Security Boulevard

AUGUST 21, 2022

The post Multi-Factor Authentication Fatigue Attack, Signal Account Twilio Hack, Facebook and Instagram In-App Browser appeared first on The Shared Security Show. The post Multi-Factor Authentication Fatigue Attack, Signal Account Twilio Hack, Facebook and Instagram In-App Browser appeared first on The Shared Security Show.

Authentication 98

Authentication Accountability Hacking Ransomware 98

Security Affairs

FEBRUARY 23, 2024

Australian telecommunications provider Tangerine disclosed a data breach that impacted roughly 230,000 individuals. Tangerine suffered a data breach that exposed the personal information of roughly 230,000 individuals. The company already notified impacted individuals by email on Wednesday 21 February 2024.

Data breaches 95

Data breaches Telecommunications Banking Mobile 95

SecureWorld News

DECEMBER 7, 2023

New revelations have shed light on the extensive fallout of the 23andMe data breach, which exposed the personal information of a staggering 6.9 This significant update comes almost two months after the genetic testing company initially reported a breach affecting 14,000 individuals. million users.

Data breaches 104

Data breaches Passwords Data privacy Accountability 104

Security Affairs

NOVEMBER 20, 2023

The Canadian government discloses a data breach after threat actors hacked two of its contractors. “On October 19 th , 2023, Brookfield Global Relocation Services (BGRS) informed the Government of Canada of a breach involving Government of Canada information held by BGRS and SIRVA Canada systems.”

Data breaches 113

Data breaches Government Hacking Backups 113

Security Affairs

MARCH 2, 2023

At the end of 2022, a security researcher discovered the stolen data on an unsecured server belonging to a group of hackers. TechCrunch was able to verify the authenticity of the data for a sample they analyzed, however it is unclear how recent the data is. New breach: GunAuction[.]com

Accountability 81

Accountability Hacking Data breaches Passwords 81

Security Affairs

SEPTEMBER 24, 2023

educational nonprofit organization National Student Clearinghouse disclosed a data breach that impacted approximately 900 US schools. The security breach resulted from a cyber attack exploiting a vulnerability in the MOVEit managed file transfer (MFT).- reads the advisory published by the company.

Data breaches 113

Data breaches Education Ransomware Software 113

Security Affairs

SEPTEMBER 3, 2022

Electronics giant Samsung has confirmed a new data breach after some of its US systems were compromised in July. After the attack that hit the company in late July 2022, Samsung disclosed a data breach. Threat actors had access to internal company data, including the source code of Galaxy models.

Data breaches 144

Data breaches Hacking Authentication Cybersecurity 144

Security Affairs

APRIL 14, 2020

Quidd , an online marketplace for trading stickers, cards, toys, and other collectibles, discloses a data breach in has suffered in 2019. Quidd , the online marketplace for trading stickers, cards, toys, and other collectibles, discloses a data breach in has suffered in 2019, it is also recommending users to change their passwords.

Accountability 140

Accountability Hacking Data breaches Passwords 140

Security Affairs

MAY 2, 2024

Threat actors breached the Dropbox Sign production environment and accessed customer email addresses and hashed passwords Cloud storage provider DropBox revealed that threat actors have breached the production infrastructure of the DropBox Sign eSignature service and gained access to customer information and authentication data.

Hacking 99

Hacking Authentication Passwords Accountability 99

Security Affairs

AUGUST 24, 2022

The company disclosed a data breach after threat actors have access to a limited subset of data stored in a compromised database. Exposed data includes emails, usernames, and encrypted passwords. The company is urging all users to immediately reset account passwords and log out of all devices connected to its service.

Data breaches 108

Data breaches Passwords Media Accountability 108

Security Affairs

MAY 6, 2020

Hackers have breached the online learning platform Unacademy and are selling the account information for close to 22 million users. Online learning platform Unacademy has suffered a data breach after a hacker gained access to their database and started selling the account information for close to 22 million users.

Accountability 102

Accountability Hacking Data breaches Advertising 102

The Last Watchdog

AUGUST 19, 2021

At the start of this week, word got out that hackers claimed to have seized personal data for as many as 100 million T-Mobile patrons. Related: Kaseya hack worsens supply chain risk. Often inadvertent data breaches stem from a well-meaning employee trying to meet the needs of clients but without the technical systems to facilitate.

Mobile 306

Mobile Data breaches Authentication Accountability 306

Identity IQ

JANUARY 16, 2023

LifeLock Data Breach Compromises Thousands! Recently, thousands of Norton LifeLock customer accounts were compromised in a data breach. Credential stuffing is a type of data breach where hackers use previously stolen lists of information, such as usernames and passwords, to gain unauthorized access to accounts.

