WOW !!! - Breached data collecting database itself was exposed - 1 billion passwords in plain-text (really???) less concern if, you have MFA ; 2.7 billion email addresses; 1.5 TB of data

https://www.hackread.com/billion-email-addresses-plain-text-passwords-exposed-online/

Mega Breaches (in TB) when IGNORANT SaaS vendors store our data in Cloud

- In this instance  the organizations exposed  include California Courts, CenturyLink and Nasdaq and Xerox.  The bucket also contained directories with other files relevant to clients – including internal public-relations strategy documents.

https://threatpost.com/ge-dunkin-forever21-internal-doc-leak/150920/

End of "AWS S3 security" excuse (when there is a data breach) - We have a new feature in AWS - AWS Identity & Access Management Access Analyzer

- It Monitors S3 bucket access policies and provides alerts if you have a cloud-storage bucket that is configured to allow access to anyone on the internet or that is shared with other AWS accounts. If the Access Analyzer tool discovers that a bucket is misconfigured you can respond to the alert by making a single click to "Block All Public Access,"

https://businessinsights.bitdefender.com/amazon-battles-leaky-s3-buckets-with-a-new-security-tool

End of "S3 security is complex" Excuse leading to data breach - Use the new feature - AWS Identity & Access Management Access Analyzer

It Monitors S3 bucket access policies and provides alerts if you have a cloud-storage bucket that is configured to allow access to anyone on the internet or that is shared with other AWS accounts. If the Access Analyzer tool discovers that a bucket is misconfigured you can respond to the alert by making a single click to "Block All Public Access," 

https://businessinsights.bitdefender.com/amazon-battles-leaky-s3-buckets-with-a-new-security-tool

Your Cyber Insurance provider can deny your claim under "Act Of War" (Are they learning from Health Insurance Providers?)

After the Ransomware attack Merck was stunned when most of its 30 insurers and reinsurers denied coverage because the policies specifically excluded another class of risk called "an act of war"

https://www.bloomberg.com/news/features/2019-12-03/merck-cyberattack-s-1-3-billion-question-was-it-an-act-of-war

Fact is stranger than fiction - 5mb Hard Drive in 1956. Now, A box of that size could probably contain a mini data-center. Today, Both the drive and the Airlines have vanished.

Can a zero-trust approach help us to reduce 3rd Party Risk ("Elephant in the room") which is becoming the 2nd common reason for data breaches (The first one being misconfiguration in the cloud) .

- Palo Alto Networks confirmed to Business Insider that the personal details of seven current and former employees had been "inadvertently" published online by a "third-party vendor" in February.

https://businessinsights.bitdefender.com/palo-alto-networks-employee-data-breach-highlights-risks-posed-by-third-party-vendors