In this project, I looked for instances in which the media reported cybersecurity information such as cybersecurity risks, threats, and vulnerabilities through electronic devices.
Lessons learned: I learned that cyber-attacks are more often than I thought they were, and they are sometimes able to be prevented but once they get into a computer it is very hard to remove them. I've also learned more ways to prevent myself from being involved in a malware attack such as avoiding suspicious links and attachments more often and keeping my devices software more up to date.
This article states that people's personal data was recently stolen in a British Library cyberattack, it has come to their attention that the data stolen is now for sale online. This attack happened in October 2023, and it was done by a group called Rhysida which is known for such criminal activity, said by the library. The group Rhysida has actually claimed responsibility for the attack and has publicly posted images of the library's HR files. The data that's being sold has a starting bid of 20 bitcoins (about £596,000). This week, the library has suggested that any of its users change their login information, and they are still investigating this system to prevent this issue from happening in the future. Some other security suggestions I have would be users logging in to the computers as a guest user if they don't need to log in to anything, all users using two-factor authentication, and users being cautious of what information they are putting in public computers.
Source Evaluation
Published by: Harriet Sherwood Arts and culture correspondent
Where was it published: theguardian.com
When was it published: Nov 22, 2023 at 07:40 EST
The Truthfulness and integrity of the facts: Seems accurate, from a reliable website, multiple other articles were found speaking on this cyberattack.
How it's written and presented: includes ads, article is made to inform, update, and warn people.
Links and Citations: Library cyber-attack, British Library, Carried out in October, London, threat posed by Rhysida, following our advice.
This article speaks about Toyota's Financial Services Systems that were forced offline through a Cyberattack. This attack was on its European and African financial services department, they said that they recently identified unauthorized activity on systems in a limited number of its locations. Toyota is still recovering from this attack. A ransomware group called Medusa has claimed responsibility for the incident claiming that they have stolen data and is giving Toyota 10 days to pay $8 million dollars. A cyber security expert noted on X that Toyota's internet-accessible systems are vulnerable to the "Cixtrix Bleed" vulnerability that has affected multiple organizations and governments in the last month. I think this should cause Toyota to work harder to create and use less vulnerable systems to prevent this from occurring in the future.
Source Evaluation
Published by: Michael Hill
Where was it published: Cyber Security Hub
When was it published: Nov 11, 2023
The Truthfulness and integrity of the facts: Seems accurate, multiple other articles were found speaking on this cyberattack.
How it's written and presented: includes ads, article is made to inform, and update people.
Links and Citations: Cyber-attack on Toyota, Cixtrix Bleed, claimed responsibility.