Troy Hunt

JANUARY 10, 2018

agarwal_mohit) January 5, 2018. I think the URL is right but it seems inaccessible from other countries: [link] — Troy Hunt (@troyhunt) January 9, 2018. Security /= George blocking — Vatsalya Goel (@vatsalyagoel) January 9, 2018. — Khas Mek (@KhasMek) January 10, 2018. FergusInLondon) January 10, 2018.

Hacking 279

Hacking Government Risk Encryption 279

Troy Hunt

JUNE 10, 2019

Increasingly, I was writing about what I thought was a pretty fascinating segment of the infosec industry; password reuse across Gawker and Twitter resulting in a breach of the former sending Acai berry spam via the latter. And while I'm on Sony, the prevalence with which their users applied the same password to their Yahoo!

Data breaches 279

Data breaches Passwords InfoSec Accountability 279

Troy Hunt

FEBRUARY 11, 2019

rows of email addresses and passwords in total, but only 1.6B Incidentally, Lorenzo who wrote that Motherboard piece is a top-notch infosec journo I've worked with many times before and he reported accurately in that piece.) The exposed data included email addresses and passwords stored as salted MD5 hashes. There were 2.7B

Passwords 209

Passwords Data breaches Media InfoSec 209

Troy Hunt

JULY 17, 2018

pic.twitter.com/5pUU7AWM0n — The Register (@TheRegister) May 25, 2018. Here's another one which invoked a similar set of GDPR-related commentary: New breach: South African website ViewFines had 934k records breached this month including 778k unique email addresses, names, phone numbers and plain text passwords.

InfoSec 122

InfoSec Data breaches Media Passwords 122

Security Affairs

JULY 2, 2019

Malware is currently delivered from: 'hxxps://customermgmt.net/page/macrocosm' #cybersecurity #infosec — USCYBERCOM Malware Alert (@CNMF_VirusAlert) July 2, 2019. ” The CVE-2017-11774 vulnerability was used by Iran-linked threat actors since 2018, some attacks were attributed to the APT33 cyberepionage group.

Energy and Utilities 78

Energy and Utilities Malware Advertising InfoSec 78

SecureWorld News

OCTOBER 12, 2020

Read our joint advisory with the @FBI for technical details and recommended actions: [link] #InfoSec #InfoSecurity #Protect2020 pic.twitter.com/D2Clny9zUI — Cybersecurity and Infrastructure Security Agency (@CISAgov). October 10, 2020. CISA details what the TTPs look like in this attack.

VPN 65

VPN InfoSec Government Accountability 65

Troy Hunt

FEBRUARY 10, 2020

And importantly, teaching them how to use secure passwords with @1Password ?? pic.twitter.com/Qk5YKuMFrO — Troy Hunt (@troyhunt) June 26, 2018 But everyone needs to find their own balance here and dictating that there's one approach to fit all is frankly, pretty nutty. This is on [link] for those who are interested.

Media 352

Media Internet Internet Education 352

eSecurity Planet

DECEMBER 19, 2023

As organizations quickly adopt technologies like Okta Fastpass which uses biometrics for authentication instead of passwords, … we expect an increase in two areas: breaches caused by social engineering (already on the rise), and breaches caused by Insiders (already over 40% of all breaches).

Cybersecurity 140

Cybersecurity CISO Government Technology 140

ForAllSecure

OCTOBER 29, 2020

The confidentiality, integrity, and availability of it all -- you know, the classic CIA triad in infosec. There were PDFs of Election Day passwords that supervisors use to start in elections. Bee: Can you tell me what the password was? Here’s how Lit News described the system in 2018. Lamb: A four digit PIN.

Hacking 52

Hacking Mobile Software Technology 52

ForAllSecure

OCTOBER 29, 2020

The confidentiality, integrity, and availability of it all -- you know, the classic CIA triad in infosec. There were PDFs of Election Day passwords that supervisors use to start in elections. Bee: Can you tell me what the password was? Here’s how Lit News described the system in 2018. Lamb: A four digit PIN.

Hacking 52

Hacking Mobile Software Technology 52

SecureList

MAY 31, 2021

Exploits for CVE-2015-2523 — use-after-free vulnerabilities in Microsoft Excel — and CVE-2018-0802 , which we’ve often written about, were also in demand. Critical vulnerabilities in the popular SolarWinds Orion Platform — CVE-2021-25274 , CVE-2021-25275 and CVE-2021-25276 — caused a major splash in the infosec environment.

Mobile 90

Mobile Adware Ransomware Malware 90

ForAllSecure

FEBRUARY 2, 2022

So what if you accidentally forget the password? Back in 2018, they bought $50,000 in cryptocurrency and then locked it safely within their Trezor One wallet. We’ve all been there-- locked out of some account because we can’t remember the clever password we used. This really happened to Dan Reich and a friend.

Cryptocurrency 52

Cryptocurrency InfoSec Software Encryption 52

ForAllSecure

OCTOBER 20, 2020

The confidentiality, integrity, and availability of it all -- you know, the classic CIA triad in infosec. There were PDFs of Election Day passwords that supervisors use to start in elections. Bee: Can you tell me what the password was? Here’s how Lit News described the system in 2018. Lamb: A four digit PIN.

Hacking 40

Hacking Mobile Software Technology 40

ForAllSecure

MAY 18, 2021

He also talks about his infosec journey hacking cryptocurrencies, joining the Digital Defense Service and CISA, and helping secure the 2020 presidential election… all before the age of 22. To do so, just supplying a password, and DNA would hit you that way. Would you use it? Would you help others?

Hacking 52

Hacking Ransomware Cryptocurrency Engineering 52

ForAllSecure

MAY 18, 2021

He also talks about his infosec journey hacking cryptocurrencies, joining the Digital Defense Service and CISA, and helping secure the 2020 presidential election… all before the age of 22. To do so, just supplying a password, and DNA would hit you that way. Would you use it? Would you help others?

Hacking 52

Hacking Ransomware Cryptocurrency Engineering 52

ForAllSecure

SEPTEMBER 21, 2021

Fortunately, there are those in the InfoSec world, who are actively looking at the subject and speaking out at conferences, such as Black Hat. Vamosi: That talk focused on the fact that there are InfoSec hackers openly working to address this problem. Don't share your phone, don't share your password with your partner.

Technology 52

Technology Software Surveillance Media 52