The Unigym Gatineau gymnastics center in Gatineau, Quebec, has reported a data breach that occurred on October 6th, compromising the personal information of its 21,000 members. The exposed data includes names, contact details, and social insurance numbers. Members were notified via email on the following Wednesday. The breach was discovered during a routine security check, revealing unauthorized access to the center's database. Unigym Gatineau has since taken measures to secure their systems and is collaborating with cybersecurity experts to investigate the incident further. This breach underscores the critical need for robust cybersecurity measures, particularly for organizations handling sensitive personal data. Key technical implications include the necessity for data encryption, strict access controls, regular security audits, and comprehensive incident response planning. The incident also highlights the importance of third-party risk management, as breaches often occur through vulnerabilities in third-party systems. Cybersecurity professionals should view this incident as a reminder of the ongoing threat of data breaches and the need for continuous vigilance. Actionable intelligence from this breach includes the importance of regular security assessments, employee training on cybersecurity best practices, and the development of effective incident response plans. The breach at Unigym Gatineau serves as a case study for the critical need for proactive security measures and continuous monitoring to protect sensitive data.

More than 90 state and local governments have been targeted using the recently revealed vulnerability in Microsoft server software, according to a U.S. group devoted to helping local authorities collaborate against hacking threats.

Sophisticated group also used novel means to disguise their custom malware.

An international law enforcement operation conducted this week targeted the members of and infrastructure used by NoName057(16), a pro-Russian hacktivist group that has conducted distributed denial-of...

Experts say the sensitive data law firms hold and their lagging attention to cybersecurity make them prime targets.

Senate Bill 6 pairs mandatory curtailment with a voluntary demand response procurement program.

TeleMessage, a company that makes a modified version of Signal that archives messages for government agencies, was hacked.

The firm previously said there was 'no evidence that customer data was compromised'.

In a secret meeting between Chinese and US officials, the former confirmed conducting cyberattacks on US infrastructure.

Cybersecurity professionals and the infosec community have essential roles to play in protecting our democracy, securing our elections, and building, testing, and safeguarding government infrastructur...