Sign In

Nikhil Singhvi Jain S 🇮🇳 🫂 🇵🇰 (Doctoral Student, CISM, CISA, CCSFP, ISMS LA)

Associate Director @ Finstein | Cybersecurity Risk Management

Nikhil Singhvi Jain S is a doctoral student and cybersecurity professional based in Chennai, Tamil Nadu, India.1 He holds several certifications, including CISM (Certified Information Security Manager), CISA (Certified Information Systems Auditor), CCSFP-CHQP (Certified HITRUST CSF Practitioner - HITRUST Quality Professional), and ISMS LA (Information Security Management System Lead Auditor).123 Nikhil is currently pursuing his doctoral studies while also working as an Associate Director at Finstein University of Madras.1 He is active on LinkedIn, where he shares insights on cybersecurity, data protection, and information security.34 Nikhil has a significant following on the platform, with 31,000 followers.1

Highlights

Jun 10 · linkedin

The recent Snowflake data breach has raised significant concerns about data security and accountability. Here are the key takeaways and an analysis of responsibility:

🔹Key Takeaways:

🔺Extent of the Breach: The breach impacted several major companies, including Ticketmaster and Santander. Sensitive data, such as customer information, account details, and HR records, were compromised and put up for sale on dark web forums

🔺Method of Attack: The breach was facilitated through stolen credentials from a Snowflake employee's ServiceNow account, compromised by the Lumma Stealer malware. This allowed the attackers to generate session tokens and access vast amounts of customer data

🔺Snowflake's Response: Snowflake has denied that the breach was due to any vulnerability or misconfiguration in their platform. Instead, they attributed the breach to compromised customer credentials used to access their accounts, highlighting a broader industry issue of identity-based attacks

🔺Industry Impact: The breach has prompted a widespread review of security practices among Snowflake's clients. Recommendations include enforcing multi-factor authentication (MFA), setting up strict network policies, and rotating credentials regularly to mitigate similar attacks in the future

🔹Responsibility:

The responsibility for the breach appears to be shared between Snowflake and its customers:

🔸Customer Responsibility: Customers are partly responsible due to inadequate security measures, such as the lack of MFA on their accounts. This made it easier for attackers to use stolen credentials to access sensitive data

🔸Snowflake's Role: While Snowflake maintains that the breach was not due to a flaw in their system, the fact that attackers could exploit an employee's account highlights the need for stronger internal security measures and better customer guidance on securing their accounts

Overall, the incident underscores the critical need for robust security practices, including MFA and regular security audits, to protect against increasingly sophisticated cyber threats.

Who is at fault for the breach: the customers or Snowflake? Let's discuss in the comments below. 👇

Read more: https://lnkd.in/dHeV53qf

#DataBreach #CyberSecurity #CloudStorage #Snowflake #TechNews #MFA #InfoSec #CyberAwareness #PublicSafety #FutureOfTech #CyberSecurity #DataProtection #RiskManagement #CyberAwareness #StaySecure #CybersecuritySolutions #SecureYourBusiness #PhishingAwareness #BeCyberSmart #DataSecurity #PrivacyProtection #DigitalSecurity #security #privacy #infosecurity #privacyprotection #cyberrisks #cybercriminals #datasecurity #informationsecurity #datacompliance #dataprivacy #infosec #informationassurance #securityandrisk #informationtechnology #finstein

May 31 · linkedin

🚨 Cyberattack on U.S. Telecom Sector Highlights AI Risks and Vulnerabilities

🔹In recent months, security analysts with Lumen Technologies' (LUMN.N) Black Lotus Labs uncovered a significant cyberattack that took more than 600,000 internet routers offline across numerous Midwest states. This October incident, previously undisclosed, is considered one of the most serious cyberattacks against America’s telecommunications sector.

🔹Key Points:

  • Attack Discovery: Black Lotus Labs discovered the attack and reported on it in a recent blog post.

  • Impact: Internet access was disrupted from Oct. 25 to 27, affecting many Midwest states. The malware responsible continued circulating on the internet months later via specific file links left by the hackers.

🔹Details of the Attack:

🔺Malicious software was installed, causing a firmware update that deleted essential operational code in the routers, rendering them inoperable.

🔺The exact delivery method of the firmware update remains unclear.

🔺Lumen assessed with high confidence that this was a deliberate act intended to cause an outage.

🔹Community Impact:

🔺The incident significantly affected rural and underserved communities, potentially cutting off access to emergency services, farming concerns may have lost critical information from remote monitoring of crops during the harvest, and health care providers cut off from telehealth or patients’ records

🔹Investigation

🔺The report did not identify the attacked company or attribute the hack to any specific country or group, noting the hackers used common methods that complicate identification.

🔺It is unclear if the FBI, which investigates U.S. cybercrimes, was notified, as private companies often choose not to disclose such incidents.

What’s your thoughts 💭 let me know in the comments below 👇

#CyberSecurity #AI #Telecom #CyberAttack #DataProtection #SecureInternet #TechNews #LumenTechnologies #BlackLotusLabs #MidwestOutage #InternetSecurity #TelecomSector #ISP #FirmwareAttack #RuralImpact #EmergencyServices #HealthTech #FarmingTech #RedditReports #CyberRisk #SecureTransactions #FintechSecurity #CyberCompliance #DigitalSecurity #BankingSecurity #FinancialSecurity

🚨 Cyberattack on U.S. Telecom Sector Highlights AI Risks and Vulnerabilities

🔹In recent months, s

Related Questions

What is Nikhil Singhvi Jain S's research focus at Finstein University of Madras?
How did Nikhil Singhvi Jain S achieve his certifications in CISM, CISA, CCSFP, and ISMS LA?
What are some notable projects Nikhil Singhvi Jain S has worked on?
How can I connect with Nikhil Singhvi Jain S on LinkedIn?
What is the role of an Associate Director at Finstein?
Nikhil Singhvi Jain S 🇮🇳 🫂 🇵🇰  (Doctoral Student, CISM, CISA, CCSFP, ISMS LA)
Nikhil Singhvi Jain S 🇮🇳 🫂 🇵🇰  (Doctoral Student, CISM, CISA, CCSFP, ISMS LA), photo 1
Nikhil Singhvi Jain S 🇮🇳 🫂 🇵🇰  (Doctoral Student, CISM, CISA, CCSFP, ISMS LA), photo 2
Add to my network

Location

Mumbai, Maharashtra, India