Security team in an Orange County office reviewing a data protection briefing on a wall screen

PwC Data Breach Claim: Everest Ransomware Group Says It Stole 590 GB of HR and Training Data

Avatar for Ravi JainCyber Security
This Friday news brief examines the PwC data breach claim made by the Everest ransomware group, which says it holds 590 GB of human resources records, training materials, and single sign-on configuration files taken from a Cornerstone OnDemand staging environment. The claim is unverified and PwC has not responded. Written for business owners, operations leaders, and IT decision-makers throughout Orange County and Irvine, the brief explains what was alleged, why the reported record and file counts should not be read as confirmed numbers of affected people, and why a staging hostname changes the likely story. It sets out how to read any leak-site claim without over- or under-reacting, what HR and learning platforms expose to attackers, and a practical seven-step review of HR, learning, and test environments that organisations can complete this month before a listing ever names them. ... Read More
Okta SSO Accounts Under Siege

Okta SSO Accounts Under Siege: New Vishing Attacks Expose Critical Security Gaps

Avatar for Ravi JainCyber Security
Okta SSO accounts are under siege from sophisticated vishing attacks that combine voice calls with real-time phishing technology to bypass multi-factor authentication. Cybercriminals impersonate IT staff, guide victims to fraudulent login pages, and intercept credentials during live phone conversations. A single compromised Okta SSO account grants attackers access to dozens of integrated business platforms like Salesforce, Microsoft 365, and Google Workspace. Organizations in financial services and fintech are being actively targeted, with threat actors quickly exfiltrating data and demanding ransoms. Traditional MFA is no longer sufficient—businesses must adopt phishing-resistant authentication methods like FIDO2 security keys, implement robust employee training, and deploy advanced monitoring to defend against these evolving threats. ... Read More