The Week in Breach News: 08/21/24 – 08/27/24

This week: Human error leads to two big data breaches; hackers hit an influential newspaper as U.S. election season moves into high gear; exploring industry-specific case studies and why half of employees fear reporting a cybersecurity blunder.

---

---

---

Seattle-Tacoma International Airport

https://www.seattletimes.com/seattle-news/what-we-know-about-the-possible-cyberattack-that-hit-sea-tac-airport/

Exploit: Hacking

Seattle-Tacoma International Airport: Airport

How It Could Affect Your Customers’ Business: This attack had the potential to cause much more chaos, highlighting the importance of infrastructure security.

Kaseya to the Rescue: Learn to mitigate a company’s risk of damage from often email-based cyberattacks like ransomware in A Comprehensive Guide to Email-based Cyberattacks. GET THE GUIDE>>

---

Halliburton

https://therecord.media/halliburton-systems-offline-cyberattack-sec

Exploit: Hacking

Halliburton: Oil Company

How It Could Affect Your Customers’ Business: Attacks that can disrupt the energy sector are especially dangerous for businesses and the public.

Kaseya to the Rescue:  Learn about the factors that have shaped cybersecurity in 2024 and be ready for what’s next with the knowledge you’ll gain from our Midyear Cyber-risk Report 2024. GET REPORT>>

---

VeriSource Services (VSI) 

https://www.jdsupra.com/legalnews/verisource-services-announces-data-3309278

Exploit: Hacking

VeriSource Services (VSI): Business Services

How It Could Affect Your Customers’ Business: Cybercriminals are always hungry for personal data that can be turned for a quick profit.

Kaseya to the Rescue: Learn more about the types of data that bad actors sell on the dark web and how they profit from it in The IT Professional’s Guide to Dark Web Defense. DOWNLOAD IT>>

---

CannonDesign

https://www.scmagazine.com/brief/avoslocker-ransomware-attack-against-cannondesign-confirmed

Exploit: Ransomware

CannonDesign: Architecture and Engineering Firm

How It Could Affect Your Customers’ Business: No business is safe from cybercrime, no matter what the sector or size.

Kaseya to the Rescue:  Are you taking advantage of the amazing benefits you get when you combine RocketCyber Managed SOC and Datto EDR? This product brief outlines them all! DOWNLOAD IT>>

---

Oregon Zoo 

https://kcby.com/news/local/oregon-zoo-warns-online-ticket-purchasers-after-data-breach

Exploit: Hacking

Oregon Zoo: Zoological Park

How it Could Affect Your Customers’ Business: Payment card security needs to be as much of a priority for businesses as other cybersecurity concerns.

Kaseya to the Rescue: Our infographic walks you through exactly how security awareness training prevents phishing from hooking unsuspecting employees. DOWNLOAD IT>> 

---

Microchip Technology

https://www.tomshardware.com/tech-industry/cyber-security/microchip-technology-suffers-cyberattack-operations-impacted-while-extent-of-attack-is-investigated

Exploit: Hacking

Microchip Technology: Manufacturer

How it Could Affect Your Customers’ Business: With a tight world microchip market, any slowdowns in production could have a ripple effect that impacts many other businesses

Kaseya to the Rescue:  Learn about five ways that businesses may be in danger of trouble from the dark web in an infographic that’s also perfect for sharing on social media! DOWNLOAD IT>>

---

---

---

Australia – Meli

https://www.cyberdaily.au/security/11005-exclusive-aussie-not-for-profit-community-support-service-meli-confirms-cyber-attack

Exploit: Ransomware

Meli: Non-Profit

How it Could Affect Your Customers’ Business: Unfortunately, bad actors are happy to attack non-profits too, creating the need for robust security.

Kaseya to the Rescue: Run more effective security awareness and phishing resistance campaigns with this infographic featuring 10 expert tips to maximize your training programs. DOWNLOAD IT>>

---

---

---

Japan – Toyota

https://www.darkreading.com/cloud-security/toyota-discloses-decade-long-data-leak-exposing-2-15m-customers-data

Exploit: Third Party (Misconfiguration)

Toyota: Carmaker

How it Could Affect Your Customers’ Business: A cybersecurity incident at a subsidiary or partner can lead to a huge mess for a company to clean up.

