Security News > 2023 > January > Serious Security: How to improve cryptography, resist supply chain attacks, and handle data breaches
So we though we'd take a quick look back at some of the major issues we covered over the last couple of weeks, and reiterate the serious security lessons we can learn from them.
If you are ever stuck with doing a data breach notification, don't try to rewrite history to your marketing advantage.
If you receive a data breach notification, and there are obvious things you can do that will improve both your theoretical security and your practical peace of mind, try to find the time to do them.
Cryptography is essential for national security and for and the functioning of the economy.
These crooks used DNS lookups with "Server names" that were actually exfiltrated data.
Apparently, the attackers in this case are now claiming that they stole personal data, including private keys, for "Research reasons" and say they've deleted the stolen data now.
News URL
Related news
- Google Adds New Pixel Security Features to Block 2G Exploits and Baseband Attacks (source)
- WordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS Attacks (source)
- Supply Chain Attacks Can Exploit Entry Points in Python, npm, and Open-Source Ecosystems (source)
- EDRSilencer red team tool used in attacks to bypass security (source)
- Despite massive security spending, 44% of CISOs fail to detect breaches (source)
- ISC2 Security Congress 2024: The Landscape of Nation-State Cyber Attacks (source)
- LottieFiles hit in npm supply chain attack targeting users' crypto (source)
- LottieFiles hacked in supply chain attack to steal users’ crypto (source)
- LottieFiles supply chain attack exposes users to malicious crypto wallet drainer (source)
- Stop LUCR-3 Attacks: Learn Key Identity Security Tactics in This Expert Webinar (source)