--- title: Business Information Security News of the Week, October 23, 2020 description: Check out the latest news on Cybersecurity and Risk Management image: https://blog.omnistruct.com/hubfs/10092020%20-%20resized-1.png --- ![Omnistruct Logo1200px](https://blog.omnistruct.com/hs-fs/hubfs/Omnistruct%20Logo1200px.png?width=300&height=64&name=Omnistruct%20Logo1200px.png) - [Omnistruct Home](https://omnistruct.com/) - [Omnistruct Home](https://omnistruct.com/) Search for: [Home](https://omnistruct.com) / Business Information Security News of the Week, October 23, 2020 # Business Information Security News of the Week, October 23, 2020 Posted by [Omnistruct Marketing](https://blog.omnistruct.com/author/omnistruct-marketing) on Oct 23, 2020 10:00:55 AM - [Tweet](https://twitter.com/share) ![](https://blog.omnistruct.com/hs-fs/hubfs/Google%20Drive%20Integration/Business%20Information%20Security%20News%20of%20the%20Week%2c%20October%209%2c%202020-2.png?width=781&name=Business%20Information%20Security%20News%20of%20the%20Week%2c%20October%209%2c%202020-2.png)   **Top Stories for this Week**   ## [VMware Releases Global Incident Response Threat Report Detailing Surge In Sophisticated Cyberattacks As ECrime Groups Grow More Powerful](https://aithority.com/security/vmware-releases-global-incident-response-threat-report-detailing-surge-in-sophisticated-cyberattacks-as-ecrime-groups-grow-more-powerful/?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8fsDeaDJXWhOIF7z7KPYs4pJcQE6jS2bSHDiAa8qxCzqgLEJsbp867yYzGBk85k-1aCHdN) New Research Uncovers Cybercrime Capitalizing on the Convergence of COVID-19 and 2020 Election   --- # **New Known Breaches in the Past Week** ## [Dickey’s BBQ data breach compromises millions of credit card records](https://www.consumeraffairs.com/news/dickeys-bbq-data-breach-compromises-millions-of-credit-card-records-101620.html?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8fsDeaDJXWhOIF7z7KPYs4pJcQE6jS2bSHDiAa8qxCzqgLEJsbp867yYzGBk85k-1aCHdN) More than 100 Dickey’s Barbeque Restaurants across the U.S. were involved in a data breach that spanned more than a year. KrebsOnSecurity reported that one of the dark web’s most popular stores for selling stolen credit card information was offering card numbers belonging to customers of Dickey’s Barbeque Restaurants. By Sarah D. Young | October 16, 2020   ## [Data breaches hit thousands of K-12 students, federal watchdog reports](https://www.msn.com/en-us/news/us/data-breaches-hit-thousands-of-k-12-students-federal-watchdog-reports/ar-BB1a4vzh?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8fsDeaDJXWhOIF7z7KPYs4pJcQE6jS2bSHDiAa8qxCzqgLEJsbp867yYzGBk85k-1aCHdN) Thousands of K-12 students were affected by 99 reported data breaches in the United States over the last four years, according to a Government Accountability Office analysis published this week. By Nicole Gaudiano | October 16, 2020   ## [U-M says health of 1,000 patients may have been exposed in data breach](https://www.radio.com/wwjnewsradio/news/local/u-m-says-1-000-patients-may-have-been-exposed-in-data-breach?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8fsDeaDJXWhOIF7z7KPYs4pJcQE6jS2bSHDiAa8qxCzqgLEJsbp867yYzGBk85k-1aCHdN) Michigan Medicine says it is notifying 1,062 patients about an email that may have exposed their email addresses and health information to others. By WWJ NEWSRADIO 950 | October 17, 2020   ## [Broadvoice Leak Exposes 350M Records, Personal Voicemail Transcripts](https://threatpost.com/broadvoice-leaks-350m-records-voicemail-transcripts/160158/?web_view=true&utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8fsDeaDJXWhOIF7z7KPYs4pJcQE6jS2bSHDiAa8qxCzqgLEJsbp867yYzGBk85k-1aCHdN) Broadvoice, a well-known VoIP provider that serves small- and medium-sized businesses, has leaked more than 350 million customer records related to the company’s “b-hive” cloud-based communications suite. By Tara Seals | October 15, 2020   ## [Barnes & Noble confirms cyberattack, suspected customer data breach](https://www.zdnet.com/article/barnes-noble-confirms-cyberattack-customer-data-breach/?