Kaseya to the Rescue: There are a bewildering array of acronyms used for cybersecurity technologies. This infographic breaks down six of them. DOWNLOAD IT>> 

---

---

---

---

---

---

---

Business email compromise (BEC) can expose sensitive information, execute fraudulent transactions, and cause substantial financial and reputational damage. However, there are steps a company can take to mitigate a company’s risk of falling victim to BEC. In this product brief, you’ll learn about RocketCyber’s Microsoft 365 Remediation feature and how it can help IT professionals tackle these challenges head-on. DOWNLOAD IT>> 

---

---

---

Explore the top 10 critical pentest findings of 2024

---

After completing over 10,000 automated network penetration tests, Vonahi has learned a thing or two about how hackers might get into a company’s network. Dive into the results of their research and learn more about staying one step ahead of the bad guys in the Top 10 Critical Pentest Findings Report 2024! DOWNLOAD IT>>

Did you miss… the 10 Tips for Successful Employee Security Awareness Training checklist? DOWNLOAD IT>>

---

---

---

---

The software supply chain has increasingly become a target for cybercriminals, posing severe risks to businesses and organizations worldwide. A recent study by BlackBerry revealed that more than 75% of software supply chains have experienced cyberattacks in the last 12 months. As software development becomes more complex and interconnected, the supply chain becomes more vulnerable to attacks, especially those exploiting zero-day vulnerabilities. A deep exploration of the growing trouble in the software supply chain and how zero-day exploits exacerbate these risks can give IT professionals a clearer picture of this problem and how to mitigate it. 

---

---

The growing risk in software supply chains 

---

The software supply chain encompasses the entire ecosystem of third-party software, libraries and tools that developers use to create applications. This includes everything from open-source components to proprietary software provided by vendors. As companies integrate more third-party code, the attack surface expands, giving cybercriminals more vulnerable entry points into your system. The impact of a software supply chain attack can be devastating, with a cascade of damage that hits many organizations. In such cases, attackers compromised trusted software providers, inserting malicious code that was then distributed to thousands of customers. The consequences of supply chain attacks can affect businesses in multiple ways. In BlackBerry’s survey, these were the most prominent negative outcomes: 

Top consequences of a software supply chain cyberattack 

1. Financial loss (64%) 
2. Data loss (59 %) 
3. Reputational damage (58 %) 
4. Operational impact (55 %) 

Source: BlackBerry

---

---

The role of zero days in software supply chain attacks 

---

Zero-day vulnerabilities are previously unknown security flaws that attackers exploit before developers have a chance to patch them. These vulnerabilities are particularly dangerous because they can be weaponized in supply chain attacks to insert malicious code or gain unauthorized access to systems. In the context of the software supply chain, zero-day exploits can be used to compromise a vendor’s software, which is then distributed to end-users without anyone realizing the software is compromised. This creates a cascading effect, where one compromised component can potentially infect an entire ecosystem of applications and services. 

A recent example of a zero-day software supply chain exploit is the 3CX supply chain attack, which was discovered in March 2023.

• Exploit: The attackers managed to compromise the company’s software build infrastructure, embedding malicious code in the 3CXDesktopApp, a widely-used softphone application.
• Impact: The compromised application was then distributed to 3CX’s customers through regular update channels. When users installed or updated the 3CXDesktopApp, the malicious code allowed attackers to execute remote code on infected systems, potentially leading to data theft, lateral movement within networks, and further exploitation.
• Outcomes: Thousands of organizations using the 3CXDesktopApp were potentially compromised, with attackers able to execute commands on affected systems, leading to data theft and further intrusions. 3CX quickly acknowledged the breach, released a clean version of the app, and advised customers to update their software and check for indicators of compromise.