Data breaches 105

Data breaches Identity Theft Password Management Passwords 105

Krebs on Security

DECEMBER 13, 2022

Meanwhile, the hackers responsible are communicating directly with members through the InfraGard portal online — using a new account under the assumed identity of a financial industry CEO that was vetted by the FBI itself. USDoD’s InfraGard sales thread on Breached. Department of Defense.

Hacking 362

Hacking Energy and Utilities Cybercrime Accountability 362

Security Affairs

NOVEMBER 15, 2020

million Pluto TV user accounts on a hacking forum for free, he claims they were stolen by ShinyHunters threat actor. million Pluto TV user records, he also added that the service was hacked by ShinyHunters. SecurityAffairs – hacking, ShinyHunters). The post ShinyHunters hacked Pluto TV service, 3.2M

Accountability 98

Accountability Hacking Data breaches Passwords 98

Security Affairs

FEBRUARY 26, 2024

Recently the leak of a collection of files apparently stolen from the Chinese government hacking contractor, I-Soon, exposed Chinese hacking capabilities. Recently someone has leaked on GitHub [ 1 , 2 ] a collection of files apparently stolen from the Chinese hacking firm, I-Soon.

Hacking 109

Hacking Government Spyware Marketing 109

Malwarebytes

JULY 25, 2022

Word is spreading of a compromise claimed to have accessed around 69 million user accounts. This compromise, posted to a hacking forum, is said to include both the database and around 460 MB of compressed source code from Neopets.com. In 2020, there were claims of ways to potentially gain access to user accounts.

Data breaches 75

Data breaches Accountability Passwords Password Management 75

Krebs on Security

SEPTEMBER 13, 2023

USDoD didn’t say why they decided to leak the data on the 22nd anniversary of the 9/11 attacks, but there was definitely an aircraft theme to the message that accompanied the leak, which concluded with the words, “Lockheed martin, Raytheon and the entire defense contractos [sic], I’m coming for you [expletive].”

Cybercrime 286

Cybercrime Passwords Authentication Malware 286

Krebs on Security

JUNE 28, 2019

says it will soon force all Cloud Solution Providers (CSPs) that help companies manage their Office365 accounts to use multi-factor authentication. As it happened, the PCM employee was not using multi-factor authentication. And when that PCM employee’s account got hacked, so too did many other PCM customers.

Authentication 226

Authentication Accountability Data breaches Software 226

Security Affairs

AUGUST 8, 2022

Communications company Twilio discloses a data breach after threat actors have stolen employee credentials in an SMS phishing attack. Communications company Twilio discloses a data breach, threat actors had access to the data of some of its customers. SecurityAffairs – hacking, data breach).

Data breaches 88

Data breaches Social Engineering Phishing Accountability 88

Security Affairs

JANUARY 20, 2023

PayPal is sending out data breach notifications to thousands of users because their accounts were compromised through credential stuffing attacks. PayPal announced that 34942 customers’ accounts have been compromised between December 6 and December 8.

Data breaches 88

Data breaches Identity Theft Accountability Passwords 88

SecureWorld News

OCTOBER 17, 2023

In the wake of the recent 23andMe data breach that impacted millions of customers, new legal action is now being pursued against the genetic testing company. Four class action lawsuits were filed in the past week on behalf of 23andMe users whose personal and health data was compromised in the breach.

Data breaches 89

Data breaches Authentication Passwords Cybersecurity 89

Security Affairs

JANUARY 18, 2021

The OpenWRT forum, the community behind the open-source project for embedded operating systems based on Linux, disclosed a data breach. The administrators of the forum disclosed the data breach with an announcement published on the forum. SecurityAffairs – hacking, data breach). Pierluigi Paganini.

Hacking 131

Hacking Data breaches Passwords Accountability 131

Security Affairs

MAY 3, 2020

The company has over 4200 employees and accounts for over 90 million active users every month. The hacker claims to have hacked the company in March 2020, it has stolen just a small part of the company database. ZDNet confirmed the authenticity of the leaked data. SecurityAffairs – Tokopedia, hacking).

Accountability 113

Accountability Hacking Passwords Data breaches 113

Adam Levin

JANUARY 18, 2019

Hunt found an archive of the data on MEGA, a file-sharing site and has been featured on at least one hacking forum. Hunt transferred the compromised emails and passwords to the website haveibeenpwned.com , where users can check to see if their account data was compromised.

