Risk Assessments/Management

Okta has disclosed that only two active customer tenants were compromised by the Lapsus$ hacking group during a January attack against a third-party vendor, contrary to the initial estimate of up to 366 customers that could have been impacted by the breach, VentureBeat reports.

For the last year, several clients of tech vendor ECL have faced a host of patient safety, service issues, outages, and compliance concerns over what they allege were ‘concealed ransomware’ incidents.

Security experts say automation is the only way companies can manage the increased complexity of multi-cloud environments, particularly as both risk and requirements for privileged access increase.

At CyberMed, CISA and the Office of the National Cyber Director leaders reflected on the recent healthcare cybersecurity legislation and patient safety concerns revealed during the COVID-19 pandemic.

More than 68% of government organizations around the world have reported experiencing at least one cyberattack during the past year and 54% are expecting attacks to occur within the next 12 months, reports Government Technology.

Researchers from Palo Alto Networks' Unit 42 threat intelligence unit have discovered that the SolarMarker malware, also known as Jupyter, has been updated yet again to include improved capabilities to evade detection, The Hacker News reports.

Google has recently launched Automatic Data Loss Prevention, a new tool for its BigQuery data warehouse that allows users to find and set access policies for sensitive data.

VMware announced that it has launched a patch to fix the critical security flaw in Cloud Director that could potentially enable threat actors to conduct remote code execution attacks.