The Week in Breach News: 02/28/24 – 03/05/24

This week: China may be behind a data breach at Taiwan’s biggest telecom, American Express suffers a data breach through its supply chain, eight new cybersecurity awareness training courses in BullPhish ID, and the unbeatable benefits that come from the synergy of AV, EDR and Managed SOC.

---

---

---

Golden Corral

https://www.bleepingcomputer.com/news/security/golden-corral-restaurant-chain-data-breach-impacts-183-000-people/

Exploit: Hacking

Golden Corral: Restaurant Chain

How It Could Affect Your Customers’ Business: Businesses like restaurants are at just as much risk for cybersecurity trouble as businesses in other service industries.

Kaseya to the Rescue: Learn about the growing list of cybersecurity challenges that organizations face in the Kaseya Security Survey Report 2023. DOWNLOAD IT>>

---

U-Haul

https://www.iotworldtoday.com/security/u-haul-data-breach-affects-67-000-across-us-canada#close-modal

Exploit: Hacking

U-Haul: Truck Rental Company

How It Could Affect Your Customers’ Business: Companies like U-Haul serve both consumers and businesses, making them likely to hold a wide variety of data.

Kaseya to the Rescue:  Ransomware is often an email-based cyberattack. Our 5-Minute Guide to Phishing Attacks and Prevention offers a quick guide to stopping phishing. DOWNLOAD IT>>

---

American Express

https://www.bleepingcomputer.com/news/security/american-express-credit-cards-exposed-in-third-party-data-breach/

Exploit: Supply Chain Data Breach

American Express: Credit Card Company

How It Could Affect Your Customers’ Business: Even big companies can experience a data breach because of a cybersecurity problem at one of their service providers.

Kaseya to the Rescue: There are a bewildering array of acronyms used for cybersecurity technologies. This infographic breaks down six of them. DOWNLOAD IT>>

---

---

---

Scotland – Scottish Ambulance Service (SAS)

https://sg.news.yahoo.com/scottish-ambulance-apologise-staff-data-093340514.html

Exploit: Human Error

Scottish Ambulance Service (SAS): Ambulance Service

How It Could Affect Your Customers’ Business: The most likely vector for a data breach is always going to be people, but security awareness training helps eliminate careless mistakes.

Kaseya to the Rescue:  Our infographic walks you through exactly how security awareness training prevents the biggest cyber threats that businesses face today. DOWNLOAD IT>>

---

---

---

Malawi – Malawi Department of Immigration

https://www.darkreading.com/cyberattacks-data-breaches/malawi-immigration-department-halts-services-amid-cyberattack

Exploit: Ransomware

Malawi Department of Immigration: Government Agency

How it Could Affect Your Customers’ Business: It’s never a wise move for anyone to pay extortionists who will almost certainly come back for more.

Kaseya to the Rescue:  An endpoint detection and response solution can help businesses stop the spread of a cyberattack fast. This checklist helps you find the right one. DOWNLOAD IT>> 

---

---

---

Taiwan – Chunghwa Telecom

https://www.darkreading.com/cyberattacks-data-breaches/taiwan-telco-breached-data-sold-on-dark-web

Exploit: Ransomware

Chunghwa Telecom: Telecommunications Company

How it Could Affect Your Customers’ Business: Nation-state hacking is frequently the cause of cyber attacks on infrastructure targets like telecommunications companies.

Kaseya to the Rescue: See exactly how a hacker would penetrate your network quickly and affordably with network penetration testing. This guide helps you choose the right solution. GET GUIDE>>

---

Hong Kong – Cutout.Pro

https://www.bleepingcomputer.com/news/security/20-million-cutoutpro-user-records-leaked-on-data-breach-forum/

Exploit: Hacking

Cutout.Pro: AI Photo Editing Tool

How it Could Affect Your Customers’ Business: Data is still a valuable and profitable commodity on the dark web, and cybercriminals are always hunting for fresh sources.

Kaseya to the Rescue: Every organization needs to be ready for trouble with an incident response plan in place. This checklist can help. DOWNLOAD CHECKLIST>> 

---

China – YX International

https://techcrunch.com/2024/02/29/leaky-database-two-factor-codes/

Exploit: Misconfiguration

YX International: Technology Company

How it Could Affect Your Customers’ Business: Employee errors like failing to secure a database can turn into expensive nightmares for businesses fast.

