Troy Hunt

NOVEMBER 13, 2024

For example, mine was just one of many tens of thousands of Pfizer email addresses, and that sort of thing is going to raise the ire of some folks in corporate infosec capacities. DemandScience is what we refer to as a "data aggregator" in that they combine identity data from multiple locations, bundle it up, and then sell it.

Data breaches 329

Data breaches Passwords B2B Technology 329

SecureWorld News

JANUARY 9, 2023

Popular fast food restaurant chain Chik-fil-A recently said it was investigating reports of "suspicious activity" on customer accounts. chik-fil-a.com #cybersecurity #infosec @ChickfilA pic.twitter.com/kWSBpvQCNt — Dominic Alvieri (@AlvieriD). The breach that he mentions apparently involves customer accounts and loyalty points.

Accountability 98

Accountability InfoSec Media Passwords 98

Notice Bored

MAY 12, 2022

Professional services engagements, and hence the associated information risks, are so diverse that it made no sense to specify particular infosec controls, except a few examples. The policy is generic, pragmatic and yet succinct at just over 2 pages.

InfoSec 66

InfoSec Risk Accountability Government 66

Security Boulevard

JANUARY 16, 2022

The post Norton 360 Cryptominer, Fake QR Codes on Parking Meters, Facebook Account Deactivation appeared first on The Shared Security Show. The post Norton 360 Cryptominer, Fake QR Codes on Parking Meters, Facebook Account Deactivation appeared first on Security Boulevard.

Accountability 122

Accountability Antivirus Cryptocurrency Scams 122

Troy Hunt

FEBRUARY 4, 2024

” This one, as far as infosec stories go, had me leaning and muttering like never before. But fortunately these days many people make use of 2 factor authentication to protect against account takeover attacks where the adversary knows the password. nZNQcqsEYki", Oh wow!

Passwords 364

Passwords Accountability Backups Data breaches 364

Security Affairs

NOVEMBER 4, 2020

9TH ANNUAL INFOSEC AWARDSNOW OPEN FOR NOMINATIONS WITH AN INCREDIBLE 5 STAR AWARDS DINNER HELD DURING RSA CONFERENCE 2021 IN SAN FRANCISCO, CA, USA. Click here to read it online in Yumpu. Once a year, during the RSA Conference, we announced the most innovative, hottest, best cybersecurity companies, executives, products and services.

InfoSec 139

InfoSec DNS Advertising Marketing 139

Threatpost

DECEMBER 21, 2021

Yaron Kassner, CTO and co-founder of Silverfort, discusses why using all-seeing privileged accounts for monitoring is bad practice.

Accountability 106

Accountability InfoSec 106

Security Boulevard

SEPTEMBER 26, 2021

The post No Password Microsoft Accounts, Facebook Smart Glasses, Security.txt Internet Standard appeared first on The Shared Security Show. The post No Password Microsoft Accounts, Facebook Smart Glasses, Security.txt Internet Standard appeared first on The Shared Security Show.

Internet 100

Internet Internet Passwords Accountability 100

SecureWorld News

JULY 31, 2023

Cybersecurity professionals have various views on last week's news from the United States Securities and Exchange Commission (SEC) when it surprised the InfoSec community and the C-suites of corporate America. Management is required to connect the dots of cybersecurity impacts on the business.

CISO 98

CISO InfoSec Risk Cybersecurity 98

Threatpost

SEPTEMBER 28, 2021

Dave Stewart, Approov CEO, lays out six best practices for orgs to avoid costly account takeovers.

Accountability 94

Accountability InfoSec 94

Security Affairs

JANUARY 25, 2021

The leaked data contains Name, Email, Mobile, bank account numbers, PAN Number, Wallets Details etc. Story – [link] #InfoSec pic.twitter.com/1xFOtLcd8F — Rajshekhar Rajaharia (@rajaharia) January 21, 2021. What if someone used my account in any illegal activity. Trading in #cryptocurrency ?

Cryptocurrency 145

Cryptocurrency Hacking InfoSec Data breaches 145

Threatpost

AUGUST 30, 2021

In part one of a two-part series, Akamai's director of security technology and strategy, Tony Lauro, lays out what orgs need to know to defend against account takeover attacks.

Accountability 94

Accountability Technology InfoSec 94

Security Affairs

SEPTEMBER 12, 2023

Anonymous Sudan launched a DDoS attack against Telegram after the company suspended the account of the group. The hacker collective Anonymous Sudan (aka Storm-1359) has launched a distributed denial-of-service (DDoS) attack against Telegram in retaliation for the suspension of their primary account. ” reported SOCRadar.

