Cyber security update, October

SoftwareOne believes there is a need for additional information when it comes to cyber security, as organisations have made it clear that investment in a proper security strategy is paramount. SoftwareOne’s monthly “Cyber Security Update” provides information on the most recent threats, the latest breaches and how to react to them in order to stay on top of malware and ransomware threats.

Latest security breaches

Japanese tech giant, Nidec Corporation suffered a ransomware attack, leading to data theft and leakage on the dark web, potentially exposing its employees and partners to targeted phishing attacks.The cyberattack targeted Nidec's Precision division in Vietnam, resulting in the theft of over 50,000 files, including internal documents, business partner letters, and procurement-related documents.

Casio confirms a ransomware attack resulted in the theft of personal and confidential data of employees, job candidates, and some customers. The stolen data includes personal information, financial data, and sensitive documents related to employees, business partners, and customers.

Fidelity Investments, a global financial services company experienced a significant data breach, exposing the personal information of over 77,000 customers, but there is no evidence that the stolen data has been misused. The breach occurred when an unknown attacker accessed data using two recently established customer accounts, prompting Fidelity to provide two years of free credit monitoring and identity restoration services to affected customers.

In another data breach, Security company ADT credentials have been stolen from a third-party business partner, leading to the exfiltration of encrypted employee account data. The company responded by terminating unauthorised access, initiating an investigation with cybersecurity experts, and experiencing disruption to its information systems.

Landmark Admin, an insurance administrative services company, experienced a data breach affecting over 800,000 individuals as a result of a cyberattack. The breach involved unauthorised access to personal information such as names, addresses, social security numbers, financial account numbers, and medical information. The company shut down its IT systems and engaged a cybersecurity firm for remediation and investigation.

In another significant data breach, approximately 470,000 individuals records were affected at California health centre Omni Family Health, exposing sensitive personal and medical information. The stolen information includes names, addresses, dates of birth, Social Security numbers, health insurance and medical details for patients, as well as financial account information for employees.

Varsity Brands, a major apparel company, suffered a data breach affecting over 65,000 individuals, prompting the offer of free credit monitoring and identity theft protection services. The breach, potentially involving ransomware, led to the unauthorised access of a small subset of personal files, prompting the company to enlist external cybersecurity experts and notify law enforcement.

In another massive data breach, Gryphon Healthcare and Tri-City Medical Centre experienced data breaches, compromising the personal information of over 500,000 individuals. Gryphon is offering free identity theft protection services to the 393,358 affected individuals, while Tri-City is providing similar services to 108,149 impacted people.

Cyber security awareness

CISA has collaborated with the National Cybersecurity Alliance (NCA) to create resources and messaging for organisations to use to build their own Cybersecurity Awareness Month campaigns. In the event, various topics will be explored including how cybersecurity professionals and the public sector can work together to address emerging technologies and implement Secure by Design best practices.

Kerberoasting is a significant threat to Active Directory environments, exploiting weak passwords to gain unauthorised access to service accounts and potentially enabling lateral movement. Using Group Managed Service Accounts (gMSA) or Delegated Managed Service Accounts (dMSA) can enhance security by providing centralised credential management and resisting brute-force attacks.

Cyber security intelligence

The FBI and CISA have released a public service announcement warning about foreign threat actors spreading disinformation during the 2024 U.S. general election. The announcement highlights tactics used by foreign adversaries, such as creating fake news sites and using AI-generated content. They urge the public to verify information from trusted sources and remain vigilant.

The World Economic Forum's latest report emphasises the need for a fundamental shift in how emerging technologies are developed and deployed to address cybersecurity challenges.

Read the full report here.