Security Affairs

FEBRUARY 23, 2024

Australian telecommunications provider Tangerine disclosed a data breach that impacted roughly 230,000 individuals. Tangerine suffered a data breach that exposed the personal information of roughly 230,000 individuals. ”continues the statement.

Data breaches 93

Data breaches Telecommunications Banking Mobile 93

Security Affairs

NOVEMBER 20, 2023

The Canadian government discloses a data breach after threat actors hacked two of its contractors. “On October 19 th , 2023, Brookfield Global Relocation Services (BGRS) informed the Government of Canada of a breach involving Government of Canada information held by BGRS and SIRVA Canada systems.”

Data breaches 111

Data breaches Government Hacking Backups 111

Security Affairs

SEPTEMBER 3, 2022

Electronics giant Samsung has confirmed a new data breach after some of its US systems were compromised in July. After the attack that hit the company in late July 2022, Samsung disclosed a data breach. Threat actors had access to internal company data, including the source code of Galaxy models.

Data breaches 144

Data breaches Hacking Authentication Cybersecurity 144

Security Affairs

AUGUST 24, 2022

The company disclosed a data breach after threat actors have access to a limited subset of data stored in a compromised database. Exposed data includes emails, usernames, and encrypted passwords. The company is urging all users to immediately reset account passwords and log out of all devices connected to its service.

Data breaches 106

Data breaches Passwords Media Accountability 106

Security Affairs

JANUARY 20, 2023

PayPal is sending out data breach notifications to thousands of users because their accounts were compromised through credential stuffing attacks. PayPal announced that 34942 customers’ accounts have been compromised between December 6 and December 8. ” said Gal.

Data breaches 88

Data breaches Identity Theft Accountability Passwords 88

Malwarebytes

JULY 25, 2022

Word is spreading of a compromise claimed to have accessed around 69 million user accounts. Data claimed to have been taken includes: Usernames Names Email address Date of birth Zip code Date of Birth Gender Country Registration email. In 2020, there were claims of ways to potentially gain access to user accounts.

Data breaches 75

Data breaches Accountability Passwords Password Management 75

Security Affairs

AUGUST 8, 2022

Communications company Twilio discloses a data breach after threat actors have stolen employee credentials in an SMS phishing attack. Communications company Twilio discloses a data breach, threat actors had access to the data of some of its customers. SecurityAffairs – hacking, data breach).

Data breaches 87

Data breaches Social Engineering Phishing Accountability 87

Krebs on Security

DECEMBER 13, 2022

Federal Bureau of Investigation (FBI) to build cyber and physical threat information sharing partnerships with the private sector, this week saw its database of contact information on more than 80,000 members go up for sale on an English-language cybercrime forum. USDoD’s InfraGard sales thread on Breached. Department of Defense.

Hacking 362

Hacking Energy and Utilities Cybercrime Accountability 362

Security Affairs

SEPTEMBER 7, 2022

In the digital age, authentication is paramount to a strong security strategy. Which are the challenges of user authentication? In the digital age, authentication is paramount to a strong security strategy. User authentication seems easy, but there are inherent challenges to be aware of. User Authentication.

Authentication 94

Authentication Passwords Risk Education 94

Krebs on Security

AUGUST 25, 2023

And there are indications that fraudsters may already be exploiting the stolen data in phishing attacks. Countless websites and online services use SMS text messages for both password resets and multi-factor authentication. This may require stepping through the website’s account recovery or lost password flow.

Mobile 198

Mobile Cyber Risk Cryptocurrency Data breaches 198

Security Affairs

AUGUST 5, 2022

Twitter confirmed that the recent data breach that exposed data of 5.4 million accounts was caused by the exploitation of a zero-day flaw. At the end of July, a threat actor leaked data of 5.4 million Twitter accounts that were obtained by exploiting a now-fixed vulnerability in the popular social media platform.

Accountability 104

Accountability Data breaches Authentication Media 104

Security Affairs

JANUARY 4, 2022

The Broward Health public health system disclosed a massive data breach that has impacted more than 1.3 The Broward Health public health system has suffered a data breach that impacted 1,357,879 individuals. ” reads the data breach notification letter sent to the impacted individuals.

Data breaches 82

Data breaches Healthcare Identity Theft Insurance 82

Security Boulevard

JUNE 26, 2023

The end result of these types of cyber attacks are often highly public and damaging data breaches. 1 in 4 Americans reported that they would stop doing business with a company following a data breach, and 67% of consumers reported a loss of trust in an organization following a breach. What Are Data Breaches?

