Breach

While it’s still early, some researchers view the reported hacking into Fujitsu’s ProjectWEB software-as-a-service (SaaS) platform as as a nation-state attack not unlike the one that targeted the SolarWinds supply chain.

Dr. Anthony Fauci kicks off the nation’s vaccination effort late last year. Today’s columnist, Kimberly Sutherland of LexisNexis Risk Solutions, points out that as more people get vaccinated, young adults and seniors are most susceptible to identity theft scams related to vaccines and public displays of vaccination cards.

The famous insider case where two General Electric employees were convicted and sent to prison for stealing trade secrets serves as a reminder of what can happen. Today’s columnist, David Balaban of Privacy-PC, offers insights on how to spot potential insider threats.

CheckPoint Research explained how the misuse of a real-time database, notification managers, and storage exposed the personal data of users, leaving corporate resources vulnerable to bad threat actors.

CEO Sudhakar Ramakrishna said comments from company executives in a congressional hearing pointing the finger at an intern for a password leak were "not appropriate."

Today’s columnist, Ciaran Martin of Oxford University, says the Colonial Pipeline attack showed the vulnerability of critical infrastructure. Martin argues that security people know we have to fix a broken system struggling with expansive vendor promises and corporate managers who can’t talk to tech people. Start by asking the right questions.

Informal chats via text or business communications platforms could be used against an individual or the company to prove mishandling of a security incident, even if the organization may have acted responsibly.