Kaseya to the Rescue: This infographic includes 10 handy tips to help you get the most out of your security awareness training solution and run an effective program. GET INFOGRAPHIC>>

---

---

---

---

---

---

Ensuring every employee is following smart security practices is critical for keeping companies out of cybersecurity trouble. To aid in that effort, eight new training courses are now available in the BullPhish ID Training portal. In these courses, users can learn all about:

• Business Email Compromise: Explore the tactics used in business email compromise attacks.
• Choosing Strong MFA Second Factors: Learn how to choose the right second factor for MFA
• Common Attack Methods: Learn about pretexting, malicious links and malicious attachments.
• Creating Strong Passwords: Examine techniques for creating and managing strong passwords.
• Dangers of Password Reuse: Explore the dangers of password reuse
• Intro to Social Engineering: Learn how social engineering attacks work
• Pretexting: Learn about a specific type of social engineering attack known as a pretexting attack.
• Spotting and Reporting Phishing: Learn how to spot  and report phishing emails

Check them out in the BullPhish ID Release Notes. LEARN MORE>>

---

---

---

Download “The Network Penetration Testing Buyer’s Guide”

---

Network penetration testing is the best way to evaluate security risks and close security gaps before the bad guys exploit them. It used to be an expensive and slow process, but not anymore! Learn how advances in automation technology have revolutionized pen testing, making it affordable and accessible for MSPs and organizations. This guide helps you become an informed buyer. 

Download The Network Penetration Testing Buyer’s Guide.  GET THE GUIDE>>

Did you miss…The 5-Minute Guide to Phishing Attacks and Prevention Infographic? DOWNLOAD IT>> 

---

---

---

---

The cybersecurity world moves fast, with both attackers and defenders constantly looking for ways to up their game. That’s a big reason why today’s sophisticated cyber threats require a higher level of security expertise and faster incident response than ever before. Fortunately, there’s good news for defenders: the combination of an endpoint detection and response (EDR) solution, next-generation antivirus (AV) technology and a managed security operations center (SOC) produces an amazing synergy that arms IT professionals with the tools, expertise and intelligence they need to keep businesses out of cyber trouble. 

---

---

What are AV, EDR and MDR? 

---

EDR, AV and a managed SOC are a powerful trio. These solutions bolster cyber resilience by helping companies detect and handle cyberthreats while providing 360-degree visibility into an organization’s threat picture. The super trio also provides critical tools to speed up incident response. 

EDR focuses on detecting and responding to threats at the endpoint level, such as laptops, servers and other computing devices. It employs advanced techniques, like behavioral analysis, machine learning and deep threat intelligence, to catch sophisticated threats that antivirus solutions may miss. 

Managed SOC or Managed Detection and Response (MDR) is a security solution that encompasses people, processes and technology to detect, investigate and respond to security incidents across the entire organization. It’s like having a dedicated security team monitoring the network and endpoints for any signs of malicious activity. A smart SOC is especially beneficial for overcoming the cybersecurity talent shortage.

AV is designed to detect, prevent and remove malicious software, including viruses, worms, Trojans and other types of malware. It comes in two basic styles: traditional and next-generation. Traditional AV works by scanning files and programs for patterns characteristic of known malware and employing various methods to neutralize threats. Next-generation AV leverages advanced techniques like machine learning and behavioral analysis to detect and thwart previously unknown threats based on their behavior rather than static signatures.

---

---

AV, EDR and managed SOC: A terrific trio 

---

While AV, EDR and Managed SOC are valuable cybersecurity solutions that stand on their own, the combination of all three together is magic.

Comprehensive threat detection: AV provides the first level of protection, EDR detects threats at the endpoint and a managed SOC covers the entire IT infrastructure, such as cloud, networks and various endpoints, ensuring a comprehensive defense against cyber threats. 

Faster incident response: AV conducts automatic quarantine and remediation for threats, while EDR can quickly detect and respond to sophisticated threats with its deep behavioral analysis. Adding managed SOC to the mix provides even faster incident response by correlating threat data from multiple sources and operating 24/7/365. 

---

---

Improved threat intelligence: EDR and AV can provide valuable threat intelligence to managed SOC services, which can help them improve their detection capabilities. For example, if EDR or AV detects a new type of malware, it can immediately send that information to managed SOC analysts, allowing them to update their detection capabilities. 

Reduced false positives: EDR can help reduce the number of false positives that an IT team has to sift through by providing providing more context around alerts. For example, if EDR detects a suspicious file on an endpoint, it can provide additional information about that file to analysts, allowing them to better determine whether it is a true threat or a false positive. 

