Total Cloud Security Blog

Here are the top security stories from recent weeks: 

• Kaseya Patches Zero-Day Vulnerabilities Used in Supply Chain Ransomware Attack
• Attackers Use Kaseya Ransomware Attack to Spread Cobalt Strike Backdoor in Fake Security Updates
• Morgan Stanley Reports Data Breach After Vendor Affected by Accellion Hack
• U.S. Insurance Company CNA Notifies Customers of Data Breach After Ransomware Attack
• U.S. Fashion Retailer Guess Notifies Customers of Data Breach After Ransomware Attack

Here are the top security stories from recent weeks: 

• Mercedes-Benz Discloses Breach Exposing Customer Information
• Supermarket Chain Wegmans Exposes Customer Data Due to Misconfigured Cloud Databases
• City of Tulsa Suffers Ransomware Attack, Warns Residents of Personal Data Exposure
• Software Tool Vendor Atlassian Patches One-Click Account Takeover Vulnerabilities
• Nobelium Threat Actors Accessed Microsoft Customer Support Computers

As more companies embrace the Bring Your Own Device (BYOD) movement to accommodate a rapidly evolving workforce, one question comes to mind: How are IT and security leaders handling this sudden wave of unmanaged devices that are now under their watch?

To find the answer and to get an accurate state of today’s BYOD security efforts within enterprises, Bitglass teamed up with leading industry research firm, Cybersecurity Insiders. We polled hundreds of cybersecurity professionals across industries to better understand how COVID-19’s resulting surge of remote work has affected security and privacy risks introduced by personal mobile devices being connected to corporate networks and resources.

The results were both surprising and enlightening. 

Imagine standing in front of the CEO and company board of directors, asking them for a check for an obscene amount of money to pay off hackers that are holding critical data hostage and disrupting the company business. 

I am sure many of you are cringing at the very thought of this and have blocked this uncomfortable scenario from your mind; instead hoping that your company’s current security strategy is enough to prevent becoming the next victim of a high-profile data breach or ransomware attack..