Data Breaches

Free AI web copilot to create summaries, insights and extended knowledge, download it at here

11247

Abstract

   </div>
          <div>
            <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*FyIDtYZefv7E6nILL3KXzA.png)"></div>
          </div>
        </div>
      </a>
    </div><h2 id="012d">The Kaseya Breach</h2><div id="2a35" class="link-block">
      <a href="https://readmedium.com/kaseya-before-and-after-e4a46aa4e7a6">
        <div>
          <div>
            <h2>Kaseya: Before and After</h2>
            <div><h3>The best time to contact a cybersecurity professional</h3></div>
            <div><p>medium.com</p></div>
          </div>
          <div>
            <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*FGlAeijILV0MPFRFdcJ6SQ.jpeg)"></div>
          </div>
        </div>
      </a>
    </div><h2 id="11c5">How Chinese Laws Contribute May Facilitate Data Breaches</h2><div id="a22f" class="link-block">
      <a href="https://readmedium.com/new-chinese-law-limits-vulnerability-reports-da457a7953e8">
        <div>
          <div>
            <h2>New Chinese Law Limits Vulnerability Reports</h2>
            <div><h3>Do you know where your security products are tested?</h3></div>
            <div><p>medium.com</p></div>
          </div>
          <div>
            <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*ITAx4TckrOit8KVtlrOi6A.png)"></div>
          </div>
        </div>
      </a>
    </div><p id="a63b">And related — are the devices you bring into your environment providing access?</p><div id="e7ba" class="link-block">
      <a href="https://readmedium.com/assessing-supply-chain-geopolitical-risk-c1a74384660d">
        <div>
          <div>
            <h2>Assessing Supply Chain Geopolitical Risk</h2>
            <div><h3>ACM.179 Where does the company in your supply chain build, test, and sell their products?</h3></div>
            <div><p>medium.com</p></div>
          </div>
          <div>
            <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*mQyFnHUDl6nGW3jWMcaWeg.png)"></div>
          </div>
        </div>
      </a>
    </div><h2 id="f52c">Home Routers as Accomplices in Internet Crimes</h2><p id="e3d6">Change your password and update your device. Reset it to factory default and re-update if you think it may be infected.</p><div id="a234" class="link-block">
      <a href="https://readmedium.com/your-home-router-may-be-committing-crimes-9f0d4445e6dc">
        <div>
          <div>
            <h2>Your Home Router May Be Committing Crimes</h2>
            <div><h3>Why network traffic analysis is so important</h3></div>
            <div><p>medium.com</p></div>
          </div>
          <div>
            <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*Xc1RGb-wuhCaWFtoP9b7yw.png)"></div>
          </div>
        </div>
      </a>
    </div><h2 id="340c">Log4J</h2><div id="639c" class="link-block">
      <a href="https://readmedium.com/log4j-the-aftermath-cf5d95e006ef">
        <div>
          <div>
            <h2>log4j: The Aftermath</h2>
            <div><h3>Summary of the log4j vulnerability that shook the Internet</h3></div>
            <div><p>medium.com</p></div>
          </div>
          <div>
            <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*QcO6qqbAUVes8_SOxwXV1g.png)"></div>
          </div>
        </div>
      </a>
    </div><div id="9451" class="link-block">
      <a href="https://readmedium.com/wafs-and-the-log4j-vulnerability-300338ea3263">
        <div>
          <div>
            <h2>WAFs and the Log4j Vulnerability</h2>
            <div><h3>Understanding the OSI model and how WAFs work</h3></div>
            <div><p>medium.com</p></div>
          </div>
          <div>
            <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*chx-pyCvG1fy1oT-UcjPxA.png)"></div>
          </div>
        </div>
      </a>
    </div><div id="fddf" class="link-block">
      <a href="https://readmedium.com/confused-deputy-attack-in-iam-resource-and-assumerole-policies-8fea3e2553b2">
        <div>
          <div>
            <h2>Confused Deputy Attack in IAM, Resource, and AssumeRole Policies</h2>
            <div><h3>ACM.31: Considering how an attacker could abuse role templates</h3></div>
            <div><p>medium.com</p></div>
          </div>
          <div>
            <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*3kFlmafBG_ppXn7QRD46ng.png)"></div>
          </div>
        </div>
      </a>
    </div><h2 id="9438">Container Escape on AWS (Patched)</h2><div id="abf9" class="link-block">
      <a href="https://readmedium.com/container-escape-vulnerability-in-aws-hot-patch-bed4211e59e">
        <div>
          <div>
            <h2>Container Escape Vulnerability in AWS Hot Patch</h2>
            <div><h3>Update or mitigate now if you are affected (if you run containers, you probably are.)</h3></div>
            <div><p>medium.com</p></div>
          </div>
          <div>
            <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*AkdhfEzQWBaFzg5USpTy3w.png)"></div>
