Data Breach at Sequoia One Exposes Sensitive Customer Information

What do you do when your most personal information has been compromised? This is likely the question that customers of Sequoia One asked themselves earlier this month as they were informed that the company had been hacked. Sequoia One specializes in the management of human resources, benefits, and payroll. For …

Cisco Reports Critical IP Phone Vulnerability

As a business owner, it’s important to stay informed about potential vulnerabilities that could impact your organization. Recently, Cisco reported a critical vulnerability, tracked as CVE-2022-20968, affecting its IP Phone 7800 and 8800 Series. This new vulnerability is caused by inadequate input validation of packets using the Cisco Discovery Protocol. …

Last Microsoft Edge Update for 2022

A new version of Microsoft Edge is available for Windows, macOS, and Linux. While the update is relatively small, it contains two feature upgrades and significant security fixes, including one for the Chromium engine’s “Type confusing in V8” vulnerability. Vulnerability Fix Unsurprisingly, one of the most significant improvements in this …

Apple Announces Advanced Data Protection for iCloud

Apple released several new security features on December 7th, 2022, designed to keep users’ sensitive data and communications secure. Advanced Data Protection for iCloud is one of the most notable features for Apple users. In order to protect sensitive data stored in iCloud, such as voice memos, photos, notes, and …

SiriusXM Flaw Unlocks Vehicles and More

A somewhat concerning flaw has been fixed by SiriusXM that would allow unauthorized individuals to unlock doors remotely and start engines by only having the vehicle identification number (VIN). Sam Curry, a researcher at Yuga Labs, published a Twitter thread explaining the details of the discovered security flaw. The security …

End-to-End Encryption for Dropbox Business Users

Dropbox has announced its plans to purchase several key assets from Boxcryptor so that it is able to provide end-to-end encryption for its business users. In addition, the partial merger between the two companies will enable Dropbox to better meet its client’s needs, including an enhanced level of security for …

Lastest LastPass Security Incident

According to LastPass CEO Karim Toubba, the password manager has been hacked once again. A data breach occurred in the development environment only a few months ago, prompting LastPass to announce they had experienced a security breach on August 25, 2022. LastPass disclosed to its customers that a developer account …

Amazon Security Lake Aims to Enhance Cybersecurity for Businesses

The new security-focused data lake solution from Amazon Web Services (AWS), unveiled at re:Invent 2022, aims to give consumers more value from their security data. The Amazon Security Lake service aims to consolidate an organization’s security data from various on-premises and cloud-based sources into a single location to pinpoint security …

Scammers Impersonating Refund Payment Portals

The FBI warns about scammers pretending to be refund payment gateways from financial institutions to steal sensitive information from unsuspecting victims. The federal law enforcement agency stated that scammers deceive victims into granting them access to their computers via email or phone calls by posing as representatives of technical or …

Twitter’s Data Leak Exposes Over 5.4 Million Users

Earlier this year, Twitter confirmed that an API vulnerability had caused a massive data leak containing non-public information for over 5.4 million Twitter users. Twitter denied claims that hackers had leaked the private information priorly. However, Pompompurin, the owner of the hacking forum Breached, stated they were responsible for exploiting …