Reduced tool and vendor fatigue: By leveraging a joint AV, EDR and managed SOC solution, IT professionals simplify their cybersecurity tool stack and reduce the number of disparate security vendors that they must use to stay secure. Not only does this save time and money but also makes the day-to-day workload more efficient for the IT professional. 

---

---

Put this powerhouse trio to work for you

---

EDR, AV and managed SOC are powerhouse technologies that complement each other perfectly and integrate seamlessly together. This winning combination can affordably provide organizations with a better defense-in-depth posture. MSPs can achieve faster incident response, improve threat intelligence and reduce false positives while minimizing tool and vendor fatigue, giving them and their clients the security edge needed in today’s dangerous world. 

Datto AV: Next-generation antivirus  

Datto AV is your first line of protection by catching both known and unknown threats. Through its cloud-based threat intelligence, it consistently updates threat signatures to protect against adversaries. Its next-generation AV engine incorporates advanced techniques, like machine learning, heuristic analysis and built-in AI, to protect against threats.  

• Automatic quarantine and remediation – Automatically stops and removes threats from your endpoints without user intervention.  
• Efficacy meets performance – Top-notch antivirus security without compromising your system’s performance.  
• Strong self-defense – Anti-tamper technology stops unauthorized modifications to its processes, registry keys and files. 
• Schedule a demo now! SCHEDULE IT>>

Datto EDR – Endpoint detection made easy 

Datto EDR empowers IT teams to detect and respond to advanced threats quickly and efficiently. An easy-to-use cloud-based EDR solution that’s purpose-built for managed service providers (MSPs), Datto EDR defends all endpoints — desktops, notebooks and servers — across Windows, macOS and Linux operating systems. 

• Patented deep memory analysis ensures that you’re informed of even the most elusive threat actors.   
• Take action against advanced threats right from your alert dashboard to isolate hosts, terminate processes, delete files and more without wasting precious seconds.   
• Alerts are mapped to the MITRE ATT&CK framework to provide context and helpful clarity to your team. 
• Includes Ransomware Rollback, which instantly reverts encrypted files to their original state after a ransomware attack, ensuring normal business operations are up and running without loss of time, money or data. 
• Schedule a demo now! SCHEDULE IT>>

RocketCyber Managed SOC 

RocketCyber is a white-labeled managed service that leverages our threat monitoring platform to detect malicious and suspicious activity across three critical attack vectors: endpoint, network and cloud. Our elite team of security veterans hunt, triage and work with your team when actionable threats are discovered, including:  

• Continuous monitoring — Round-the-clock protection with real-time threat detection.  
• World-class security stack — 100% purpose-built platform backed by over 50 years of security experience.  
• Breach detection — The most advanced detection to catch attacks that evade traditional defenses.  
• Threat hunting — An elite security team proactively hunts for malicious activity.  
• No hardware required — Patent pending cloud-based technology eliminates the need for on-prem hardware. 
• Schedule a demo now! SCHEDULE IT>>

---

---

---

Practical Tips for Raising Cyber Resilience With Phishing Simulations 

Wednesday, March 6 |1 PM EST / 10 AM PST

You won’t want to miss getting actionable advice on running an effective and easy-to-manage phishing simulation and security awareness training program from an expert! Phishing defense advisor Brian Doty will share his expertise including: 

• Tips for setting up and running your phishing simulations for maximum effectiveness.
• How to use campaign reports to track progress and identify vulnerable users.
• Ways to reduce cyber risk with follow-up training for high-risk users and new hire training.

REGISTER NOW>>

March 7: Kaseya + Datto Connect Local Symposium NJ REGISTER NOW>>

March 7: Kaseya + Datto Connect Local Auckland REGISTER NOW>>

March 12: Kaseya+Datto Connect Local Security & Compliance Series Toronto REGISTER NOW>>

March 14: Kaseya+Datto Connect Local Security & Compliance Series Lansing REGISTER NOW>>

April 29 – May 2: Kaseya Connect Global (Las Vegas) REGISTER NOW>>

June 11 -13: Kaseya DattoCon Europe (Dublin) REGISTER NOW>>

October 28 – 30: Kaseya DattoCon (Miami) REGISTER NOW>>

November 12 – 14: Kaseya DattoCon APAC (Sydney) REGISTER NOW>>

---

---

---

---

---