Weekly Cybersecurity Roundup: October 16-20
Major Incidents & Threats
Manchester Airports Group: A cyberattack exposed information belonging to approximately 8.7 million UK airport customers across three airports, potentially enabling targeted phishing and social-engineering campaigns.
McKesson: McKesson confirmed data exfiltration from third-party applications, with ShinyHunters claiming vishing compromised employee Okta accounts, leading to access to Salesforce, Snowflake, and millions of patient records. This highlights the need for robust protection against voice-based social engineering and quick revocation of compromised sessions.
Hasbro: A breach exposed sensitive employee information including Social Security numbers, financial data, payment card details, and driver’s license info, affecting 436 Massachusetts employees.
Industry News
Texas Water Security Pilot: The White House is running a six-month initiative to test cybersecurity defenses for Texas water utilities. This program aims to assess tools while emphasizing sustainable protections for resource-constrained utilities.
Coordinated Enforcement Actions:
- Seizure of QScan and QTRouter domains used against U.S. critical infrastructure.
- Arrests in Australia of two men allegedly connected to TeamPCP, a persistent
Read the full article at eSecurityPlanet
Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.
