>>14221810
Scraped GETTR data leaked. Untrained users threaten data. Update on Morgan Stanley's exposure to the Accellion breach.
At a glance.
GETTR data scraped and leaked.
The threat posed by untrained users.
Morgan Stanley's Accellion FTA breach: update.
Scraped GETTR data leaked.
Alternative social network GETTR, launched last week with President Trump’s former spokesperson Jason Miller at the helm, has suffered a number of incidents as it finds its cyber sea legs, according to HackRead. The rollout was marred by a deluge of ‘adult’ content, and leading users’ profiles were vandalized. In the most recent turn of events, an alleged scrape of nearly 90 thousand members’ personal information has been made available online, apparently revealing user names, email addresses, locations, and birth years.
Miller’s response to the scrape: “GETTR does not request personal, identifying information from users and, unlike other social media platforms, we are not interested in selling any data…As soon as the problem was detected…the vulnerability was sealed.”
Untrained users as a threat to data.
PRWeb says KnowBe4’s 2021 Phishing by Industry Benchmarking Report, which studied 6.6 million individuals in 23 thousand organizations, found untrained users to be on average thirty-one percent phish-able across 15.5 million casts. A three month training decreased gullibility to sixteen percent, and after a year of lessons, only five percent took the bait.
KnowBe4 also found that twenty-four percent of employees don’t know the confidentiality status of information they’re responsible for, Intelligent CIO reports. Confidential information can put an organizations’ reputation, cybersecurity, regulatory compliance, and business secrets at risk. The finance sector fared better than average, at sixteen percent, while the education, retail, construction, and transportation industries hit digits as high as thirty-five percent.
Update on Morgan Stanley’s Accellion FTA breach.
As we’ve seen, and as Reuters reported, hackers snagged personal data from Morgan Stanley’s corporate customers via the Accellion FTA compromise. The investment firm’s clients, BleepingComputer notes, span forty-odd countries. When Morgan Stanley vendor Guidehouse, which serves the firms’ StockPlan Connect offering, suffered a breach through the Accellion vulnerability, threat actors grabbed encrypted files, along with their decryptor.
(Body of text too long, the rest is in the linked article)
https://thecyberwire.com/newsletters/privacy-briefing/3/131