Adrian Johnson
TLDR:
Key Points:
- LastPass report on deepfake audio call impersonating CEO
- Ransomware attack at New Mexico Highlands University
Article Summary:
In the Week in Review for the week ending April 12, 2024, Cyber Security Today covers various cybersecurity incidents. Microsoft faced scrutiny for leaving an Azure storage server open to the internet, exposing sensitive material. The report also highlights a deepfake audio call targeting an employee impersonating the CEO through LastPass. Other incidents discussed include a ransomware attack at New Mexico Highlands University, Twitter’s link modification strategy backlash, and AT&T notifying customers of personal information being leaked.
David Shipley from Beauceron Security discusses the cloud security challenges illustrated by these incidents and emphasizes the importance of the shared responsibility model for cloud providers and users. Microsoft’s security culture is criticized, and suggestions for improved security practices are provided. The report from the Cyber Safety Review Board outlines the preventable nature of the Microsoft attack and calls for a security overhaul.
