For this project we were tasked with finding and sharing examples of Information Security attacks as reported by the media. Additionally we had to evaluate our sources and complete the CCBC faculty wide security training.
This project taught me the value of evaluating ones sources. Though a source may seem as if its purpose is to inform, many sites have an ulterior motive of getting the user to click on a certain pop up or ad, so its important for you as the user to figure out if the site that your on was designed to give you the facts or not.
This article shares a hacking incident where the company SolarWinds experienced a massive network breach that ended in the leakage of valuable client data. SolarWinds is a major software company that provides system management tools for network infrastructure monitoring, and other technical services to hundreds of thousands of organization around the world, and they do this through a IT performance monitoring system called Orion. In this instance Russian hackers used what's called a supply chain attack and inserted malicious code into the Orion system, which granted them access to the data of more than 30,000 public and and private organizations that use the Orien system to manage their IT resources. Supply chain attacks can be avoided or minimized by maintaining a highly secured build and update infrastructure, and by developing an incident response process in the case of a supply chain attack.
Who published the content? Saheed Oladimeji, Sean Michael Kerner.
Where was it published? Tech Target.
When was it published? June 29th, 2022.
The truthfulness and integrity of the facts: Considered Accurate, creates a timeline for the hack, considers multiple aspects of the attack, minimal grammar/spelling mistakes.
How is it written and presented? Very little to no ads, article is meant to inform.
Links and Citations: Embedded links that lead to additional pages that go more in depth on the specific clients affected and what exactly a supply chain attack is
This article shares the story of how Howard University suffered a ransomware attack. A ransomware attack is a type of cyberattack in which hackers gain unauthorized access to one's sensitive personal information, and make threats to either publish or permanently block access to the information unless a ransom is paid. While many details of this story are left unclear, the hack had a major impact on both the students and staff of Howard University, and even caused the cancellation of classes for several consecutive days. Ransomware attacks are often hard to prevent, but you can help by keeping your security software updated, not clicking on suspicious links, and not downloading untrusted programs or attachments.
Who published the content? Lauren Lumpkin, Paul Schwartzman.
Where was it published? The Washington Post.
When was it published? September 7th, 2021.
The truthfulness and integrity of the facts: Considered accurate, fact checked by other reports from The Washington Post, minimal grammar/spelling errors.
How is it written and presented? Several pop up ads, the article is meant to inform but feels very crowded.
Links and Citations: Embedded links that lead to related articles and stories surrounding hot topics.
The first step in completing this project was to complete the CCBC faculty wide Cybersecurity Training.