Resources / Blog
Insights on cybersecurity, managed IT, and modern business technology.
Practical guidance from the MYDWARE team — protecting and modernising businesses across the Greater Toronto Area and Simcoe County.
-
CybersecurityBitwarden’s Iframe Flaw Explained
The purpose of password managers is to safeguard our login credentials and online accounts. However, a popular password manager recently made headlines for its major security flaw. Bitwarden is under scrutiny because its autofill feature gives hackers easy access to sensitive information. The company has known about the vulnerability for years but left the issue unaddressed.
March 30, 2023 2 min -
CybersecurityThe Best Defense Against Ransomware
Ransomware is a type of malicious software that encrypts files on a device or network, making them unusable until the victim pays the attacker a ransom. What started as a simple virus spread through floppy discs in the late 1980s has now evolved into a billion-dollar cybercrime industry.
March 28, 2023 4 min -
CybersecurityMicrosoft Patch Tuesday
Microsoft released on March 14, 2023, a security update that fixes at least 74 bugs in Windows and other software. Hackers are already attacking two flaws, including a very serious one in Microsoft Outlook.
March 28, 2023 3 min -
CybersecurityAT&T Data Breach – 9 Million Affected
In a recent statement, telecommunications giant AT&T confirmed that a hack on a vendor it was working with exposed around 9 million accounts. AT&T said that the sensitive information was mainly about device upgrade eligibility.
March 27, 2023 3 min -
CybersecurityHiatus Malware Targets Business Routers
There is a new malware campaign targeting business-grade routers. It is called Hiatus, a complex operation that deploys the HiatusRAT malware. It is a kind of Remote Access Trojan (RAT) that cybercriminals use to gain remote control over a target system.
March 25, 2023 2 min -
CybersecurityCerebral Data Breach – 3.18 Million Affected
Cerebral, an online platform that offers mental health care services, recently suffered a data breach that may have affected up to 3.18 million users. According to its report, the breach was due to the company’s use of third-party pixel trackers.
March 24, 2023 2 min -
CybersecurityReduce the Risk of Business Email Compromise Attacks
Email threats have been around since the early 90s. But phishing techniques are much more sophisticated now than they were back then. One of the most successful and lucrative tactics is business email compromise (BEC). BEC scams have stolen over $43 billion from businesses worldwide between July 2019 and December 2021. Threat actors are making more money from it than ransomware.
March 23, 2023 3 min -
CybersecurityBot Malware is a Growing Security Threat
The internet has recently been buzzing with talk of AI chatbots changing the world.
March 23, 2023 1 min -
CybersecurityHatch Bank Falls Victim to Data Breach
Hatch Bank confirmed a data breach that compromised its customers' personal data. The financial technology firm said hackers found a vulnerability in its internal file-transfer software. This allowed the hackers to access and steal around 140,000 customer names and social security numbers from Jan. 30-31, 2023.
March 21, 2023 2 min -
CybersecurityChick-fil-A Confirms Credential Stuffing Attack
Credential stuffing is one of the many forms of cyberattacks on the rise. It's a low-risk, low-cost automated method. It uses bots to access username-password combinations from past data breaches. It then uses that information to exfiltrate data from a new target system. It relies on people's habit of reusing the same login credential across various sites.
March 20, 2023 2 min -
CybersecurityUS Government: Royal Ransomware Targets Critical Infrastructure
The United States government is alerting organizations about the Royal ransomware operation. The Federal Bureau of Investigation (FBI) and the Cybersecurity & Infrastructure Security Agency (CISA) said in a joint advisory that the Royal ransomware gang poses an increasing threat to critical infrastructure of numerous sectors in the U.S.
March 18, 2023 3 min -
CybersecurityWhy You Should Use Multifactor Authentication?
If you log into any of your devices or apps with just a username and password, you're only using one piece of ID - or 'authentication factor'.
March 17, 2023 1 min -
CybersecurityHow to Protect Your Organization From Callback Phishing
Callback phishing scams are one of the worst cyberattacks you can encounter. It is devastating to experience on a personal level. But it is even more disastrous if it happens to your organization. To help you, here is a guide covering how callback phishing works and the steps you should take to address it.
March 17, 2023 3 min -
CybersecurityPassword Mask Attacks
Having a password for online accounts is not enough protection. Hackers and cybercriminals have found a way to crack passwords and hijack emails, bank accounts, social media pages, and other digital real estate. Through password mass attacks, cyber threat actors no longer have to spend a long time trying to guess your online credentials.
March 16, 2023 3 min -
CybersecurityTypes Of Hackers To Watch Out For And What You Can Do To Protect Your Biz
Your data is pivotal to running a successful company. If you don’t have proper security measures in place, hackers can easily steal your data and take you out of business.
March 14, 2023 6 min -
CybersecurityDon’t Forget Your Phone When You Think About Cyber Security
Our phones contain a wealth of personal information.
March 14, 2023 1 min -
CybersecurityNews Corp Cyberattack
News Corporation (News Corp) has disclosed more information about the 2022 cyberattack against the major publishing conglomerate. News Corp revealed that the cybercriminals had access to its systems two years ago, starting in Feb. 2020.
March 14, 2023 2 min -
CybersecurityDish Network Cyberattack
Dish Network confirmed that the network outage it is currently experiencing is due to a cybersecurity breach. This outage also affected its internal communications systems.
March 13, 2023 2 min -
CybersecurityRansomware Attack on Dole
Ransomware is a threat businesses cannot afford to ignore. Such a cyberattack often blocks user access to systems until the perpetrator receives ransom. A recent cautionary tale is a ransomware attack on Dole Food Company.
March 11, 2023 2 min -
CybersecurityMicrosoft Exchange Server Antivirus Exclusions
The Microsoft Exchange Server is an e-mail server developed exclusively for Windows OS users. It also offers collaboration functions like scheduling and calendaring.
March 10, 2023 2 min