Security News > 2023 > January > Serious Security: How to improve cryptography, resist supply chain attacks, and handle data breaches
So we though we'd take a quick look back at some of the major issues we covered over the last couple of weeks, and reiterate the serious security lessons we can learn from them.
If you are ever stuck with doing a data breach notification, don't try to rewrite history to your marketing advantage.
If you receive a data breach notification, and there are obvious things you can do that will improve both your theoretical security and your practical peace of mind, try to find the time to do them.
Cryptography is essential for national security and for and the functioning of the economy.
These crooks used DNS lookups with "Server names" that were actually exfiltrated data.
Apparently, the attackers in this case are now claiming that they stole personal data, including private keys, for "Research reasons" and say they've deleted the stolen data now.
News URL
Related news
- Bybit Hack Traced to Safe{Wallet} Supply Chain Attack Exploited by North Korean Hackers (source)
- CrowdStrike Security Report: Generative AI Powers Social Engineering Attacks (source)
- China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial Access (source)
- GitHub supply chain attack spills secrets from 23,000 projects (source)
- Supply chain attack on popular GitHub Action exposes CI/CD secrets (source)
- Google acquisition target Wiz links fresh supply chain attack to 23K pwned GitHub repos (source)
- GitHub Action hack likely led to another in cascading supply chain attack (source)
- GitHub Action supply chain attack exposed secrets in 218 repos (source)
- Coinbase Initially Targeted in GitHub Actions Supply Chain Attack; 218 Repositories' CI/CD Secrets Exposed (source)
- ⚡ THN Weekly Recap: GitHub Supply Chain Attack, AI Malware, BYOVD Tactics, and More (source)