The Week in Breach News: 11/01/23 – 11/07/23

This week: Bad actors fly in to snatch data from Boeing, over 1 million Cook County Health patients have data exposed, an attack on Südwestfalen IT paralyzes 70 German municipalities and a look at 10 reasons why businesses should conduct monthly pen testing.

---

---

---

Ace Hardware

https://www.securityweek.com/cyberattack-disrupts-ace-hardwares-operations/

Exploit: Hacking

Ace Hardware: Retailer

How It Could Affect Your Customers’ Business: Today’s retailers are more reliant on technology than ever before and need to prioritize cybersecurity to avoid costly downtime.

Kaseya to the Rescue: Every company needs to be ready for trouble with an incident response plan in place to minimize downtime and speed up recovery. This checklist can help. DOWNLOAD CHECKLIST>>

---

Henry Schein

https://www.bleepingcomputer.com/news/security/blackcat-ransomware-claims-breach-of-healthcare-giant-henry-schein/

Exploit: Ransomware

Henry Schein: Healthcare Solutions Provider

How It Could Affect Your Customers’ Business: Cybercriminals know that they can make money fast by knocking out linchpins in an industry’s supply chain

Kaseya to the Rescue:  An endpoint detection and response solution can help businesses stop the spread of a cyberattack fast. This checklist helps you find the right one. DOWNLOAD IT>>

---

Mr. Cooper

https://nationalmortgageprofessional.com/news/mr-cooper-locked-down-cyber-attack

Exploit: Ransomware

Mr. Cooper: Mortgage Lender

How It Could Affect Your Customers’ Business: A hit on a mortgage company can be a goldmine for bad actors because of the wide variety of data lenders hold.

Kaseya to the Rescue: This infographic shows you the benefits you gain when choosing a managed security operations center instead of building your own. DOWNLOAD IT>>

---

Boeing

https://www.bleepingcomputer.com/news/security/boeing-confirms-cyberattack-amid-lockbit-ransomware-claims/

Exploit: Ransomware

Boeing: Aerospace Company

How It Could Affect Your Customers’ Business: Cybercriminals are going after infrastructure targets relentlessly, and the elevated threat level calls for elevated security.

Kaseya to the Rescue:  Explore how security awareness training helps organizations defend against today’s most dangerous cyber threats in this infographic. DOWNLOAD IT>> 

---

Allied Pilots Association (APA)

https://therecord.media/american-airlines-pilot-union-cyberattack

Exploit: Ransomware

Allied Pilots Association (APA): Trade Union

How it Could Affect Your Customers’ Business: Members may lose confidence in an association that experiences a successful cyberattack.

Kaseya to the Rescue:  Ransomware is a major threat to all organizations, not just businesses. Learn more about ransomware and get tips to mitigate risk in Ransomware 101. DOWNLOAD IT>>

---

Cook County Health

https://www.cbsnews.com/chicago/news/cook-county-health-warns-of-data-breach-for-1-2-million-patients-at-medical-transportation-firm/

Exploit: Supply Chain Attack

Cook County Health: Health System

How it Could Affect Your Customers’ Business: Every relationship that a business has with a service provider or supplier can be a vector for a cyberattack.

Kaseya to the Rescue: In The Comprehensive Guide to Third Party and Supply Chain Risk, you’ll learn how these risks emerge and what you can do to mitigate them. DOWNLOAD IT>> 

---

---

---

Mexico – Querétaro Intercontinental Airport

https://therecord.media/queretaro-international-airport-mexico-cyberattack

Exploit: Human Error

Querétaro Intercontinental Airport: Airport

How it Could Affect Your Customers’ Business: One careless employee can make a mistake that causes a huge cybersecurity problem for their employer.

Kaseya to the Rescue: This checklist can help businesses determine if they’re making all the right moves to prevent email-based cyberattacks. DOWNLOAD IT>>

---

---

---

Germany – Südwestfalen IT

https://therecord.media/massive-cyberattack-hinders-services-in-germany

Exploit: Ransomware

Südwestfalen IT: IT Service Provider

How it Could Affect Your Customers’ Business: Service providers are prime targets for cyberattacks, and their risk is only rising as the world becomes more interconnected.