&web_view=true&utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8fsDeaDJXWhOIF7z7KPYs4pJcQE6jS2bSHDiAa8qxCzqgLEJsbp867yYzGBk85k-1aCHdN) Barnes & Noble has confirmed a cyberattack impacting Nook services and potentially exposing customer data. By Charlie Osborne | October 15, 2020   --- # **General Cybersecurity News**   ## [The Importance of Teaching Kids About Cybersecurity and Privacy](https://smallbiztrends.com/2020/10/teaching-kids-about-cybersecurity.html?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8fsDeaDJXWhOIF7z7KPYs4pJcQE6jS2bSHDiAa8qxCzqgLEJsbp867yYzGBk85k-1aCHdN) Educational institutions have switched to online learning as well to combat the ongoing pandemic. With an unprecedented amount of reliance on smart devices and online applications from people of all ages, basic cyber awareness is now more important than ever. By Zoho | Oct 15, 2020   ## [Most cybersecurity pros believe automation will make their jobs easier](https://www.helpnetsecurity.com/2020/10/19/cybersecurity-automation-jobs/?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8fsDeaDJXWhOIF7z7KPYs4pJcQE6jS2bSHDiAa8qxCzqgLEJsbp867yYzGBk85k-1aCHdN) Despite 88% of cybersecurity professionals believing automation will make their jobs easier, younger staffers are more concerned that the technology will replace their roles than their veteran counterparts. By Help Net Security | October 19, 2020   ## [Cybersecurity Awareness Month: Advice from five experts](https://www.itworldcanada.com/article/cybersecurity-awareness-month-advice-from-five-experts/437122?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8fsDeaDJXWhOIF7z7KPYs4pJcQE6jS2bSHDiAa8qxCzqgLEJsbp867yYzGBk85k-1aCHdN) Halfway through Cybersecurity Awareness Month, private and public sector organizations worldwide are thumbing through suggestions from experts for the annual observation, trying either to get some energy into tired training or getting ideas for their first efforts. By Howard Solomon | October 16, 2020   ## [3 cybersecurity best practices to reduce risk online](https://www.idahostatejournal.com/community/3-cybersecurity-best-practices-to-reduce-risk-online/article_c8e90edb-2efd-56fa-8171-05110266ed5d.html?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8fsDeaDJXWhOIF7z7KPYs4pJcQE6jS2bSHDiAa8qxCzqgLEJsbp867yYzGBk85k-1aCHdN) There are three important factors to be vigilant in protecting yourself in cyberspace, which is: the use of a password manager and multifactor authentication, identifying phishing attacks and changing default passwords. These three actions can help reduce and mitigate risk in cyberspace. By Justin Arias | October 21, 2020   ## [Research reveals automation key to future of cybersecurity but younger generations fear jobs being replaced by tech](https://www.pcr-online.biz/2020/10/19/research-reveals-automation-key-to-future-of-cybersecurity-but-younger-generations-fear-jobs-being-replaced-by-tech/?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8fsDeaDJXWhOIF7z7KPYs4pJcQE6jS2bSHDiAa8qxCzqgLEJsbp867yYzGBk85k-1aCHdN) Despite 88% of cybersecurity professionals believing automation will make their jobs easier, younger staffers are more concerned that the technology will replace their roles than their veteran counterparts, according to new research by Exabeam. By PCR Online.biz | October 19, 2020   ## [CISA Lays Out Plan for Enhancing Cybersecurity](https://fedtechmagazine.com/article/2020/10/cisa-lays-out-plan-enhancing-cybersecurity?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8fsDeaDJXWhOIF7z7KPYs4pJcQE6jS2bSHDiAa8qxCzqgLEJsbp867yYzGBk85k-1aCHdN) The Cybersecurity and Infrastructure Security Agency is focusing on improving data sharing and dashboards in the next fiscal year. By Phil Goldstein | October 20, 2020   --- ## **Small Business Cybersecurity Concerns**   ## [Protect Your Files: 3 Simple Tips for Small BusinessesProtect Your Files: 3 Simple Tips for Small Businesses](https://smallbiztrends.com/2020/10/protect-your-files-3-tips-small-businesses.html?