Data breaches 52

Data breaches Healthcare Telecommunications Financial Services 52

Krebs on Security

MARCH 13, 2019

[ NASDAQ: SZMK ] says it is investigating a security incident in which a hacker was reselling access to a user account with the ability to modify ads and analytics for a number of big-name advertisers. He acknowledged that the purloined account had the ability to add or modify the advertising creatives that get run on customer ad campaigns.

Accountability 214

Accountability Passwords Advertising Penetration Testing 214

Thales Cloud Protection & Licensing

FEBRUARY 9, 2022

Not All Authentication Methods Are Equally Safe. There is broad recognition by security leaders that stronger authentication is foundational to preventing data breaches. In the current cybercrime climate, all users are targets. Distinct user authentication journeys. Thu, 02/10/2022 - 05:53.

Authentication 71

Authentication Mobile Passwords Internet 71

Krebs on Security

APRIL 6, 2021

To my mind, this just reinforces the need to remove mobile phone numbers from all of your online accounts wherever feasible. Meanwhile, if you’re a Facebook product user and want to learn if your data was leaked, there are easy ways to find out. The phone number associated with my late Facebook account (which I deleted in Jan.

Mobile 342

Mobile Accountability Passwords Authentication 342

Thales Cloud Protection & Licensing

OCTOBER 28, 2021

Trick or Treat: The Choice is Yours with Multifactor Authentication. Whether you want the ‘trick’ of a malevolent threat actor infiltrating your network by exploiting a compromised password or the ‘treat’ from the peace of mind associated with multifactor authentication, the choice is yours. Fri, 10/29/2021 - 05:29.

Authentication 71

Authentication VPN Passwords Accountability 71

Identity IQ

MAY 7, 2021

What is Account Takeover? Account takeover, also known as ATO, is a form of identity theft in which a malicious third party gains access to or “takes over” an online account. One of the primary reasons behind this massive rise in account takeover is the relative ease with which it can be done. Account Takeover Prevention.

Accountability 105

Accountability Data breaches Passwords Social Engineering 105

SC Magazine

JULY 12, 2021

The radiology specialist and its vendor Alliance HealthCare are being sued by patients impacted by its nine-month, PACS-related health care data breach. The lawsuit was filed in the New York Southern District Court by some of the 298,532 patients impacted by a PACS-related data breach reported in March 2020.

Data breaches 92

Data breaches Identity Theft Healthcare Insurance 92

Security Affairs

MARCH 17, 2024

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Data breaches 104

Data breaches Computers and Electronics Cybercrime Ransomware 104

Security Boulevard

SEPTEMBER 13, 2022

“When it comes to security, Two-Factor Authentication proves to be a treasury full of gold.” The severity and frequency of ransomware attacks and other cybercrimes have exploded in the last few years. Multi-factor authentication (MFA) […].

Authentication 52

Authentication Cybercrime Ransomware Accountability 52

Krebs on Security

JANUARY 30, 2024

In each attack, the victims saw their email and financial accounts compromised after suffering an unauthorized SIM-swap, wherein attackers transferred each victim’s mobile phone number to a new device that they controlled. As it happens, Plex announced its own data breach one day before LastPass disclosed its initial August intrusion.

Social Engineering 318

Social Engineering Mobile Cybercrime Passwords 318

Hot for Security

FEBRUARY 9, 2021

billion user login combinations, was posted on a cybercrime forum last week. The mother of all data leaks, dubbed “Compilation of Many Breaches” (COMB) by its uploader, includes unique email and password combinations from more than 250 previous data breaches, such as Netflix, LinkedIn and Exploit.in.

Passwords 119

Passwords Data breaches Accountability Password Management 119

Security Affairs

MARCH 10, 2024

Judge ordered NSO Group to hand over the Pegasus spyware code to WhatsApp Cybercrime BlackCat Ransomware Affiliate TTPs American Express credit cards EXPOSED in third-party vendor data breach – account numbers and names among details accessed in hack LockBit 3.0’S

Spyware 87

Spyware Data breaches Hacking Ransomware 87

Krebs on Security

JANUARY 8, 2024

In 2020, the United States brought charges against four men accused of building a bulletproof hosting empire that once dominated the Russian cybercrime industry and supported multiple organized cybercrime groups. From January 2005 to April 2013, there were two primary administrators of the cybercrime forum Spamdot (a.k.a

Cybercrime 209

Cybercrime Banking Computers and Electronics DDOS 209

Security Affairs

NOVEMBER 3, 2018

Cybercriminals offered for sale private messages from at least 81,000 Facebook accounts claiming of being in possession of data from 120 million accounts. Crooks are offering for sale Criminals are selling the private messages of 81,000 hacked Facebook accounts for 10 cents per account. ” states the BBC.

