CLOROX ACCUSES IT PROVIDER IN LAWSUIT OF GIVING HACKERS EMPLOYEE PASSWORDS

Summary from the TLDR InfoSec newsletter

Clorox sued Cognizant over a 2023 cyberattack by Scattered Spider hackers, claiming that Cognizant staff had given away employee passwords when asked by phone without proper verification. The breach caused $380 million in damages. Cognizant disputes responsibility, saying it only provided limited help desk services, not cybersecurity management.