Daily Cybersecurity Briefing: October 20, 2021

# Lead Story: Acer Breached Twice by 'Desorden' On October 20, 2021, the threat actor group 'Desorden' claimed responsibility for two successive breaches of Acer's systems within a single week. The initial attack targeted Acer India, leading to the theft of sensitive customer data, while the subsequent breach affected Acer Taiwan, resulting in the leak of employee data and credentials. These incidents have raised concerns regarding Acer's cybersecurity measures and the adequacy of their defenses against sophisticated cyber threats. The ramifications of these breaches highlight the pressing need for organizations to strengthen their security posture in an era characterized by rampant cyberattacks.

# Secondary Items:

Alarming Ransomware Preparedness Report

A report from Axio has unveiled troubling statistics regarding organizational preparedness against ransomware threats. It was found that a staggering 80% of companies lack a fully functioning privileged access management solution, and 69% do not restrict internet access for their Windows domain controllers. These findings illustrate a significant gap in fundamental cyber hygiene practices, leaving organizations vulnerable to potential ransomware attacks.

CISA Reiterates Ransomware Threat

The Cybersecurity and Infrastructure Security Agency (CISA) issued a warning regarding the escalating threat of ransomware targeting critical infrastructure worldwide. The agency emphasized the importance of organizations reinforcing their defenses and ensuring timely patching of systems to mitigate the risks associated with these sophisticated attacks. This advisory serves as a critical reminder of the evolving landscape of cyber threats and the need for proactive measures.

# Analyst Perspective The incidents of October 20, 2021, underscore a growing trend in cybersecurity where organizations face increasingly sophisticated ransomware and breach tactics. The brazen attacks on Acer by 'Desorden' and the alarming statistics from Axio's report reveal a critical gap in preparedness and response capabilities. As cyber threats continue to evolve, organizations must prioritize cybersecurity hygiene, implement robust access management, and actively seek to fortify their defenses against persistent threats. The landscape calls for a collective effort to address vulnerabilities and enhance resilience against future cyber incidents.