Kaseya to the Rescue: See how security awareness training helps keep cybersecurity threats from becoming cybersecurity disasters. DOWNLOAD INFOGRAPHIC>>

---

---

---

---

---

---

Bullphish ID and Compliance Manager GRC are working together to make IT professionals’ lives easier with a new integration. By importing Evidence of Compliance data from BullPhish ID, you can reduce the time spent collecting data to address compliance controls. Learn more about how to put this integration to work for you in the Release Notes. READ THE RELEASE NOTES>> 

---

---

---

Download “When Email Attacks: How to Develop Your Employees’ Phishing Defense Superpowers”

---

Are you wondering how to transform employees from security risks to security heroes? This guide gives you the secret formula! Download our eBook now to gain insight into important training concerns like:

• The most crucial components of security awareness training
• How to maintain a culture of security, even with remote workers
• Ways to overcome common obstacles to security training success

DOWNLOAD IT>> 

---

---

---

---

In today’s turbulent digital age, the cybersecurity threat landscape moves at lightning speed. Cyberattacks are becoming increasingly sophisticated and prevalent, with threats evolving every day. IT professionals need every advantage they can get to keep up. One effective strategy for assessing and strengthening an organization’s cybersecurity is frequent penetration testing or pen testing. This game-changing tool simulates real-world cyberattacks on a business’s systems and networks to identify vulnerabilities before malicious actors can exploit them. In the past, businesses only conducted a pen test once a year because of high costs. However, automation has made it possible for businesses to pen test every month affordably, enabling them to stay a step ahead of the game. 

---

---

10 Reasons Why Monthly Pen Testing is a Smart Idea 

---

Here are ten reasons why businesses should invest in more frequent penetration testing and the benefits it can bring. 

1. Evolving Threat Landscape 

The cybersecurity landscape is constantly evolving, with cybercriminals developing new techniques and tools to breach security measures daily. In 2022, researchers noted 25 thousand new common IT vulnerabilities. As a result, the need for businesses to keep their defenses up to date is more critical than ever. Hackers are continually refining their attack methods, and vulnerabilities that were once considered minor could be exploited in creative ways. Frequent penetration testing helps organizations stay one step ahead of cyber threats by identifying vulnerabilities in their systems and applications before they become disasters. 

2. Protecting Sensitive Data 

Data is a valuable asset, and bad actors are dying to get their hands on it. Businesses may store a wide variety of sensitive information such as customer data, intellectual property, financial records and trade secrets that bad actors can sell for a profit. A data breach can have severe consequences, including financial loss, damage to reputation and legal liabilities. The global average cost of a data breach in 2023 is $4.45 million. Frequent penetration testing can help safeguard sensitive data by identifying vulnerabilities that could be exploited by attackers. By proactively assessing security measures through pen testing, businesses can better protect their networks and data. 

---

---

3. Regulatory Compliance 

Many industries are subject to regulatory requirements that mandate certain cybersecurity measures must be in place, while others require businesses to meet certain cybersecurity standards. Frequent penetration testing can help businesses assess their compliance with these regulations. By performing regular assessments and addressing vulnerabilities promptly, organizations have a better chance of avoiding costly penalties and legal consequences. 

4. Early Detection of Vulnerabilities 

Identifying vulnerabilities before they are exploited is essential. The breakneck pace of cybersecurity today means that vulnerabilities are popping up faster than ever, with 55 new software vulnerabilities discovered every day.  Frequent penetration testing allows businesses to catch vulnerabilities early in their lifecycle, reducing the window of opportunity for cybercriminals. It also allows for more proactive and efficient remediation, minimizing potential damage and security breaches. 

5. Reducing Security Costs  

Addressing cybersecurity incidents and data breaches can be punishingly expensive for a business. Frequent penetration testing is a proactive investment in cybersecurity that can help reduce the financial impact of security incidents. The cost of conducting penetration tests is far lower than dealing with the huge expenses that a company can incur in the aftermath of a data breach, including legal expenses, fines and damage to reputation. Those costs jump up every year too. IBM researchers noted a 15% increase in data breach costs over the last three years. 

6. Improved Incident Response 

While penetration testing focuses on identifying vulnerabilities, it also helps businesses refine their incident response plans. In the event of a real cyberattack, having a well-practiced response plan in place can significantly minimize the damage and downtime. Maintaining a formal, tested incident response plan is a critical element of building a company’s cyber resilience. Frequent testing enables organizations to fine-tune their incident response procedures and improve their overall readiness.  

---

---

7. Competitive Advantage 

Customers and clients are becoming increasingly security-conscious. By publicly demonstrating a commitment to cybersecurity through frequent penetration testing and a strong security posture, businesses can gain a competitive advantage. A robust security framework can be a selling point that differentiates a company from its competitors and instills trust in customers. 

