(This is our CINS Army Brief for May 2021. Learn more and subscribe here.)

Spring 2020 saw many essential items in short supply. This year those items are abundant, and it’s a very, very different variety of products that are limited … Everything from boat manufacturers to Grape-Nuts (really?!!) are having trouble meeting production demands.

Before you set sail – or while you’re waiting in anticipation of those Grape-Nuts (again, why?!) – batten down the hatches on your security to prevent being caught between the devil and the deep blue sea, because security is always in high demand.

• The Gig Economy Creates Novel Data-Security Risks
  https://threatpost.com/the-gig-economy-data-security-risks/166359/
• Fraudsters employ Amazon ‘vishing’ attacks in fake order scams
  https://www.zdnet.com/article/fraudsters-employ-amazon-vishing-attacks-in-fake-order-scams/
• SolarWinds CEO: Attack Began Much Earlier Than Previously Thought
  https://www.darkreading.com/attacks-breaches/solarwinds-ceo-attack-began-much-earlier-than-previously-thought/d/d-id/1341072
• Businesses suffering repeated breaches due to app security flaws
  https://www.itproportal.com/news/businesses-are-being-repeatedly-breached-due-to-app-security-flaws/
• How penetration testing can promote a false sense of security
  https://www.techrepublic.com/article/how-penetration-testing-can-promote-a-false-sense-of-security/
• 56% of security professionals say today’s cyber workforce lacks soft skills
  https://www.scmagazine.com/home/2021-rsa-conference/56-of-security-managers-say-todays-cyber-workforce-lacks-soft-skills/
• Phishing, ransomware, web app attacks dominate data breaches in 2021, says Verizon Business DBIR
  https://www.zdnet.com/article/phishing-ransomware-web-app-attacks-dominate-data-breaches-in-2021-says-verizon-business-dbir/
• Despite Heightened Breach Fears, Incident Response Capabilities Lag
  https://www.darkreading.com/attacks-breaches/despite-heightened-breach-fears-incident-response-capabilities-lag/d/d-id/1341000
• Microsoft: Threat actors target aviation orgs with new malware
  https://www.bleepingcomputer.com/news/security/microsoft-threat-actors-target-aviation-orgs-with-new-malware/
• New ransomware: CISA warns over FiveHands file-encrypting malware variant
  https://www.zdnet.com/article/new-ransomware-cisa-warns-over-fivehands-file-encrypting-malware-variant/
• Your Security Awareness Training Isn’t Working
  https://securityboulevard.com/2021/05/your-security-awareness-training-isnt-working/
• Ryuk ransomware finds foothold in bio research institute through student who wouldn’t pay for software
  https://www.zdnet.com/article/ryuk-ransomware-finds-foothold-in-bio-research-institute-through-a-student-who-wouldnt-pay-for-software/
• Over half of organizations have experienced a third-party data breach
  https://www.techradar.com/news/over-half-of-organizations-have-experienced-a-third-party-data-breach
• Three new malware families found in global finance phishing campaign
  https://www.zdnet.com/article/researchers-find-three-new-malware-families-used-in-global-finance-phishing-campaign/
• Deepfake Attacks Are About to Surge, Experts Warn
  https://threatpost.com/deepfake-attacks-surge-experts-warn/165798/