Stay updated on the latest in information security destruction: preventing data loss, managing risks, and safeguarding digital assets.
Search across headline titles and summaries.
Background for this topic.
Destruction in information security means permanently eliminating data so it cannot be recovered or reconstructed. This involves methods like physical destruction of storage media (e.g., shredding hard drives) or digital techniques such as secure data wiping and cryptographic erasure. The goal is to ensure sensitive information, including personal data or intellectual property, is irretrievable after its intended use.
Proper destruction is critical to prevent unauthorized data recovery by attackers who might exploit leftover information on discarded or repurposed devices. Inadequate destruction can expose organizations to data leaks or intellectual property theft. Security teams must verify destruction methods meet standards appropriate to the data’s sensitivity and maintain records proving data was securely destroyed to reduce residual risk.
Weekly headline count for the current query.
Atlassian warned admins that a public exploit is now available for a critical Confluence security flaw that can be used in data destruction attacks targeting Internet-exposed and unpatched instances. [...]
A new cyber espionage campaign dubbed 'No Pineapple!' has been attributed to the North Korean Lazarus hacking group, allowing the threat actors to stealthily steal 100GB of data from the victim without causing any destruction. [...]
The Russian state-sponsored hacking group known as Sandworm tried on Friday to take down a large Ukrainian energy provider by disconnecting its electrical substations with a new variant of the Industroyer malware for industrial control systems (ICS) and a new version of the CaddyWiper data destruction malware. [...]