Join our subscribers
Sans Institute phishing attack: Hackers exfiltrated 28,000 data records
Wednesday, August 12, 2020
Cyber security training and certifications provider Sans Institute recently suffered a data breach after an employee fell victim to a phishing email that allowed attackers to steal around 28,000 personal data records of the institute's employees.
Commenting on the data security incident suffered by the Sans Institute, Ilia Kolochenko, founder & CEO of ImmuniWeb, told Teiss that like many others, SANS seems to fall victim to unforeseen work from home (WFH) measures that have undermined many security mechanisms and controls readily available in the office.
"The breach of one single email, however, should not lead to such a significant exposure of PII data, even if it’s a drop in the ocean of disclosed data breaches from the last 18 months. Attackers will now gradually focus their attention on cybersecurity companies and organisations to get their clients' privileged information or credentials," he added. Read Full Article
SC Media: Have I Been Pwned code base goes open source as it expands
