Ransomware Is On The Rise Again: Defense Against New Players

Join us on August 16th at 2:00 PM EDT

In case you missed the webinar, click the link below and fill out the form to watch the webinar today!

CYBER TIP OF THE MONTH

Avoid Confidential Information in APIs

We talked in our most recent webinar about how critical info that may be exposed in unchecked APIs makes you very vulnerable to attacks.

Eliminating storing sensitive information in APIs all together is one of the best ways to protect from API based attacks. Consider token-based authentications and best practices like multi-factor authentications to grant access to APIs. 

For more info and help with best cyber hygiene practices and how to best protect critical information, sign up for a cyber hygeiene training for you and your staff today. 

Computer Attack on Discovery Bay Water

Treatment Facility an Insider Attack

A federal grand jury in California is charging a former technician from a contracted company to operate the Discovery Bay Water Treatment Facility for intentionally causing damage to a protected computer for the facility. 

• The filing says that the main operation and monitoring systems were intentionally uninstalled and then turned off
• Software was installed on his own personal computer and the contracted company's private network to give the alleged ex-employee remote access to the network.
• Insider threats are hard to combat and protect again, but showcases how important zero trust architecture can be, limiting access to only those who need it, and changing passwords or access for ex-employees

Confidential Documents Leaked from

Minnesota Public School Attack

A Minnesota public school suffered a cyber attack, confirmed back in March. The confidential documents stolen in the attack are now being dumped online

• Info being leaked includes sensitive medical info
• The school followed recommended practice and refused to pay a $1 million ransom
• Families are concerned about being notified about data being leaked
• Public schools are unfortunately very data rich and underfunded for cybersecurity

New Ransomware Trend: Encryptionless Extortion

New trend in ransomware attacks prioritizes data exfiltration over encrypting data.

• Ransomware attacks had been escalating to double and triple-extortion tactics
• This attack can allow ransomware groups to stay under the data and extract large volumes of data
• Encryptionless extortion may result in faster profits for ransomware groups by eliminating software development and decryption support
• This type of trend makes a strong argument for zero trust architecture to minimize the attack surface 

Pine County, MN: 7/5/2023
Phishing, DoS

A malicious virus downloaded through a phishing scheme recently took down the phone systems and Ring Central in Pine City Hall in Pine County Minnesota.

The email claimed the city's website was unsecured to their cloud for website payments. The virus pointed towards more spoofed sites to download more malware.

it's important to always report any suspicious or phishing emails. Mistakes happen but reporting helps to limit the spread and raises awareness.

If you wish to learn more or have concerns about your network please contact us

410-305-0234

info@SecuLore.com

www.SecuLore.com/contact

Do you know someone who would like to receive our emails?
Send them the link below to sign up.
https://www.seculore.com/media/newsletters-cyberalerts