8. Protection Against Insider Threats 

Insider threats, whether intentional or unintentional, pose a significant risk to organizations. Frequent penetration testing can help identify vulnerabilities that could be exploited by employees, contractors, or partners with malicious intent. It also helps in uncovering areas where additional training or policy enforcement may be necessary to mitigate insider threats. Cybersecurity Insiders determined that more than 60% of companies experienced a dangerous insider threat in 2022. 

9. Scalability and Change Management 

Businesses are not static entities. They grow, change, and adopt new technologies and systems. Frequent penetration testing allows organizations to adapt their security measures to these changes, ensuring that new systems and applications are assessed for vulnerabilities. Scalability and change management become more effective and secure with ongoing testing. 

10. Trust and Reputation 

A data breach can have long-lasting effects on a business’s reputation and trustworthiness. Frequent penetration testing demonstrates a commitment to security, reassuring customers, partners, and stakeholders that their information is being safeguarded. Trust and reputation are valuable assets that can be protected through continuous cybersecurity efforts. Consumers do not like doing business with companies that fall victim to cyberattacks. In a study, 3 in 4 respondents said that they would stop doing business with a company that fell victim to a cyberattack or experienced a data breach.  

The importance of frequent penetration testing for businesses cannot be overstated. In an ever-evolving threat landscape, organizations must be proactive in identifying and mitigating vulnerabilities to protect sensitive data, comply with regulations and maintain their reputation. By investing in monthly penetration testing, businesses can stay ahead of cyber threats, reduce security costs and demonstrate a commitment to cybersecurity that can set them apart in today’s competitive business environment.  

---

---

Find Solutions That Solve Problems in the Kaseya Security Suite

---

Kaseya’s Security Suite has the tools that IT professionals need to mitigate cyber risk easily and affordably.

BullPhish ID — This effective, automated security awareness training and phishing simulation solution provides critical training that improves compliance, prevents employee mistakes and reduces a company’s risk of being hit by a cyberattack.   

Dark Web ID — Our award-winning dark web monitoring solution is the channel leader for a good reason: it provides the greatest amount of protection around with 24/7/365 human and machine-powered monitoring of business and personal credentials, including domains, IP addresses and email addresses.  

Graphus — Automated email security is a cutting-edge solution that puts three layers of AI-powered protection between employees and phishing messages. It works equally well as a standalone email security solution or supercharges your Microsoft 365 and Google Workspace email security.    

Kaseya Managed SOC powered by RocketCyber — Our managed cybersecurity detection and response solution is backed by a world-class security operations center that detects malicious and suspicious activity across three critical attack vectors: endpoint, network and cloud.    

Datto EDR — Detect and respond to advanced threats with built-in continuous endpoint monitoring and behavioral analysis to deliver comprehensive endpoint defense (something that many cyber insurance companies require).    

Vonahi Penetration Testing – How sturdy are your cyber defenses? Do you have dangerous vulnerabilities? Find out with vPenTest, a SaaS platform that makes getting the best network penetration test easy and affordable for internal IT teams. 

---

---

---

TODAY! Cybersecurity Jeopardy

November 8 | 1 PM ET / 10 AM PT
Join Us for Cybersecurity Trivia and Prizes!

Are you ready to brush up on your cybersecurity knowledge with experts? Don’t miss the thrilling competition you know and love, with fresh surprises and new opportunities for you to win big! Secure your spot now and register for the ultimate cybersecurity showdown – it’s time to play Cybersecurity Jeopardy! REGISTER NOW>>

November 9:  Kaseya + Datto Connect Local Manchester REGISTER NOW>>

November 9: Kaseya + Datto Connect Local Montreal REGISTER NOW>>

November 14 – 16: Kaseya DattoCon APAC Sydney  REGISTER NOW>>

November 14: Kaseya + Datto Connect Local New Haven (Virtual) REGISTER NOW>>

November 15: Set-It-and-Forget-It Security Awareness Training REGISTER NOW>>

November 16: Kaseya + Datto Connect Local Pittsburgh (Virtual) REGISTER NOW>>

November 23: Kaseya + Datto Connect Local Antwerp, Belgium REGISTER NOW>>

November 28: Kaseya + Datto Connect Local El Segundo REGISTER NOW>>

December 5: Kaseya + Datto Connect Local Orlando REGISTER NOW>>

---

---

---

---

---