Accountability 97

Accountability Advertising Cybercrime Hacking 97

Security Affairs

APRIL 28, 2024

From March 18, 2024, to April 16, 2024, Duo Security and Cisco Talos observed large-scale brute-force attacks against a variety of targets, including VPN services, web application authentication interfaces and SSH services. This method poses a risk of exposing sensitive data or enabling fraudulent activities.

VPN 109

VPN Accountability Firewall Data breaches 109

Security Boulevard

JUNE 7, 2022

As people conduct more and more business online — both in their personal and professional lives — cybercrime has become big business, more organized and well-funded than ever. With the acceleration in digital spending, there’s been an increase in related cyberthreats, like account takeover. billion in 2021 when compared with 2020.

Accountability 64

Accountability Artificial Intelligence Risk Big data 64

Security Affairs

JANUARY 13, 2024

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

VPN 106

VPN Cybercrime Ransomware Hacking 106

Security Affairs

JANUARY 28, 2024

Russia-linked APT group Midnight Blizzard hacked Hewlett Packard Enterprise (HPE) CISA adds Atlassian Confluence Data Center bug to its Known Exploited Vulnerabilities catalog 5379 GitLab servers vulnerable to zero-click account takeover attacks Experts released PoC exploit for Fortra GoAnywhere MFT flaw CVE-2024-0204 Akira ransomware attack on Tietoevry (..)

Artificial Intelligence 94

Artificial Intelligence Hacking Malware Cyber Attacks 94

Troy Hunt

JUNE 11, 2018

Running Have I Been Pwned (HIBP) has presented some fascinating insights into all sorts of aspects of how data breaches affect us; the impact on the individual victims such as you and I, of course, but also how they affect the companies involved and increasingly, the role of government and law enforcement in dealing with these incidents.

Cryptocurrency 129

Cryptocurrency Cybercrime Data breaches Passwords 129

SecureWorld News

OCTOBER 10, 2023

In a recent and alarming incident, popular genetic testing company 23andMe fell victim to a data breach, compromising the sensitive information of millions of its users. According to reports , the attackers gained access to individual accounts through credential-stuffing techniques.

Hacking 79

Hacking Identity Theft Data breaches Passwords 79

Security Affairs

DECEMBER 13, 2022

Twitter confirmed that the recent leak of members’ profile information resulted from the 2021 data breach disclosed in August 2022. Twitter confirmed that the recent data leak of millions of profiles resulted from the 2021 data breach that the company disclosed in August 2022. Source RestorePrivacy.

Data breaches 94

Data breaches Accountability Media Hacking 94

Krebs on Security

APRIL 27, 2023

Customers can access a Salesforce Community website in two ways: Authenticated access (requiring login), and guest user access (no login required). This misconfigured Salesforce Community site from the state of Vermont was leaking pandemic assistance loan application data, including names, SSNs, email address and bank account information.

Banking 294

Banking Government Information Security Authentication 294

Krebs on Security

MAY 12, 2022

KrebsOnSecurity has learned the alleged compromise is tied to a cybercrime and online harassment community that routinely impersonates police and government officials to harvest personal information on their targets. The DEA declined to comment on the validity of the claims, issuing only a brief statement in response.

Government 272

Government Authentication Passwords Mobile 272

Security Affairs

APRIL 4, 2022

During the weekend, multiple owners of Trezor hardware cryptocurrency wallets reported having received fake data breach notifications from Trezor, BleepingComputer first reported. A threat actor gained access to a tool used by the company’s customer support and account administration teams. You may want to warn everyone.

Phishing 115

Phishing Data breaches Cryptocurrency Social Engineering 115

Security Affairs

JUNE 4, 2023

Xplain hack impacted the Swiss cantonal police and Fedpol Zyxel published guidance for protecting devices from ongoing attacks Kimsuky APT poses as journalists and broadcast writers in its attacks New Linux Ransomware BlackSuit is similar to Royal ransomware CISA adds Progress MOVEit Transfer zero-day to its Known Exploited Vulnerabilities catalog (..)

Spyware 86

Spyware Hacking Malware Social Engineering 86