article thumbnail

Experian’s Credit Freeze Security is Still a Joke

Krebs on Security

Last week, KrebsOnSecurity heard from a reader who had his freeze thawed without authorization through Experian’s website, and it reminded me of how truly broken authentication and security remains in the credit bureau space. “They’re allowing this huge security gap so they can make a profit. and $24.99

article thumbnail

Twitter Fined $150 Million for Misuse of 2FA User Data

SecureWorld News

Federal Trade Commission (FTC) and the Department of Justice (DOJ) charged Twitter with a $150 million penalty for " deceptively using account security data for targeted advertising.". Twitter, like many other social media websites, asks users to provide their phone number and email address to better protect their account.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Pwned Passwords, Version 5

Troy Hunt

Almost 2 years ago to the day, I wrote about Passwords Evolved: Authentication Guidance for the Modern Era. This wasn't so much an original work on my behalf as it was a consolidation of advice from the likes of NIST, the NCSC and Microsoft about how we should be doing authentication today. Thanks everyone! Going live with it tomorrow.

Passwords 234
article thumbnail

Poloniex forces password reset following a data leak

Security Affairs

On December 30th, 2019, users began receiving a message from the Poloniex exchange notifying them of the data leak. Poloniex be careful with this Scam email we are getting in our emails #BTC #LTC #ETH #DASH #Crypto #Poloniex pic.twitter.com/untSVGfwAM — Charly (@charlysatoshi) December 30, 2019. charlysatoshi.

article thumbnail

YouTube Accounts Hijacked by Cookie Theft Malware

Hacker Combat

Google has reported that it disrupted the phishing attacks where threat actors had tried to hijack various YouTube accounts using cookie theft malware. The hijacker’s intent was to use those accounts to promote different crypto-currency scams. . Account users have also been requested to take all Safe Browsing alerts seriously.

article thumbnail

Internet safety tips for kids and teens: A comprehensive guide for the modern parent

Malwarebytes

Keep your online accounts secure Respect your privacy Capture and share with care Take care of your data Take care of your device Be wary of certain sites and content online Be kind. Keep your online accounts secure. Enable multi-factor authentication (MFA). C O N T E N T S. 7 Internet safety tips.

Internet 107
article thumbnail

Episode 150: Microsoft’s Tanya Janca on securing Azure and Armor Scientific’s CTO on Life after Passwords

The Security Ledger

But in 2019, the days of the desktop computer are numbered and Microsoft’s future – like that of every other technology company – is intimately linked to the cloud – specifically: Azure, Microsoft’s massive cloud platform. Podcast Episode 135: The Future of Passwords with Google Account Security Chief Guemmy Kim.