          </div>
        </div>
      </a>
    </div><h2 id="40c2">Zoom RCE</h2><p id="1f9f">Zoom has a history of egregious security flaws. They now have a bug bounty and are trying to improve. Time will tell.</p><div id="2cae" class="link-block">
      <a href="https://readmedium.com/zoom-rce-time-to-patch-f9ad802e0e5e">
        <div>
          <div>
            <h2>Zoom RCE…Time to Patch</h2>
            <div><h3>How does this work exactly? Thinking about attack vectors.</h3></div>
            <div><p>medium.com</p></div>
          </div>
          <div>
            <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*_c7zgReCP72F4XHGBlichg.png)"></div>
          </div>
        </div>
      </a>
    </div><h2 id="1300">Twitch Breach</h2><div id="86d7" class="link-block">
      <a href="https://readmedium.com/thoughts-on-the-twitch-breach-a2840470387b">
        <div>
          <div>
            <h2>Thoughts on the Twitch Breach</h2>
            <div><h3>What caused the Twitch breach and might it have been prevented?</h3></div>
            <div><p>medium.com</p></div>
          </div>
          <div>
            <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/0*56FxMzHjdqoNROt3.jpg)"></div>
          </div>
        </div>
      </a>
    </div><h2 id="f748">Triangulation</h2><div id="6099" class="link-block">
      <a href="https://readmedium.com/sorting-out-the-risk-of-the-triangulation-exploit-36dce2416856">
        <div>
          <div>
            <h2>Sorting Out The Risk of the Triangulation Exploit</h2>
            <div><h3>Exploring iMessage attack paths and surface</h3></div>
            <div><p>medium.com</p></div>
          </div>
          <div>
            <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*x1BvVtO5FcqodJD7tik-Sw.png)"></div>
          </div>
        </div>
      </a>
    </div><h2 id="763d">Target Breach</h2><p id="b7ae">One of the first breaches I looked at in detail and wrote a white paper about for SANS Institute was the Target Breach. This was one of the first highly publicized breaches with enough detail to understand what happened — and how to prevent it.</p><div id="78ca" class="link-block">
      <a href="https://readmedium.com/the-target-breach-b7e658ef175e">
        <div>
          <div>
            <h2>The Target Breach</h2>
            <div><h3>Analysis of the Target Breach — what happened and how it may have been prevented by Teri Radichel</h3></div>
            <div><p>medium.com</p></div>
          </div>
          <div>
            <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*ddM9LguJhIVoEGP3_kdvLg.png)"></div>
          </div>
        </div>
      </a>
    </div><h2 id="8228">Data Breach Reports Need More Detail</h2><p id="bb0c">In order to perform an analysis on a data breach such as the Capital One or Target Breach — we need more detail than is typically provided in the empty words provided in most data breach reports.</p><div id="170f" class="link-block">
      <a href="https://readmedium.com/data-breach-reports-need-more-detail-3c315897216e">
        <div>
          <div>
            <h2>Data Breach Reports Need More Detail</h2>
            <div><h3>Provide information that helps stop future attacks</h3></div>
            <div><p>medium.com</p></div>
          </div>
          <div>
            <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*SLxxSAODxMx7XyK0cbt0yg.jpeg)"></div>
          </div>
        </div>
      </a>
    </div><p id="de04"><b>BGP Hijacking and DDoS</b></p><p id="c178">This post covers stolen cryptocurrency and outages caused by BGP misconfigurations and attacks.</p><div id="0e4f" class="link-block">
      <a href="https://readmedium.com/public-and-private-autonomous-system-numbers-asns-5ad20e175b13">
        <div>
          <div>
            <h2>Public and Private Autonomous System Numbers (ASNs)</h2>
            <div><h3>ACM.461 How ASNs and BGP are used and abused in attacks to route traffic on the Internet</h3></div>
            <div><p>medium.com</p></div>
          </div>
          <div>
            <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/0*D515Mfp-fwtx2tXm.png)"></div>
          </div>
        </div>
      </a>
    </div><h2 id="49e6">Biggest Breaches of 2022</h2><div id="753c" class="link-block">
      <a href="https://readmedium.com/biggest-data-breaches-of-2022-a1ba2ead25e1">
        <div>
          <div>
            <h2>Biggest Data Breaches of 2022</h2>
            <div><h3>A collection of reports on the biggest data breaches, hacks, and busts in 2022 as defined by multiple sources</h3></div>
            <div><p>medium.com</p></div>
          </div>
          <div>
            <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*ZXdFP6xam7vTUOyOcygsoQ.png)"></div>
          </div>
        </div>
      </a>
    </div><h2 id="c261">The Cuckoo’s Egg</h2><p id="1b6c">One of the greatest books on security incident response I’ve read. An early breach of a university and US Government systems. Oh, and a love story. ❤️</p><div id="c0a3" class="lin

