Cyberattack compromised sensitive data of current and former students and staff dating back to 2010...

We have now reached MORE than 23,635 subscribers! Thanks for your support. Help us with our mission of helping 100,000 organizations become cyber-resilient by sharing this newsletter with your network.

Be sure to read the "My thoughts" section to learn strategies for navigating and combating cyber attacks. I'm here to assist you in avoiding and battling these threats should they ever affect you.

Contact me if you have any questions regarding your enterprise's cybersecurity strategy --> Luigi Tiano.

P.S. We often do giveaways on our company page -->

?

Cyberattack compromised sensitive data of current and former students and staff dating back to 2010...?

A cyberattack on the Rainbow District School Board in Sudbury compromised sensitive data of current and former students and staff dating back to 2010. Stolen information includes social insurance numbers, bank account details, medical records, and academic data. The breach impacts employees from 2010 onward and students from 2011 onward, including those who received scholarships. The board is offering free credit monitoring to affected individuals and has reported the attack to authorities. This is not the first time educators in the region have faced a cyberattack, raising concerns about ongoing vulnerabilities in school cybersecurity. (cbc.ca)?

?

?My Thoughts:

?

Guys, this is bad. Schools are supposed to be a safe place, and now personal data—SINs, bank accounts, medical records—is just out there? For over a decade? Unacceptable.?

?

Let’s be real: if schools can’t protect sensitive information, they shouldn’t be storing it. Period. And where’s the urgency? Two years of free credit monitoring is nice, but that doesn’t undo the potential damage to those individuals. Cybercriminals don’t normally wait two years to exploit stolen data.?

?

Here’s the deal:?

? School boards need better cybersecurity. Education systems are clearly a weak link, and hackers know it.?

? Governments need to step up. We can’t keep reacting after the fact—cybersecurity should be a top priority, not an afterthought.?

? If you’re affected, act now. Sign up for credit monitoring, change passwords, and watch for suspicious activity. Don’t assume you’re safe.?

?

This isn’t just a warning for Rainbow District—this is a wake-up call for every institution handling personal data. If they don’t get serious about security, this will keep happening.?

?

Cyber Expert, Francois Guay, Releases All the Truths around Cybersecurity. Watch below!?

?WATCH HERE?

Where does Robert De Niro’s new cyber-attack thriller come from??

?

Netflix’s Zero Day, starring Robert De Niro, is a six-episode political thriller about a devastating cyberattack that shuts down all technology in the U.S. for one minute, causing massive casualties. De Niro plays former President George Mullen, who is pulled out of retirement to investigate the attack, uncovering deep conspiracies along the way. The show, filmed primarily in New York City, Washington D.C., and Upstate New York, features a mix of real-world locations and soundstage sets. Reviews are mixed, with some praising it as a gripping techno-thriller while others criticize its pacing and lack of a strong perspective. (timeout.com)?

?

My Thoughts:

?

Alright, let’s break this down.?

?

Zero Day has a killer premise—mass cyberattacks, conspiracy, a former president getting his hands dirty—but does it deliver? Kinda. The critics are all over the place. Some love the tension and say it’s a fun thriller. Others call it slow, cliché, and visually dull. That’s a problem for a show that should feel urgent.?

De Niro leading a political thriller should be a slam dunk, but if the writing is weak and the pacing drags, no A-lister can save it. And let’s be real—if you’re tackling cyber warfare and government corruption, you have to take a stance. Playing it safe makes the whole thing feel pointless.?

Bottom line: If you like high-stakes cyber thrillers, Zero Day might be worth a binge. Just don’t expect it to be the next Manchurian Candidate.?

?

We only partner with industry leaders! We have a variety of options, tailored to your needs and organization size.

?

Have questions about your cybersecurity posture? Let’s chat.?

?

Calendar Link?

Is JPMorgan Chase making the right move?...?

?

JPMorgan Chase is set to block Zelle payments to contacts on social media in response to a significant rise in scams associated with the service. The bank has reported that nearly 50% of scams involving Zelle payments originated on social media platforms. Effective March 23, Chase will decline or delay Zelle transactions if they are identified as coming from social media contacts, emphasizing that Zelle should only be used for payments to friends and family. This decision comes after a lawsuit by the U.S. Consumer Financial Protection Bureau (CFPB), which criticized Zelle’s operators for failing to implement adequate consumer protections, leading to substantial financial losses for users.?

?(bleepingcomputer.com)?

?

My Thoughts:

?

Here’s the deal, folks. Chase blocking Zelle payments to social media contacts is a smart move, but it’s a shame we’ve reached this point. Scammers have been running rampant, and it’s about time banks take some responsibility for the platforms they promote.?

Zelle’s lack of purchase protection is a glaring issue that leaves users vulnerable. With nearly half of all scams linked to social media, it’s clear that these platforms are a breeding ground for fraud. Chase’s decision to limit Zelle’s use to trusted contacts makes sense—better late than never, right??

However, the CFPB’s lawsuit highlights a bigger problem: banks rushed Zelle into the market without proper safeguards. It’s frustrating to see consumers left in the lurch, losing millions without recourse. Banks need to step up, ensure safety for their customers, and stop treating Zelle like just another competitive product. This should be about protecting users, not just getting ahead in the payments game.?

?

US minerals company says crooks broke into email and took $500K?

NioCorp Developments, a NASDAQ-listed minerals company, reported a cyber attack on Valentine’s Day that led to the theft of approximately $500,000 intended for a vendor. The breach appears to be a business email compromise (BEC) scheme, where cybercriminals accessed parts of the company’s email systems to misdirect the funds. NioCorp self-discovered the incident and promptly notified financial institutions and federal law enforcement to attempt recovery of the misdirected payments. The company is currently investigating the incident to assess any further damage. NioCorp is still in the development stage and does not yet generate revenue, making the loss significant for its finances, which already reported a net loss of $11.4 million for the previous financial year. (theregister.com)?

?

My Thoughts:?

?

This situation with NioCorp is a tough pill to swallow. Losing $500,000 due to a cyber attack is a blow that can have serious repercussions, especially for a company still in its development stage. They’re not generating revenue yet, so this theft is not just a financial hit; it jeopardizes their progress and investor confidence.?

?

The fact that this appears to be a classic BEC scheme is frustrating. Companies need to take stronger measures to secure their email systems. It’s not enough to just react after the fact; proactive security measures should be in place to prevent these breaches from happening in the first place.?

?

While NioCorp is attempting to recover the funds and investigate further damages, the reality is that this type of incident can severely impact their operational plans. If they can’t recover that money, it will only add to their already significant net loss, which could hinder their future endeavors in the critical minerals market. They need to get their act together, folks—this is bad for business.?