---

---

Tips for securing your software supply chain 

---

Securing the software supply chain is a multifaceted challenge, but there are several strategies that organizations can implement to mitigate risks: 

• Implement a Zero Trust architecture: Zero Trust principles are essential in securing the software supply chain. By assuming that every component, even internal ones, could be compromised, organizations can enforce strict access controls, continuous monitoring and verification processes. This reduces the likelihood of unauthorized access and lateral movement within your systems. 
• Continuous monitoring and threat intelligence: Implement real-time monitoring of your software supply chain to detect suspicious activities and anomalies. Incorporating threat intelligence feeds can help you stay informed about emerging zero-day threats and vulnerabilities in the software you depend on. 
• Don’t neglect security audits: Regularly audit your software supply chain to identify and patch vulnerabilities. This doesn’t need to be a tedious manual process. Choose an automated tool to ensure that audits are done on time without adding to your IT team’s burdens. 
• Frequent penetration testing: Penetration testing can help you understand how an attacker might exploit a zero-day vulnerability in your environment and provide insights into improving your defenses. 
• Use Software Bill of Materials (SBOMs): An SBOM is a detailed inventory of all components in a piece of software, including third-party and open-source libraries. Having an SBOM allows organizations to quickly identify and remediate vulnerabilities in specific components if a zero-day exploit is discovered. 
• Secure your development environment: Ensure that your development environment is secure, as attackers often target the build process to inject malicious code. Use code-signing certificates, enforce strict access controls, and monitor for unauthorized changes to source code. 
• Vendor risk management: Establish strong vendor risk management practices by thoroughly vetting your software suppliers. Require them to adhere to stringent security standards and provide transparency about their security practices. Regularly review and update these practices as the threat landscape evolves. 
• Patch management: Develop a robust patch management strategy that prioritizes critical updates and security patches. Automate the deployment of patches wherever possible to minimize the window of exposure to zero-day vulnerabilities. 

The software supply chain is a critical yet vulnerable component of modern software development. As the threat landscape evolves, particularly with the rise of zero-day exploits, organizations must adopt proactive measures to secure their supply chains. By implementing strategies like Zero Trust and implementing continuous monitoring, penetration testing and regular security audits, businesses can reduce the risk of supply chain attacks and safeguard their software ecosystems. Staying vigilant and prepared is essential in a world where the software supply chain is increasingly under siege. Taking these steps now will protect your organization and build resilience against future threats. 

---

---

Kaseya’s Security Suite Helps Businesses Mitigate All Types of Cyber Risk Affordably 

---

Kaseya’s Security Suite has the tools that MSPs and IT professionals need to mitigate cyber risk effectively and affordably with automations and AI-driven features that make IT professionals’ lives easier.    

BullPhish ID: This effective, automated security awareness training and phishing simulation solution provides critical training that improves compliance, prevents employee mistakes and reduces a company’s risk of being hit by a cyberattack.     

Dark Web ID: Our award-winning dark web monitoring solution is the channel leader for good reason. It provides the greatest amount of protection around with 24/7/365 human- and machine-powered monitoring of business and personal credentials, including domains, IP addresses and email addresses.    

Graphus – Graphus is a cutting-edge, automated antiphishing solution that puts three layers of AI-powered protection between employees and phishing messages. It supercharges your Microsoft 365 and Google Workspace email security to catch threats conventional security might miss including Zero Days and AI-enhanced malicious messages. 

RocketCyber Managed SOC: Our managed detection and response (MDR) solution is backed by a world-class security operations center that detects malicious and suspicious activity across three critical attack vectors: endpoint, network and cloud.     

Datto EDR: Detect and respond to advanced threats with built-in continuous endpoint monitoring and behavioral analysis to deliver comprehensive endpoint defense (something that many cyber insurance companies require).      

Datto AV: Safeguard businesses effortlessly against sophisticated cyberthreats, including zero-days and ransomware, with AI-driven, next-generation antivirus protection that is over 99% effective, far surpassing the industry average. 

Learn more about our security products, or better yet, take the next step and book a demo today! 

---

---

---

September 12: Kaseya+Datto Connect Local Milton Keynes, UK REGISTER NOW>>

September 17: Kaseya+Datto Connect Local Los Angeles  REGISTER NOW>>

September 19: Kaseya+Datto Connect Local The Netherlands REGISTER NOW>>

October 28 – 30: Kaseya DattoCon (Miami) REGISTER NOW>>

November 12 – 14: Kaseya DattoCon APAC (Sydney) REGISTER NOW>>

---

---

---

---

---