Options

k-block"> <a href="https://readmedium.com/cybersecurity-book-review-the-cuckoos-egg-26e28ba6d785"> <div> <div> <h2>Cybersecurity Book Review: The Cuckoo’s Egg</h2> <div><h3>Tracking a Spy Through the Maze of Computer Espionage</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/0*5OdwQe8K-YZEB0YS.jpg)"></div> </div> </div> </a> </div><p id="cd05"><b>AWS Data Breaches and Incidents in 2023</b></p><div id="c2b1" class="link-block"> <a href="https://readmedium.com/aws-data-breaches-3518245b6fab"> <div> <div> <h2>AWS Data Breaches</h2> <div><h3>What’s causing data breaches on AWS?</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/0*NlEcdQ_ZQgAS5gw-.png)"></div> </div> </div> </a> </div><h2 id="4775">Azure and Microsoft Data Breaches and Incidents in 2023</h2><div id="405d" class="link-block"> <a href="https://readmedium.com/azure-and-microsoft-data-breaches-ef2c91f5956c"> <div> <div> <h2>Azure and Microsoft Data Breaches</h2> <div><h3>What’s causing breaches on Azure and Microsoft cloud?</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/0*Lmk-XOgXFu7UP2P0.png)"></div> </div> </div> </a> </div><h2 id="ba3d">Sandworm</h2><p id="5a34">How kremlin hackers infiltrate systems for the purpose of disruption, destruction, and misinformation.</p><div id="ee3c" class="link-block"> <a href="https://readmedium.com/cybersecurity-book-review-sandworm-bc64cacd5400"> <div> <div> <h2>Cybersecurity Book Review: Sandworm</h2> <div><h3>A New Era of Cyberwar and the Hunt for the Kremlin’s Most Dangerous Hackers</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/0*ML8whIizKX7I7Zwe.jpg)"></div> </div> </div> </a> </div><h2 id="f650">Dark Territory</h2><p id="96c3">The US governments use of cyber breaches for the purposes of national security. Are the tactics always warranted? Decide for yourself.</p><div id="11ca" class="link-block"> <a href="https://readmedium.com/cybersecurity-book-review-dark-territory-cd50c11b1852"> <div> <div> <h2>Cybersecurity Book Review: Dark Territory</h2> <div><h3>The evolution of offensive and defensive cybersecurity in the US government</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*dLzYTyBCrCBwfTXvEw0INQ.jpeg)"></div> </div> </div> </a> </div><h2 id="5521">Cyber Spies</h2><p id="df1f">How spies infiltrate systems ~ a British perspective. The British were initially the best in the world at spying and working with the Chinese government. Super interesting read.</p><div id="d124" class="link-block"> <a href="https://readmedium.com/cybersecurity-book-review-cyber-spies-343ce2662d0d"> <div> <div> <h2>Cybersecurity Book Review: Cyber Spies</h2> <div><h3>Cybersecurity History from a British Perspective</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/0*YR_htQn0gwikd0J2.jpg)"></div> </div> </div> </a> </div><h2 id="2bee">Blast Radius and Risk Management</h2><p id="7fc2">I wrote about how data breaches happen, how to prevent them, and lower the impact of a data breach in my book on Cybersecurity for Executive in the Age of Cloud at the bottom of this post. This is one of the series of draft posts that went into an expanded book (with less typos!)</p><div id="fd3e" class="link-block"> <a href="https://readmedium.com/the-aftermath-of-stolen-credentials-dbcebde531dc"> <div> <div> <h2>The aftermath of stolen credentials</h2> <div><h3>Premeditated damage control</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*2W9GBiKqEg9nVzJ6bvIJyQ.jpeg)"></div> </div> </div> </a> </div><div id="3038" class="link-block"> <a href="https://readmedium.com/cybersecurity-disasters-a7b76a0155b0"> <div> <div> <h2>Preparing for cybersecurity disasters</h2> <div><h3>Strategies to make sure you are ready</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*BLt6EPKv8BF2wP2S7O5i8A.jpeg)"></div> </div> </div> </a> </div><div id="896e" class="link-block"> <a href="https://readmedium.com/the-attackers-are-in-your-network-now-what-91c0be94a4e2"> <div> <div> <h2>The attackers are in your network — now what?