Welcome reader to your CybersecurityHQ report.

Headlines

Security researcher Jeremiah Fowler recently published his discovery of a data leak containing more than 4 million records from US schools. The leak is connected to unsecured databases of Raptor Technologies, a firm providing software to manage school emergencies, attendance, and visitor monitoring. The 800 gigabytes of files and logs were located on unsecured databases without password protection.

Mostly from 2022 and 2023, the data includes highly sensitive information like emergency planning documents (including for active shooter situations), evacuation plans, threat assessments, medical records, court documents, and personal details of students, staff, and their families. Raptor Technologies secured the data after they were in December. The company says there is no indication of third-party access beyond the researcher and the company.

A surge in cyberattacks is targeting Taiwan’s critical infrastructure in the lead-up to its presidential election on January 13, 2024. Taiwanese Vice President Lai Ching-te, who is running for president, described this interference as unprecedentedly severe.

Many cybersecurity voices in the West have accused China for the attacks, which considers Taiwan part of its territory. Liu Pengyu, spokesperson for the Chinese Embassy in Washington, D.C., denied these allegations, insisting China opposes cyberattacks of any kind. Concerns going into the election have little to do with the security of the vote, as Taiwan uses paper ballots.

SentinelOne is acquiring Bengaluru-based cloud security firm PingSafe for $100 million, marking the largest acquisition in the Indian cybersecurity startup sector. The deal, comprising both stock and cash, is set to create a new group of dollar millionaires at PingSafe. This acquisition is expected to close in the first quarter of FY25, following PingSafe's seed funding of $3.3 million last year, led by Peak XV Partners.

PingSafe, founded in 2020 by Anand Prakash and Nishant Mittal, offers a cloud security service. It provides a centralized dashboard that uses harmless payloads to immediately identify vulnerabilities in customers' infrastructures. This approach aligns with the attackers' tactics, offering enhanced security solutions through cloud APIs.

Interesting Read

This fun listicle runs down the 12 top cybersecurity podcasts. There are talk show formats, like the CISO Series, investment-focused discussions like Redefining CyberSecurity, and compelling storytelling-driven content like Darknet Diaries — and that’s only to name a few.

Podcasts have become a popular way to absorb information and increase understanding during those lost hours of the day. They add value to our lives while we commute, wash dishes, take the dog for a walk, go to the gym, or fold laundry. And these pods give us plenty of options to choose from.

For the latest openings in cybersecurity careers, check CybersecurityHQ.

Stay Safe, Stay Secure.

The CybersecurityHQ Team