Computer Security News and Insights
In March 2022, Okta confirmed that the Lapsus$ threat actor group had compromised a support engineer's laptop and accessed internal systems for five days before detection. Five days. That's an eternity when an attacker has a foothold inside your environment. The breach highlighted a brutal truth:
In March 2022, Lapsus$ — a threat actor group made up largely of teenagers — breached Microsoft, Nvidia, Samsung, and Okta in rapid succession. They didn't use sophisticated zero-day exploits. They used social engineering, credential theft, and the kinds of gaps that exist in almost every organization. If you'
In March 2022, the Lapsus$ threat actor group breached Okta, Microsoft, Nvidia, and Samsung — not by exploiting sophisticated zero-day vulnerabilities, but by buying stolen credentials and socially engineering employees. A teenager-led group dismantled the IT security of some of the most well-resourced technology companies on the planet. If that doesn&
3.5 Million Open Positions and Counting Cybersecurity Ventures projected 3.5 million unfilled cybersecurity jobs globally by the end of 2021 — and as of mid-2022, we're not even close to filling them. The (ISC)² 2021 Cybersecurity Workforce Study pegged the global workforce gap at 2.72 million
In March 2022, Okta confirmed that the Lapsus$ threat actor group had breached a third-party support engineer's laptop and accessed internal systems. The attack didn't exploit some exotic zero-day vulnerability. It started with compromised credentials — a single point of failure in what should have been a
In March 2022, the Lapsus$ group breached Okta by compromising a third-party support engineer's laptop — and suddenly, thousands of organizations realized their web security posture was only as strong as their weakest vendor's. That single incident forced a reckoning across the industry. If your organization runs
The Blind Spot That Computer Security Companies Sell Around In March 2022, Okta — one of the most prominent identity management vendors in the world — confirmed that the Lapsus$ threat actor group had compromised a third-party support engineer's laptop and accessed internal systems. An identity security company, breached through
The Breach That Started With a Single Password In May 2021, a single compromised password shut down the Colonial Pipeline and triggered fuel shortages across the Eastern United States. The attackers used a stolen VPN credential — no multi-factor authentication, no zero trust architecture, just one reused password. That's
In March 2022, the FBI's Internet Crime Complaint Center reported that Americans lost over $6.9 billion to cybercrime in 2021 — a 64% increase from the year before. A staggering number of those victims weren't Fortune 500 companies. They were regular people, sitting at home computers,
The Virus That Cost One Hospital Chain $67 Million In 2017, the NotPetya attack crippled organizations worldwide. Heritage Valley Health System in Pennsylvania lost access to its entire network. Surgeries were delayed. Patient records vanished. The total global damage from NotPetya exceeded $10 billion, according to the White House. And
