US watchdog acknowledges cyber-security oversight prior to fraudulent Bitcoin announcement.

TLDR:

The US Securities and Exchange Commission (SEC) has admitted that it had suspended a key security procedure on its X account for six months, during which time hackers gained access and made a fake post about Bitcoin. The cryptocurrency’s value surged before the post was deleted.
Cyber-security experts have said that all government agencies should review the security of their social network accounts in the wake of this incident.
The SEC confirmed that multi-factor authentication (MFA) had been disabled on the X account at the staff’s request, due to issues accessing the account.

The US Securities and Exchange Commission (SEC) has confirmed that it had suspended a key security procedure on its X account for six months, during which time hackers gained access and made a fake post about Bitcoin. The cryptocurrency’s value surged before the post was deleted. Cyber-security experts have said that all government agencies should review the security of their social network accounts in the wake of this incident.

The SEC admitted that it did not have multi-factor authentication (MFA) in place when hackers gained access to the account. MFA is intended to protect against cyber-attacks such as the one experienced by the SEC. It involves additional verification steps, such as entering a pin code or receiving a text message, in addition to a username and password.

The SEC has confirmed that the hack occurred through a sim-swapping attack. The fraudster convinced a mobile operator to transfer an SEC employee’s phone number to a new SIM. Because MFA had been disabled on the X account, the hacker was able to reset the password, log in, and make a post about the approval of Bitcoin exchange-traded funds by the SEC. The post caused the value of Bitcoin to surge to $48,000 before it was taken down.

This incident highlights the importance of implementing strong cyber-security measures, including MFA, to protect sensitive accounts. Experts warn that similar attacks on other government agencies could have more devastating consequences. Ultimately, all government agencies should review the security of their social network accounts to prevent future cyber-attacks.

Post Views: 80

Latest from Blog

US charges North Korean hacker for hospital ransomware attacks

TLDR: The U.S. DoJ indicted a North Korean hacker for ransomware attacks on hospitals The hacker, Rim Jong Hyok, is part of a group called Andariel and is accused of laundering ransom

Deadline approaching for Cyber Security Framework adoption and mandatory reporting Regulator shifts focus to enforcement from education

TLDR: Key points: Important compliance dates approaching for critical infrastructure assets under the Security of Critical Infrastructure Act. Responsible entities must adhere to specific cyber security frameworks and submit mandatory annual reports.

Cyberattack hits Selenium Grid for Crypto Mining – stay safe

Ongoing Cyberattack Targets Exposed Selenium Grid Services TLDR: Cyberattack targeting older versions of Selenium for crypto mining Threat actors using Selenium Grid services for illicit activities Cybersecurity researchers are warning about an

Bridging the cyber talent gap: tips for CISOs

TLDR: – Global cyber threats have increased twofold in recent years, leading to a talent gap of nearly 4 million cyber professionals worldwide. – Existing cyber staff are under strain, with vacancies

Deepfake dangers prompt urgent cybersecurity reevaluations for businesses

TLDR: AI-generated deepfake attacks are on the rise, leading companies to reassess their cybersecurity measures. Companies are developing deepfake response plans and running simulations to increase preparedness. Biometric authentication, once considered secure,

North Korean faces charges for cyberattacks on US targets

TLDR: A North Korean military intelligence operative has been indicted for orchestrating cyberattacks on U.S. hospitals, NASA, and military bases. Rim Jong Hyok, a member of the Andariel Unit, faces charges of

Analysts predict cybersecurity stocks will soar after CrowdStrike’s outage

“`html TLDR: CrowdStrike outage led to potential gains for cybersecurity rivals SentinelOne, Palo Alto Networks, and Microsoft’s cybersecurity business could benefit After a defective CrowdStrike update caused a global tech outage, analysts

Bitsight’s Trust Management Hub: Revolutionizing Security Assessment Process

TLDR: Bitsight has released Trust Management Hub to streamline security assessments. The new solution reduces workload by 25% and improves the assessment cycle by 85%, helping teams close deals faster. Bitsight, a

North Korean hackers pivot to ransomware attacks

TLDR: North Korean hackers from APT45 have shifted from cyber espionage to ransomware attacks APT45 has targeted critical infrastructure and is linked to ransomware families SHATTEREDGLASS and Maui A North Korea-linked threat

Europe’s telecom, electricity sectors evaluated in new EU cybersecurity report

TLDR: EU releases risk assessment report on cybersecurity in telecommunications and electricity sectors Report highlights supply chain risks, shortage of cybersecurity professionals, and threats from cybercriminals and state-sponsored actors Summary: The European

Suggestions

US watchdog acknowledges cyber-security oversight prior to fraudulent Bitcoin announcement

Latest from Blog