Breach

Over 80% of respondents surveyed by the Identity Defined Security Alliance said their company experienced an identity-related breach over the past year.

This week’s healthcare data breach roundup contains multiple vendor-related security incidents, including at least five more covered entities added to the Eye Care Leaders breach victim tally.

A new Emotet malware has led to a nine-fold increase in the use of Microsoft Excel macros compared with what security experts found in the fourth quarter of 2021.

The wealth management firm responded by closing the gap and securing its cloud in less than a week, according to a researcher with VPNOverview.

Cybersecurity practices at small and medium-sized businesses continued to be dismal, with only 38% of employees and managers noting more frequent password manager usage, while only 37% and 36% conducted more cybersecurity training sessions and executed new security policies, respectively, reports TechRadar.

Sixty-two percent of security leaders around the world surveyed by Radware reported having at least a third of APIs that are undocumented, even though 92% believed having sufficient API protection, indicating the prevalence of a false sense of security in APIs, according to VentureBeat.

BleepingComputer reports that forced updates have been implemented for WordPress sites leveraging the Ninja Forms plugin, which was discovered by Wordfence researchers to be impacted by a critical code injection flaw that could be exploited to facilitate site takeovers.