</h2> <div><h3>How will you know and what will you do about it?</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*KP2TfFs6S3mrEEO_DSG-Eg.jpeg)"></div> </div> </div> </a> </div><h2 id="5568">Attack Vectors</h2><div id="71de" class="link-block"> <a href="https://readmedium.com/lldp-on-ubiquiti-udm-pro-causing-network-glitches-38d59637054c"> <div> <div> <h2>LLDP on Ubiquiti UDM Pro Causing Network Glitches?</h2> <div><h3>Random issues with network cutting out and attacks on LLDP</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*aUAASXkElgHq2L8VhiKrFw.png)"></div> </div> </div> </a> </div><div id="cfc8" class="link-block"> <a href="https://readmedium.com/your-website-got-an-f-in-security-ca8ed5e5e62e"> <div> <div> <h2>Your Website Got an F in Security</h2> <div><h3>Let’s look at that F and what it actually means — when it matters and when it does not</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*tS5E3K3ATpLv_GhG9m5njQ.png)"></div> </div> </div> </a> </div><div id="e529" class="link-block"> <a href="https://readmedium.com/different-types-of-man-in-the-middle-attacks-4a094a84a897"> <div> <div> <h2>Different Types of Man-In-The-Middle Attacks</h2> <div><h3>ACM.297 Different points of MITM attack and how they can affect victims and websites</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*POexJh3oRWl0hqStd1itOA.png)"></div> </div> </div> </a> </div><div id="5aea" class="link-block"> <a href="https://readmedium.com/why-you-might-need-a-better-password-b44df94236fb"> <div> <div> <h2>Why You Might Need A Better Password</h2> <div><h3>Assessing the risk of the devices and havoc they might be able to wreak (and why MFA might be easier)</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*HfoTIWmhWl2TdjUyK5BvtQ.png)"></div> </div> </div> </a> </div><div id="f718" class="link-block"> <a href="https://readmedium.com/why-cisos-need-indemnification-f57e5ab30252"> <div> <div> <h2>Why CISOs Need Indemnification</h2> <div><h3>What is it and why it matters in light of new SEC rules</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*F9eklNd5WGViiwowpTK4eA.png)"></div> </div> </div> </a> </div><p id="ba39">Follow for updates.</p><p id="4a3a">Teri Radichel | <i>© <a href="https://2ndsightlab.com/?source=post_page---------------------------">2nd Sight Lab</a> 2023</i></p><div id="8b5f"><pre><span class="hljs-section">About Teri Radichel:

⭐️ Author: Cybersecurity Books
⭐️ Presentations: Presentations by Teri Radichel
⭐️ Recognition: SANS Award, AWS Security Hero, IANS Faculty
⭐️ Certifications: SANS ~ GSE 240
⭐️ Education: BA Business, Master of Software Engineering, Master of Infosec
⭐️ Company: Penetration Tests, Assessments, Phone Consulting ~ 2nd Sight Lab</pre></div><div id="caae"><pre><span class="hljs-section">Need Help With Cybersecurity, Cloud, or Application Security?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~</span>
🔒 Request a penetration test or security assessment
🔒 Schedule a consulting call
🔒 Cybersecurity Speaker for Presentation</pre></div><div id="5a42"><pre>Follow <span class="hljs-keyword">for</span> more stories like <span class="hljs-keyword">this</span>:

