Tighten Supplier Data Controls After Multiple Procurement-Facing Breaches

security Hopefully the company secures houses better than it locks down SaaS systems A leading name in home and business physical security, Brinks Home, recently said it identified unauthorized access to a portion of its IT systems, an intrusion ShinyHunters claims it carried out to steal millions of records from the security provider's Salesforce instance

Salesforce has previously warned that an unnamed known threat actor group was actively scanning for public-facing Salesforce instances and abusing misconfigured guest accounts to break in. Brinks Home is no longer part of the larger Brinks brand, with The Brinks Company telling us it sold the home security arm in 2010

” The group threatened this week to leak the data along with causing “several annoying digital problems” if Brinks Home didn’t reach out by Thursday, July 30, to negotiate a ransom payment

Well over a month into a ransomware cleanup job, River Financial Corporation tells regulators that it “took steps to attempt to suppress the affected data, including obtaining representations from the threat actor that it deleted the data in its possession

In its Form 8-K filing with the SEC, River Bank did not explicitly state whether or not it paid any of the criminals’ ransom demands, although ransomware crooks are not commonly known to offer a victim data deletion for free

” Sometimes “affected

Managed devices are another matter, and administrators will need to ensure an updated Teams app is deployed, though we can't imagine why they might hesitate to roll out one of Microsoft's updates. Microsoft has stern words for refuseniks: "Older versions will lose calendar access

Microsoft has stern words for refuseniks: "Older versions will lose calendar access. ""This change helps maintain a reliable calendar experience on iOS and Android devices and ensures compatibility with ongoing Teams service updates

SOFTWARE A nice little summer job for someone Teams mobile users now have even less time to update the app before older versions lose calendar access. Microsoft originally set a late-October deadline in its message, but we're guessing someone familiar with the impending demise of Exchange Web Services (EWS) had a quiet word

CAF Bank held £1

SECURITY A week into shutdown, 14,000 customers still have no restoration date and some are struggling to pay staff A week after suspending online banking, CAF Bank still has no timetable for restoring access to its 14,000 UK charity customers. The bank updated customers on Thursday about the outage, which has disrupted payments to staff and suppliers

SECURITY A week into shutdown, 14,000 customers still have no restoration date and some are struggling to pay staff A week after suspending online banking, CAF Bank still has no timetable for restoring access to its 14,000 UK charity customers

We asked APUC about these claims, whether ransomware was involved, and whether it could identify any inaccuracies in the information we received

cyber-crime APUC investigating after criminals claim historical data theft Advanced Procurement for Universities and Colleges (APUC) says attackers gained unauthorized access to historical data in a cyberattack earlier this month. The Scottish education procurement body said it immediately contained the mid-July intrusion and was investigating claims that some of the data had been stolen

APUC arranges these deals as Framework Agreements – pre-vetted terms under which Scottish universities and colleges can place orders with approved suppliers. The organization lists hundreds of Framework Agreements covering contracts collectively worth hundreds of millions of pounds