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8fsDeaDJXWhOIF7z7KPYs4pJcQE6jS2bSHDiAa8qxCzqgLEJsbp867yYzGBk85k-1aCHdN) File protection has become a top priority for small companies. While most newsworthy stories centre on data breaches at big companies like Adobe, eBay, and LinkedIn, smaller organizations are definitely not immune to the activities of cyber criminals. By Itai Elizur | Oct 15, 2020   ## [Cybercriminals can put you out of business in a heartbeat](https://themonroesun.com/cybercriminals-can-put-you-out-of-business-in-a-heartbeat/?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8fsDeaDJXWhOIF7z7KPYs4pJcQE6jS2bSHDiAa8qxCzqgLEJsbp867yYzGBk85k-1aCHdN) It is estimated that cybercrime damages will cost $6 trillion globally by 2021 and ransomware damage costs are predicted to be 57 times higher in 2021, reaching $20 billion compared to 2015, according to Nadicent. By Bill Bittar | October 19, 2020   --- ## **Cyber Insurance News**   ## [US cyber insurance market at exciting crossroad](https://www.insurancebusinessmag.com/us/news/cyber/us-cyber-insurance-market-at-exciting-crossroad-236496.aspx?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8fsDeaDJXWhOIF7z7KPYs4pJcQE6jS2bSHDiAa8qxCzqgLEJsbp867yYzGBk85k-1aCHdN) In this evolving environment, which has been complicated by the COVID-19 pandemic, the US cyber insurance marketplace is still enjoying significant growth. By Bethan Moorcraft | October 16, 2020   ## [U.S. Treasury Warns Cyber Liability Insurers Against Paying Ransomware Demands](https://www.insurancejournal.com/magazines/mag-features/2020/10/19/586866.htm?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8fsDeaDJXWhOIF7z7KPYs4pJcQE6jS2bSHDiAa8qxCzqgLEJsbp867yYzGBk85k-1aCHdN) The U.S. Treasury Department is warning that individuals or businesses that help facilitate ransomware payments may be violating anti-money laundering and sanctions regulations. By Andrew G. Simpson | October 19, 2020   ## [Watch Out For These Scary Insurance Scams](https://www.forbes.com/advisor/homeowners-insurance/scary-scams/?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8fsDeaDJXWhOIF7z7KPYs4pJcQE6jS2bSHDiAa8qxCzqgLEJsbp867yYzGBk85k-1aCHdN) This Halloween, you’re likely to encounter vampires, zombies and ghouls. But don’t worry about them—they just want a candy bar. What you really need to be on the lookout for are hackers, scammers, bandit tow truck drivers and other fraudsters looking to separate you from your hard earned money. By Jason Metz | October 20, 2020   ## [Survey Finds 78% of Risk Managers Now Buying Cyber Insurance](https://securityboulevard.com/2020/10/types-of-cyber-attacks-a-closer-look-at-common-threats/?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--bZS74_WZe1IDlpd0Z6DuKMLZcZmRMDuUWzB2uaX6wFusI-z5BS8N513GN3u_X92ecTCaX)  The tenth year of the Zurich North America and Advisen Cyber Survey reveals that 78% of risk managers now purchase some level of cyber insurance — compared to only 34% in 2011. By Insurance Journal | October 20, 2020   --- ## **MSP News**   ## [Managed it service providers market increased international trade opening new opportunities 2021](https://eurowire.co/coronavirus/259124/managed-it-service-providers-market-increased-international-trade-opening-new-opportunities-2021/?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8fsDeaDJXWhOIF7z7KPYs4pJcQE6jS2bSHDiAa8qxCzqgLEJsbp867yYzGBk85k-1aCHdN) The global market for managed IT services reached $149.1 billion in 2016. This market is estimated to reach $256.5 billion in 2021 from $166.7 billion in 2017 at a compound annual growth rate (CAGR) of 11.5% for 2017-2021. By Euro Wire | October 19, 2020   --- ## **CVE Announcements This Week**   ## [Microsoft issues two emergency Windows patches](https://www.welivesecurity.com/2020/10/19/microsoft-issues-two-emergency-windows-patches/?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8fsDeaDJXWhOIF7z7KPYs4pJcQE6jS2bSHDiAa8qxCzqgLEJsbp867yYzGBk85k-1aCHdN) Microsoft has rushed out fixes for two security vulnerabilities affecting Microsoft Windows Codecs Library and Visual Studio Code. The security flaws are classified as Remote Code Execution (RCE) vulnerabilities and if successfully exploited could allow threat actors to take over an affected system entirely. By Amer Owaida | October 19, 2020 ## [Government Spooks Urge Firms to Patch SharePoint Bug](https://www.infosecurity-magazine.com/news/government-spooks-urge-firms-patch/?