❤️ Sign Up my Medium Email List ❤️ Twitter: <span class="hljs-meta">@teriradichel</span> ❤️ LinkedIn: https:<span class="hljs-comment">//www.linkedin.com/in/teriradichel</span> ❤️ Mastodon: <span class="hljs-meta">@teriradichel</span><span class="hljs-meta">@infosec</span>.exchange ❤️ Facebook: 2nd Sight Lab ❤️ YouTube: @2ndsightlab</pre></div><figure id="faf5"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/0*H9Ew1KCl-29nZiPR.jpeg"><figcaption></figcaption></figure></article></body>

Data Breaches

Posts on data breaches — and how they could have been prevented — by Teri Radichel

My First Data Breach

How network traffic got me into cybersecurity

Also — being paid by a large hosting company to go away after reporting a security incident, and other strange events.

Capital One Data Breach

What’s in your cloud?

Thoughts on the Capital One breach by a former Capital One software engineer, team lead, cloud engineer, and security…

Data Breach Prevention

How to Prevent a GitHub Breach Like the One That Just Happened To Mercedes-Benz

Strategies for securing your GitHub accounts

Friends On Facebook Writing About Fraudulent Transactions In Their Bank Accounts

Here’s what you need to do to protect yourself

Don’t Let Your Travel Points Get Stolen By Hackers

My friend just had all her points stolen from her Marriott account plus they booked hotels all over the world using the…

xz utils

Why The xz utils Software Vulnerability a Big Deal

How did it happen, what are the implications, and what can you do about it?

Oktapus

Oktapus

ACM.123 Reviewing one of the most dangerous attacks in 2022 to design an authentication system less susceptible to…

Okta Support Breach — October, 2023

The Latest Okta Support Team Breach

Should you stop using Okta ~ or alternatively ~ what can you do to protect yourself?

APT-10 attacks

How a just-in-time VPN access might have helped in the case of the APT10 attacks

Just in case you missed it — I did a blog post for AWS using an AWS IoT Button to open up network access to a VPN…

Databases Exposed Directly to the Internet

Amazon DocumentDB Network Access — Why the VPC?

Billions of Reasons why networking is vital for cloud security courtesy of MongoDB

Real World Cloud Compromise

Real World Cloud Compromise

Sample Findings from 2nd Sight Lab Penetration Tests

Solar Winds Breach

Solar Winds Breach

Articles by Teri Radichel on the Solar Winds Breach

Colonial Pipeline Attack

Colonial Pipeline Hack

Revisiting the facts after a week of news

The Kaseya Breach

Kaseya: Before and After

The best time to contact a cybersecurity professional

How Chinese Laws Contribute May Facilitate Data Breaches

New Chinese Law Limits Vulnerability Reports

Do you know where your security products are tested?

Assessing Supply Chain Geopolitical Risk

ACM.179 Where does the company in your supply chain build, test, and sell their products?

Home Routers as Accomplices in Internet Crimes

Your Home Router May Be Committing Crimes

Why network traffic analysis is so important

Log4J

log4j: The Aftermath

Summary of the log4j vulnerability that shook the Internet

WAFs and the Log4j Vulnerability

Understanding the OSI model and how WAFs work

Confused Deputy Attack in IAM, Resource, and AssumeRole Policies

ACM.31: Considering how an attacker could abuse role templates

Container Escape on AWS (Patched)

Container Escape Vulnerability in AWS Hot Patch

Update or mitigate now if you are affected (if you run containers, you probably are.)

Zoom RCE

Zoom RCE…Time to Patch

How does this work exactly? Thinking about attack vectors.

Twitch Breach

Thoughts on the Twitch Breach

What caused the Twitch breach and might it have been prevented?

Triangulation

Sorting Out The Risk of the Triangulation Exploit

Exploring iMessage attack paths and surface

Target Breach

The Target Breach

Analysis of the Target Breach — what happened and how it may have been prevented by Teri Radichel

Data Breach Reports Need More Detail

Data Breach Reports Need More Detail

Provide information that helps stop future attacks

Public and Private Autonomous System Numbers (ASNs)

ACM.461 How ASNs and BGP are used and abused in attacks to route traffic on the Internet

Biggest Breaches of 2022

Biggest Data Breaches of 2022

A collection of reports on the biggest data breaches, hacks, and busts in 2022 as defined by multiple sources