Only after running out of hard disk space did firm realise hacker had stolen one million users' details

Yet another company has been found lacking when it comes to securing its consumers’ data. Utah-based InfoTrax Systems provides back-end services to multi-level marketing companies (MLMs) such as dōTERRA, ZanGo, and LifeVantage, providing website portals where individuals can register as a distributor, sign-up new distributors, and place orders for themselves and end consumers.

Netwrix Auditor 9.9 - Visibility into Office 365 Permissions

Visibility into SharePoint Online, OneDrive for Business and Exchange Online permissions, available in Netwrix Auditor 9.9, gives you a clear picture of who has access to what so you can enforce the least-privilege principle and ensure that your critical data is not overexposed. Keeping your critical data secure in Office 365 is not easy, in part because of the intricate system of issuing permissions there. How can you ensure that your SharePoint Online documents are not shared with external users? How can you quickly make sure that your CEO’s messages are not overexposed?

Netwrix Auditor for Office 365 - Overview

Netwrix Auditor for Office 365 delivers complete visibility into what’s going on in your Office 365 environment. This insight empowers organizations to see who has access to what, monitor user activity in SharePoint Online, and audit all modifications and non-owner mailbox access events in Exchange Online to enhance the security of their critical data, continuously ensure business availability and prove compliance with less effort.

Securing Google Cloud Run serverless workloads

Google Cloud Run is a serverless compute platform that automatically scales your stateless containers. In this post we are going to showcase how to secure the entire lifecycle of your Cloud Run services. Sysdig provides a secure DevOps workflow for Cloud Run Platforms that embeds security, maximizes availability and validates compliance across the serverless lifecycle. Sysdig Secure Devops Platform is open by design, with the scale, performance and usability enterprises demand.

3 Trends Where Technology Can Simplify Vendor Risk Management

Vendor risk management is the practice of governing third-party access to company data. This is a critical aspect of an organization since vendors view your business information when providing their services. For some, this can turn into a severe vulnerability that can lead to data breaches. In fact, in the past five years, vendors like Home Depot and Target were responsible for those incidents, as reported by Forbes.

Attackers Using PureLocker Ransomware to Target Enterprises' Servers

Researchers have detected a new ransomware family they’re calling “PureLocker” which attackers are using to target enterprises’ production servers. Intezer detected a sample of the ransomware masquerading as the Crypto++ C++ cryptography library. In their analysis of the sample, they noticed something unusual when they saw that alleged library contained functions related to music playback.