Published: October 28, 2022
By Annie articles
TalPoint Weekly Wrap Up 10/28/22
Ukrainian charged for operating Raccoon Stealer malware service
Bleeping Computer: Federal grand jury indictment charges were brought against Mark Sokolovsky, a 26 year old Ukrainian national for his role in the Racoon Sealder malware-as-a-service (MaaS) cybercrime operation. The FBI identified over 50 million unique credentials and forms of personal identification of stolen data from millions of victims around the world. Since Sokolvovsky’s arrest in the Netherlands, law enforcement departments were able to dismantle the Raccoon Infostealer and take it offline.
More: Justice Department | Tech Crunch
FTC brings action against CEO of alcohol delivery company over data breach
Washington Post: The Federal Trade Commission (FTC) has imposed sanctions against Drizy and its CEO, James Cory Rellas. Drizly is an alcohol delivery service that Uber purchased in 2021 and the company did not adequately address security issues from 2018. This caused a data breach two years later that exposed personal information of 2.5 million users. Rellas failed to shield consumer data and did not implement reasonable safeguards to protect its users even though they had publicly claimed that it had done so.
These cybersecurity vulnerabilities are most popular with hackers right now – have you patched them?
ZDNet: A software flaw in Microsoft Office continues to be one of the most popular security vulnerabilities among cybercriminals. This flaw (CVE-2017-11882) is over five years old and continues to be exploited because many businesses haven’t applied the security update. This vulnerability allows cybercriminals to drop malware secretly onto machines and uses phishing emails to trigger the bug.
Charlies is a 14 year cyber security expert. He started his career in the U.S. armed forces and then transitioned into commercial roles. A security engineer by training, he's well-versed in tool deployment and administration.
Ellen bring a decade of GRC expertise to the TalPoint community. She's knowledgeable on a variety of frameworks and employs a methodical approach to compliance. She's available for needs assessments, gap assessments, internal audits, and for certain frameworks running independent 3rd party audits.
Zachary bring a 20+ year career in risk management to the TalPoint community. He's worked across healthcare, finance, and supply chain manufacturing. His broad experience offers both a holistic view of risk as well as a common sense approach to risk management.