Data Security

Nearly 500,000 people had their personal data compromised as a result of a data breach at Illinois-based medical practice Christie Business Holdings Company, or Christie Clinic, last year.

Account takeover increased by 90% to an estimated $11.4 billion in 2021 when compared with 2020 — representing roughly one-quarter of all identity fraud losses last year, according to Javelin Research.

More than 90% of organizations reported challenges in implementing security policies for sensitive data.

SuperCare Health, a respiratory care provider in California, has noted that 318,379 patients had their data compromised by a data breach last year.

A marked uptick in activity for Indonesian phishing-as-a-service group SPM55 has researchers at threat intelligence firm DomainTools sounding the alarms. 

BleepingComputer reports that some Palo Alto Networks firewall, XDR, and VPN offerings have been impacted by a high-severity OpenSSL vulnerability, tracked as CVE-2022-0778, which could be exploited to prompt a denial of service condition.

Threat actors have been leveraging the novel FFDroider information stealer to exfiltrate browser-stored credentials and cookies and proceed in compromising targets' social media accounts, according to BleepingComputer.