be used to secure #IoT. Components that make up the IoT devices need to be constantly exchanging, checking and re-checking private keys, creating an interconnected #security infrastructure. #respectdatahttps://www.cpomagazine.com/cyber-security/securing-entire-supply-chains-in-preparation-for-an-iot-future/?utm_campaign=coschedule&utm_source=twitter&utm_medium=cpomagazine&utm_content=Securing%20Entire%20Supply-Chains%20in%20Preparation%20for%20an%20IoT%20Future …

Some observers believe that the Chinese government sees #bigtech platforms as growing to such a size that they threaten to rival or undermine it. #privacy #respectdatahttps://www.cpomagazine.com/data-privacy/chinese-internet-watchdog-targets-33-mobile-apps-that-broke-new-data-collection-rules/?utm_campaign=coschedule&utm_source=twitter&utm_medium=cpomagazine&utm_content=Chinese%20Internet%20Watchdog%20Targets%2033%20Mobile%20Apps%20That%20Broke%20New%20Data%20Collection%20Rules …

Monitor your network activity and look for unexpected outbound connections, particularly from those accessible from the Internet. #Zerotrust would of course be ideal in this situation. #Log4j #cybersecurity #respectdatahttps://www.cpomagazine.com/cyber-security/what-does-log4j-mean-for-the-enterprise-strategies-to-protect-your-organization/?utm_campaign=coschedule&utm_source=twitter&utm_medium=cpomagazine&utm_content=What%20Does%20Log4j%20Mean%20for%20the%20Enterprise%3F%20Strategies%20To%20Protect%20Your%20Organization …

Iranian #ransomware gang N3tw0rm, linked to state-sponsored group Pay2Key, breached 4 Israeli companies and a nonprofit in a new wave of #cyberattacks. #cybersecurity #respectdatahttps://www.cpomagazine.com/cyber-security/suspected-iranian-ransomware-gang-n3tw0rm-starts-another-cyber-attack-wave-against-israel/?utm_campaign=coschedule&utm_source=twitter&utm_medium=cpomagazine&utm_content=Suspected%20Iranian%20Ransomware%20Gang%20N3tw0rm%20Starts%20Another%20Cyber%20Attack%20Wave%20Against%20Israel …

Before hiring can start, it's crucial to implement the proper tools and techniques that cultivate engagement. Engaged employees are highly motivated to stay because they believe in working towards a shared goal. #cybersecurity #respectdatahttps://www.cpomagazine.com/cyber-security/chicken-or-the-egg-setting-up-a-successful-soc-happens-before-hiring/?utm_campaign=coschedule&utm_source=twitter&utm_medium=cpomagazine&utm_content=Chicken%20or%20the%20Egg%3F%20Setting%20up%20a%20Successful%20SOC%20Happens%20Before%20Hiring …

PHMSA has tallied a 'probable fine' of $986,400 for multiple control room violations found during the 2020 inspections of Colonial Pipeline facilities in Georgia, New Jersey, North Carolina and Louisiana. #cybersecurity #respectdatahttps://www.cpomagazine.com/cyber-security/colonial-pipeline-may-face-1-million-penalty-for-operational-lapses-in-2021-ransomware-attack/?utm_campaign=coschedule&utm_source=twitter&utm_medium=cpomagazine&utm_content=Colonial%20Pipeline%20May%20Face%20%241%20Million%20Penalty%20for%20%E2%80%9COperational%E2%80%9D%20Lapses%20in%202021%20Ransomware%20Attack …

While the #ransomware attack on the fuel pipeline is likely not state-backed, the timing is particularly disruptive, coming just ahead of the usual summer season of peak demand. #cybersecurity #respectdatahttps://www.cpomagazine.com/cyber-security/colonial-fuel-pipeline-ransomware-attack-that-caused-gas-shortages-in-eastern-u-s-may-be-the-work-of-amateurs/?utm_campaign=coschedule&utm_source=twitter&utm_medium=cpomagazine&utm_content=Colonial%20Fuel%20Pipeline%20Ransomware%20Attack%20That%20Caused%20Gas%20Shortages%20in%20Eastern%20U.S.%20May%20Be%20the%20Work%20of%20Amateurs …

Recently discovered Wi-Fi #security vulnerabilities affect most wireless products. Every product contains at least one flaw, while others contain several. #respectdatahttps://www.cpomagazine.com/cyber-security/fragattacks-wi-fi-security-vulnerabilities-affect-most-devices-the-wireless-standard-and-security/?utm_campaign=coschedule&utm_source=twitter&utm_medium=cpomagazine&utm_content=FragAttacks%20Wi-Fi%20Security%20Vulnerabilities%20Affect%20Most%20Devices%2C%20the%20Wireless%20Standard%20and%20Security …

Though the focus of these bills has been on so-called gatekeepers, which has been defined previously as platforms with at least 45M active users per month, there are some terms that impact small businesses. #privacy #respectdatahttps://www.cpomagazine.com/data-protection/finalized-eu-digital-services-act-promises-transparency-in-recommender-algorithms-new-restrictions-on-targeted-advertising/?utm_campaign=coschedule&utm_source=twitter&utm_medium=cpomagazine&utm_content=Finalized%20EU%20Digital%20Services%20Act%20Promises%20Transparency%20in%20Recommender%20Algorithms%2C%20New%20Restrictions%20on%20Targeted%20Advertising …

Escalation of cyber-warfare could lead to attacks on OT, compromising #criticalinfrastructure and disrupting our way of life. Here's a three-part framework to ensure these assets remain safe and accessible at all times. #cybersecurity #respectdatahttps://www.cpomagazine.com/cyber-security/digital-defences-securing-ot-assets-and-protecting-critical-infrastructure/?utm_campaign=coschedule&utm_source=twitter&utm_medium=cpomagazine&utm_content=Digital%20Defences%3A%20Securing%20OT%20Assets%20and%20Protecting%20Critical%20Infrastructure …