Threatpost News Wrap, September 29, 2017

The macOS Keychain attack, Signal’s new private contact discovery service, the Deloitte hack, and a handful of mobile stock trading app vulnerabilities are discussed. Continue reading Threatpost News Wrap, September 29, 2017

Deloitte Hacked – Client Emails, Usernames & Passwords Leaked

Deloitte Hacked – Client Emails, Usernames & Passwords Leaked

It seems to be non-stop lately, this time it’s Deloitte Hacked, which has also revealed all kinds of publically accessible resources that really should be more secure (VPN, RDP & Proxy services).

The irony is that Deloitte positions itself as a global leader in information security and offers consulting services to huge clients all over the planet, now it seems they don’t take their own advice. Honestly this is not all that uncommon, it’s human nature to leave your own stuff last as it doesn’t directly impact revenue or value (until you get hacked).

Read the rest of Deloitte Hacked – Client Emails, Usernames & Passwords Leaked now! Only available at Darknet.

Continue reading Deloitte Hacked – Client Emails, Usernames & Passwords Leaked

Smashing Security podcast #045: Deloitte fail, CCleaner, and dotards on Twitter

Deloitte suffers an embarrassing hack, CCleaner spreads malware, and Twitter explains why it isn’t planning to ban Donald Trump from Twitter anytime soon.
All this and more is discussed in the latest edition of the “Smashing Security” podcast by comput… Continue reading Smashing Security podcast #045: Deloitte fail, CCleaner, and dotards on Twitter

After hack, security researchers probe Deloitte’s security posture

It’s difficult – if not impossible – for any organization to keep their networks and systems completely safe from knowledgeable, well-resourced and determined attackers. Still, we expect companies that advise other companies on information security to be better that most at protecting themselves. But is that expectation misplaced? Take, for example, the recent Deloitte hack. For the last five years, Deloitte (Touche Tohmatsu Limited) ranked as the most profitable security consulting services company in the … More Continue reading After hack, security researchers probe Deloitte’s security posture

Industry reactions to the Deloitte cyber attack

Deloitte has been targeted in an attack that compromised the emails and plans of some of its clients. Here are some of the industry comments Help Net Security received regarding this incident. Dr Jamie Graves, CEO at ZoneFox This attack is another clear example that anyone can be affected by cybercriminals – even those whose speciality is to stop them. It’s discomforting to see that even an experienced firm as Deloitte have fallen victim to … More Continue reading Industry reactions to the Deloitte cyber attack

Deloitte Hacked — Cyber Attack Exposes Clients’ Emails

Another day, another data breach. This time one of the world’s “big four” accountancy firms has fallen victim to a sophisticated cyber attack.

Global tax and auditing firm Deloitte has confirmed the company had suffered a cyber attack that resulted in… Continue reading Deloitte Hacked — Cyber Attack Exposes Clients’ Emails

Deloitte was breached last year, but investigators didn’t find out until March

Deloitte, one of the world’s largest accounting firms, was breached late last year, The incident caused some confidential emails, business plans, usernames and passwords belonging to U.S. companies and governmental agencies to be compromised. The breach was reportedly focused on Deloitte’s U.S. business, which is headquartered in New York City. Although hackers are thought to have penetrated a company network around October 2016, the intrusion was not detected until March. Deloitte brought in roughly $38 billion in revenue last fiscal year by selling financial consulting, accounting services and cybersecurity advice to government organizations and Fortune 500 corporations. The breach was first reported by The Guardian. In an email sent to CyberScoop, a Deloitte spokesperson confirmed that the reported breach had in fact occurred, but said that only a small number of clients were ultimately affected. Questions related specifically to when the incident originally occurred or had been remediated were not answered. Deloitte’s […]

The post Deloitte was breached last year, but investigators didn’t find out until March appeared first on Cyberscoop.

Continue reading Deloitte was breached last year, but investigators didn’t find out until March

Medical devices and the Internet of Things: Defending against cyber threats

More than one-third (35.6 percent) of surveyed professionals in the Internet of Things-connected medical device ecosystem say their organizations have experienced a cybersecurity incident in the past year, according to Deloitte. Identifying and mitigating the risks of fielded and legacy connected devices presents the industry’s biggest cybersecurity challenge according to respondents (30.1 percent). “It’s not surprising that managing cyber risks of existing IoT medical devices is the top concern facing manufacturers, providers, and regulators,” said … More Continue reading Medical devices and the Internet of Things: Defending against cyber threats

When it comes to cybersecurity, businesses remain overconfident and vulnerable

Consumer products companies, retailers and restaurant businesses may be operating with a false sense of security, according to a new Deloitte study. The study captures input from more than 400 CIOs, CISOs, CTOs and other senior executives about cyber risks and response plans affecting customer trust, payments, executive level engagement, human capital and intellectual property. Confidence is high According to the study, more than three-quarters (76 percent) of consumer business executives report they are highly … More Continue reading When it comes to cybersecurity, businesses remain overconfident and vulnerable