In today’s HEAL Security Dispatch Daily Digest, we highlight a major data breach at the Internet Archive, compromising the information of around 31 million users. Unauthorized individuals accessed sensitive details, including email addresses and encrypted passwords. The Internet Archive is advising all users to change their passwords immediately while investigations into further vulnerabilities continue. Additionally, Mozilla has released an emergency update for Firefox to patch a critical zero-day vulnerability that could allow hackers to execute arbitrary code on users' machines. Meanwhile, Marriott International and Starwood Hotels have reached a $52 million settlement over data breaches affecting millions of customers, with commitments to enhance their cybersecurity measures.
Shifting focus to the healthcare sector, a recent report reveals over 14,000 unsecured medical devices and databases exposed online, with nearly half located in the United States. This vulnerability stems from the decentralized nature of the U.S. healthcare system, highlighting the urgent need for stronger security practices, particularly in smaller organizations. Fidelity Investments has disclosed a breach impacting over 77,000 individuals due to an exploited system vulnerability, prompting the company to enhance its security measures. In a proactive response, the Cybersecurity and Infrastructure Security Agency (CISA) has issued new advisories to address vulnerabilities in industrial control systems and identified critical risks in Ivanti and Fortinet products, urging organizations to implement updates swiftly to protect against potential threats.
https://healsecurity.com