The Breacher Report - Cybersecurity News - 4/17/20

Welcome to neoRhino IT Solutions' The Breacher Report, where twice a month we provide some of the biggest cybersecurity news and data breaches in snippets for you to keep you informed and aware of what's happening in the world of cybersecurity.

For April 13th-17th, 2020:

  • Marriott Hotels Suffers Second Data Breach in 2 Years: Global Hotel chain Marriott announced this week that more than 5 million of its guests may have been affected by a new data breach. The PII (Protected Health Information) that may have been compromised include names, phone numbers, addresses, loyalty airline information, and personal room preferences. As of today, Marriott assures its potential data breach victims that their credit card details, driver’s license information, and passport information are not at risk. (KHOU-11, Houston)
  • Google Knows if you are Truly Social Distancing? By using trends and aggregated data from anonymous Google users that have their locations on with their devices, Google has been releasing behavioral reports to health officials during our seemingly never-ending Coronavirus pandemic. The reports detail the behavior changes from working from home, adapting to shelter in place mandating, and movement activity at retail stores, parks and recreational areas, transit centers and residential neighborhoods. The reports detail the activity of over 130 countries and regions, including all 50 states in the US, and Google plans to add more soon. (TechCrunch)
  • Coronavirus Stimulus Phishing Scams are Rampant: As with any type of health concern, phishing attacks involving the global pandemic are multiplying rapidly, but more specifically surrounding the COVID-19 Stimulus Act. It is imperative to verify any senders, links or attachments involving you receiving a stimulus check from the government. Here are some stats to be aware of:
    • 32% of surveyed Americans believe they've already been targeted by scams related to COVID-19.
    • 52% of Americans saying they're more worried about being a victim of a COVID-19 fraud scam than normal.
    • 44% stated that they've noticed an increase in phone calls, texts, and emails from unknown sources. (NextCaller)
  • Thousands of Private Zoom Meetings Can Easily Be Found Online: Just when we thought Zoom’s woes were starting to slow down, a new issue appears. An information security expert at CBS interactive discovered a vulnerability within Zoom that can allow someone to search through its stored video library using shared links that contain part of a URL. So, if searching through the link by name or company, the videos could be viewed and downloaded.
  • But that’s not all… That same security expert created a tool called Zoombo, which managed to exploit Zoom’s security measures and could crack passwords on videos that users obviously thought were protected. The tool also discovered that user videos that had been deleted were still residing in their servers. Even though a patch was released after the company was alerted of the vulnerability, things just keep going from bad to worse for Zoom. (CNET Security)

neoRhino’s Remote Managed Services and Security Awareness Team are here so you can focus on your business needs. You can relax knowing that we are here to protect your technology. Call us at (281) 779-4850 for a FREE consultation and we can help your business today.