Accountability 198

Accountability Passwords Data breaches Data collection 198

Identity IQ

NOVEMBER 1, 2021

A hospital in Worcester, Massachusetts, disclosed an email hack of its employee email system, which may have exposed the personal information of thousands of patients. Earlier this month, UMass Memorial Health alerted patients who were affected by the hospital data breach. How to Protect Yourself After a Hospital Data Breach.

Data breaches 98

Data breaches Identity Theft Insurance Passwords 98

IT Security Guru

OCTOBER 26, 2023

Enter Two-Factor Authentication, or 2FA for short. Then, your account will ask for a secondary code, usually sent via SMS to your phone. Here’s a shocking stat: according to the Verizon Data Breach Investigations Report , 81% of hacking-related breaches leverage either stolen or weak passwords.

Authentication 115

Authentication Passwords Mobile VPN 115

Identity IQ

JANUARY 19, 2021

With all that transpired over the last few months, and even with the SolarWinds cyberattack making headlines , it might be easy to forget that data breaches and hacks continue to expose the personal information of millions. This leaves victims of the data breaches vulnerable to identity theft.

Data breaches 105

Data breaches Identity Theft Small Business Passwords 105

Security Affairs

JANUARY 19, 2022

A vulnerability in the implementation of multi-factor authentication (MFA) for Box allowed threat actors to take over accounts. A vulnerability in the implementation of multi-factor authentication (MFA) for Box allowed attackers to take over accounts without having access to the victim’s phone, Varonis researchers reported.

Accountability 115

Accountability Authentication Passwords Data breaches 115

Security Affairs

AUGUST 5, 2022

Twitter confirmed that the recent data breach that exposed data of 5.4 million accounts was caused by the exploitation of a zero-day flaw. At the end of July, a threat actor leaked data of 5.4 million Twitter accounts that were obtained by exploiting a now-fixed vulnerability in the popular social media platform.

Accountability 105

Accountability Data breaches Authentication Media 105

SecureWorld News

OCTOBER 7, 2021

A recent hack discovered by one of the world's largest telecommunications companies has the potential to impact millions of cell phone users worldwide. The company also says it discovered the breach in May 2021, but the hack began five years earlier in 2016. 2FA concerns from Syniverse hack.

Data breaches 80

Data breaches Mobile Hacking Authentication 80

SecureWorld News

JANUARY 6, 2023

Recent reports indicate that a dataset containing the email addresses of approximately 200 million Twitter users was posted to a popular hacking forum for free. The database contains 235,000,000 unique records of Twitter users and their email addresses and will unfortunately lead to a lot of hacking, targeted phishing, and doxxing.

Data breaches 85

Data breaches Accountability Cyber threats Hacking 85

Krebs on Security

AUGUST 1, 2018

Reddit.com today disclosed that a data breach exposed some internal data, as well as email addresses and passwords for some Reddit users. As Web site breaches go, this one doesn’t seem too severe. APP-BASED AUTHENTICATION. “We point this out to encourage everyone here to move to token-based 2FA.”

Authentication 195

Authentication Mobile Passwords Accountability 195

Security Affairs

NOVEMBER 25, 2021

Recently disclosed data breach impacted several of its brands, including Domain Factory, Heart Internet, Host Europe, Media Temple, tsoHost and 123Reg. Recently GoDaddy has disclosed a data breach that impacted up to 1.2 million of its customers, threat actors breached the company’s Managed WordPress hosting environment.

Data breaches 87

Data breaches Passwords Media Internet 87

Security Affairs

MARCH 31, 2020

Marriott disclosed a new security breach detected at the end of February 2020 that could impact up to 5.2 Marriott International discloses a data breach that exposed the personal information of roughly 5.2 ” reads the data breach notification published by the company. SecurityAffairs – Marriott, hacking).

Data breaches 113

Data breaches Passwords Advertising Accountability 113

Security Affairs

NOVEMBER 25, 2020

million settlement in a multi-state investigation of the data breach that the company suffered in 2014. million settlement over the 2014 data breach. In 2014, Home Depot revealed that the data breach impacted 56 million customers across the US and Canada. SecurityAffairs – hacking, Data breach).

Retail 119

Retail Data breaches Penetration Testing Password Management 119

Security Affairs

AUGUST 29, 2022

Threat actors behind the Twilio hack also gained access to the accounts of 93 individual users of its Authy two-factor authentication (2FA) service. Early August, the communications company Twilio discloses a data breach , threat actors had access to the data of some of its customers.

Accountability 91

Accountability Authentication Phishing Data breaches 91