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8fsDeaDJXWhOIF7z7KPYs4pJcQE6jS2bSHDiAa8qxCzqgLEJsbp867yYzGBk85k-1aCHdN) Government experts are warning SharePoint customers to urgently patch a remote code execution (RCE) vulnerability fixed by Microsoft last week. By Phil Muncaster | October 19, 2020   ## [GravityRAT malware also targets Android and macOS](https://securityaffairs.co/wordpress/109744/malware/gravityrat-malware-android-macos.html?web_view=true&utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8fsDeaDJXWhOIF7z7KPYs4pJcQE6jS2bSHDiAa8qxCzqgLEJsbp867yYzGBk85k-1aCHdN) Researchers from Kaspersky Lab have spotted new variants of the GravityRAT malware that now can be also used to infect Android and macOS devices. By Pierluigi Paganini | October 19, 2020   ## [NSA publishes list of top vulnerabilities currently targeted by Chinese hackers](https://www.zdnet.com/article/nsa-publishes-list-of-top-25-vulnerabilities-currently-targeted-by-chinese-hackers/?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8fsDeaDJXWhOIF7z7KPYs4pJcQE6jS2bSHDiAa8qxCzqgLEJsbp867yYzGBk85k-1aCHdN) The US National Security Agency has published today an in-depth report detailing the top 25 vulnerabilities that are currently being consistently scanned, targeted, and exploited by Chinese state-sponsored hacking groups. By Catalin Cimpanu | October 20, 2020   ---   ## **New Critical Patches for October 2020** So far in 2020, 11 zero-day attacks have been seen in the wild and the vendors have released patches for them. Those CVEs are: - - Firefox (CVE-2019-17026) - Internet Explorer (CVE-2020-0674) - Chrome (CVE-2020-6418) - Trend Micro OfficeScan (CVE-2020-8467 & CVE-2020-8468) - Firefox (CVE-2020-6819 & CVE-2020-6820) - Google Tag (CVE-2020-0983, CVE-2020-1020 & CVE-2020-1027) - Sophos XG Firewall (CVE-2020-12271)   --- # **Regulations, Frameworks, and Controls**   ## [Critical National Infrastructure Cyber Security Market Bigger Than Expected](https://reportedtimes.com/critical-national-infrastructure-cyber-security-market-bigger-than-expected-accenture-cisco-fireeye-honeywell-huawei/?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8fsDeaDJXWhOIF7z7KPYs4pJcQE6jS2bSHDiAa8qxCzqgLEJsbp867yYzGBk85k-1aCHdN) The ‘Critical National Infrastructure Cyber Security market’ research report added by Report Ocean, is an in-depth analysis of the latest developments, market size, status, upcoming technologies, industry drivers, challenges, regulatory policies, with key company profiles and strategies of players. By iCrowd Newswire | Oct 21, 2020   [![Would you like to learn more?](https://no-cache.hubspot.com/cta/default/5223782/03c006cc-7176-47cd-8bdc-5834c22e7c11.png)](https://cta-redirect.hubspot.com/cta/redirect/5223782/03c006cc-7176-47cd-8bdc-5834c22e7c11)   | Sincerely, **Omnistruct Marketing** 866-683-8827 [www.omnistruct.com](https://omnistruct.com/?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--bZS74_WZe1IDlpd0Z6DuKMLZcZmRMDuUWzB2uaX6wFusI-z5BS8N513GN3u_X92ecTCaX) --- Omnistruct, 2740 Fulton Avenue #101-02, Sacramento, CA 95821, USA, (866) 683-8827 [Unsubscribe                  ](https://email.omnistruct.com/business-information-security-news-october-9-2020#)[Manage preferences](https://email.omnistruct.com/business-information-security-news-october-9-2020#) | | --- | Topics: [Omnistruct Newsletter](https://blog.omnistruct.com/tag/omnistruct-newsletter) ### Recent Posts - [Cyber Security Programs](https://omnistruct.com/) - [Why NIST CSF?](https://omnistruct.com/why-nist-csf/) - [Pricing By Outcome](https://omnistruct.com/by-outcome/) - [Pricing By Service](https://omnistruct.com/by-service/) - [About](https://omnistruct.com/company/) - [Contact](https://omnistruct.com/contact/) - [Blog](https://omnistruct.com/blog/) - [Partners](https://omnistruct.com/partners/) - [News](https://omnistruct.com/news/) ![Omnistruct](https://blog.omnistruct.com/hubfs/Omnistruct_July2019%20/Images/Omnistruct1%20(1).png) #### Get Social Omnistruct Inc® - Copyright 2019 - Terms of Use - Privacy Policy