Source: securityboulevard.com – Author: Tom Eston
Several major organizations, including British Airways and the BBC, fell victim to the recent MOVEit cyberattack. We discuss the alarming trend of hackers targeting trusted suppliers to gain access to customer data, potentially holding companies and individuals for ransom.
Is it better to change passwords regularly or focus on creating complex ones? We discuss the pitfalls of frequent password changes, such as predictable patterns and delayed responses to security breaches.
The Department of the Army’s Criminal Investigation Division issues a military-wide alert about a program offering free smartwatches to US service members. We discuss the concerns surrounding these devices, from malicious actors targeting personal data to engaging in “brushing” activities.
** Links mentioned on the show *
Moveit hack: attack on BBC and BA offers glimpse into the future of cybercrime
https://theconversation.com/moveit-hack-attack-on-bbc-and-ba-offers-glimpse-into-the-future-of-cybercrime-207670
https://www.mandiant.com/resources/blog/zero-day-moveit-data-theft
Thoughts on scheduled password changes (don’t call them rotations!)
https://nakedsecurity.sophos.com/2023/06/09/thoughts-on-scheduled-password-changes-dont-call-them-rotations/
Warning Issued to Troops Receiving Strange Smartwatches in the Mail
https://www.military.com/daily-news/2023/06/22/warning-issued-troops-receiving-strange-smartwatches-mail.html
** Watch this episode on YouTube **
** Become a Shared Security Supporter **
For only $5 per month get exclusive access to ad-free episodes, listen to new episodes before they are released, get access to our private Discord server, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today! https://patreon.com/SharedSecurity
** Thank you to our sponsors! **
SLNT
Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”.
Click Armor
To find out how “gamification” of security awareness training can reduce cyber risks related to phishing and social engineering, and to get a free trial of Click Armor’s gamified awareness training platform, visit: https://clickarmor.ca/sharedsecurity
** Subscribe and follow the podcast **
Join the Shared Security Community on Reddit: https://www.reddit.com/r/SharedSecurityShow/
Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast
Watch and Subscribe on Odysee (YouTube alternative)
https://odysee.com/@SharedSecurity:c
Follow us on Mastodon: https://infosec.exchange/@sharedsecurity
Follow us on Twitter: https://twitter.com/sharedsec
Visit our website: https://sharedsecurity.net
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Sign-up for our email newsletter to receive updates about the podcast, contest announcements, and special offers from our sponsors: http://eepurl.com/dwcc8D
Leave us a rating and review: https://ratethispodcast.com/sharedsecurity
Contact us: https://sharedsecurity.net/contact
The post MOVEit Cyberattack, The Problem with Password Rotations, Military Alert on Free Smartwatches appeared first on Shared Security Podcast.
*** This is a Security Bloggers Network syndicated blog from Shared Security Podcast authored by Tom Eston. Read the original post at: https://sharedsecurity.net/2023/07/03/moveit-cyberattack-the-problem-with-password-rotations-military-alert-on-free-smartwatches/
Original Post URL: https://securityboulevard.com/2023/07/moveit-cyberattack-the-problem-with-password-rotations-military-alert-on-free-smartwatches/
Category & Tags: Careers,Data Security,Identity & Access,Security Awareness,Security Bloggers Network,Threats & Breaches,Brushing,china,Complex Passwords,Cyber Security,cyberattack,Cybersecurity,Data breach,Data Privacy,Digital Privacy,Episodes,Information Security,Infosec,military,MOVEit,Password,Password Rotations,passwords,Podcast,Podcasts,Privacy,security,smartwatch,Smartwatches,supply chain,supply chain attack,technology,US Army,vulnerability,Weekly Edition – Careers,Data Security,Identity & Access,Security Awareness,Security Bloggers Network,Threats & Breaches,Brushing,china,Complex Passwords,Cyber Security,cyberattack,Cybersecurity,Data breach,Data Privacy,Digital Privacy,Episodes,Information Security,Infosec,military,MOVEit,Password,Password Rotations,passwords,Podcast,Podcasts,Privacy,security,smartwatch,Smartwatches,supply chain,supply chain attack,technology,US Army,vulnerability,Weekly Edition
