What is Privileged Access Management (PAM)?

Privileged Access Management (PAM) is a crucial security practice that allows organizations to manage and protect access to critical systems, applications, and data. It reduces the risk of unauthorized access, helps with compliance, and enhances visibility. There can be challenges such as complexity or resistance from users, but using safeguards such as a principle of […]

What is Privileged Access Management (PAM)?

Privileged Access Management (PAM) is a critical part of cybersecurity as it helps organizations manage and secure access to their most important systems and data. PAM provides improved visibility, increased productivity, better compliance, reduced malware spread and accountability by controlling and monitoring who can access privileged accounts. It is essential for implementing zero trust security […]

Suspected Blackmailer of Psychotherapy Patients to Stand Trial

Well, well, well, what an interesting turn of events we have here! Picture this: a notorious hacker who’s no stranger to the spotlight, a beleaguered online psychotherapy practice, and hordes of unsuspecting patients suddenly thrust into an extortion spree. Sound like something out of a cybercrime thriller? Well, you’d be right, but this is no […]

Compliance with Data Protection in the Face of Ransomware

Hey there, Bay Area folks! Let’s talk cybersecurity, shall we? Has anyone felt the ground tremble under the weight of recent cyber threats? You might have noticed frequent mention of the bogeyman of the cybersecurity world: ransomware. In the past year, we’ve seen an unsettling rise in the frequency and severity of ransomware attacks. If […]

Dechert Cyber Bits – Issue 45 | Dechert LLP

President Biden has signed an executive order to establish AI safety, privacy, and security standards, while the FTC has approved a requirement for non-banking financial institutions to report data breaches. The SEC filed a complaint against Solar Winds and its CISO for alleged fraud relating to cybersecurity risks. Counter Ransomware Initiative members have agreed that […]

How cybercriminals are using bogus login pages to steal your banking information

Russian cyber criminals have attacked major Australian banks with a new malware program, named Octo, obtained privately from the dark web. Octo overlays fake login pages on legitimate banking apps; any login data input into these false pages can be sent directly to cyber criminals. The malware can also record calls, bypass multi-factor authentication, send […]

Ransomware Group Reports Victim It Breached To SEC Regulators

The active ransomware group, AlphV, has reported one of its victims, the digital lending firm MeridianLink, to the US Securities and Exchange Commission. The group claimed MeridianLink failed to disclose a significant breach they were responsible for, in violation of new regulations requiring such incidents be reported within four days. This is a new approach […]

October 2023 data breach roundup

Serious data breaches occurred at Southend-on-Sea City Council, University Hospitals Dorset NHS Foundation Trust, and Cumbria Police in October. Personal information of council staff, an abuse victim’s address, and police personnel details were exposed due to human error with online spreadsheets and mailing systems. There were no financial losses reported from the incidents, which have […]