DDOS 136

DDOS Accountability InfoSec Hacking 136

Security Boulevard

FEBRUARY 5, 2023

Three […] The post Password Managers Under Attack, Shady Reward Apps on Google Play, Meta Account Center 2FA Bypass appeared first on The Shared Security Show. The post Password Managers Under Attack, Shady Reward Apps on Google Play, Meta Account Center 2FA Bypass appeared first on Security Boulevard.

Password Management 98

Password Management Passwords Accountability Phishing 98

Krebs on Security

DECEMBER 29, 2022

I seem to be doing most of that activity now on Mastodon , which appears to have absorbed most of the infosec refugees from Twitter, and in any case is proving to be a far more useful, civil and constructive place to post such things. banks are stiffing account takeover victims. A single bitcoin is trading at around $45,000.

Cryptocurrency 313

Cryptocurrency Cybercrime Computers and Electronics Scams 313

Security Boulevard

AUGUST 21, 2022

The post Multi-Factor Authentication Fatigue Attack, Signal Account Twilio Hack, Facebook and Instagram In-App Browser appeared first on The Shared Security Show. The post Multi-Factor Authentication Fatigue Attack, Signal Account Twilio Hack, Facebook and Instagram In-App Browser appeared first on Security Boulevard.

Authentication 98

Authentication Accountability Hacking Ransomware 98

Notice Bored

JUNE 21, 2022

Thinking about the principles underpinning information risk and security, here's a tidy little stack of "Hinson tips" - one-liners to set the old brain cells working this chilly mid-Winter morning: Address information confidentiality, integrity and availability, broadly Address internal and external threats, both deliberate and accidental/natural Celebrate (..)

InfoSec 63

InfoSec Risk Engineering Accountability 63

Security Affairs

OCTOBER 4, 2020

The vulnerabilities have been reported to HP by the infosec researchers Nick Bloor, an attacker could chain the three issues to achieve SYSTEM privileges on targeted devices and potentially take over them. The issue does not impact customers who use Active Directory authenticated accounts. ” reads the HP’s advisory.

Hacking 145

Hacking Accountability Passwords Advertising 145

Cisco Security

OCTOBER 29, 2022

The policies are written in the application language and give appropriate controls to developers to write their requirements into the application while the NetSec team ensures full compliance to the infosec policies dictated by the CISO organization. We’d love to hear what you think. Cisco Secure Social Channels.

Digital transformation 145

Digital transformation InfoSec CISO Accountability 145

Security Boulevard

DECEMBER 30, 2024

As the rules were authorized in late 2023, we shared what we see as the implications for infosec leaders. In partnership with senior executives, they need to pay close attention to the risks their companies face and the strategies those companies put in place to comply. This post explores the impact of these regulations after one year.

Cybersecurity 85

Cybersecurity Cyber Risk CISO Risk 85

Troy Hunt

JUNE 10, 2019

Increasingly, I was writing about what I thought was a pretty fascinating segment of the infosec industry; password reuse across Gawker and Twitter resulting in a breach of the former sending Acai berry spam via the latter. accounts (59% of common email addresses had exactly the same password). And so Have I Been Pwned was born.

Data breaches 279

Data breaches Passwords InfoSec Accountability 279

Security Boulevard

JANUARY 21, 2024

Then they switch to the best practices to prevent social media account takeovers, highlighting […] The post The World of Scambaiting, Preventing Social Media Account Takeovers, Network Wrenches Hacked appeared first on Shared Security Podcast.

Media 78

Media Accountability Hacking Scams 78

Threatpost

JULY 8, 2021

Jason Kent, hacker-in-residence at Cequence Security, discusses fake online accounts, and the fraud they carry out on a daily basis.

Accountability 81

Accountability Internet Internet InfoSec 81

SecureWorld News

SEPTEMBER 12, 2023

On June 14, 2019, Taylor Swift posted a seemingly random string of text to her social media accounts: gxgjxkhdkdkydkhdkhfjvjfj!!! These skills also happen to apply to information security (infosec) and cyber threat intelligence and research. And you'll leave your first infosec conference with an armful of them.

Cybersecurity 104

Cybersecurity InfoSec Threat Detection Accountability 104

CyberSecurity Insiders

OCTOBER 3, 2022

Information Security- Protection of information and the information storing systems from unauthorized access accounts to Information Security. The term InfoSec aka Information Security is often used to determine availability of the systems and to protect the data integrity and confidentiality.

Information Security 128

Information Security Cybersecurity Computers and Electronics InfoSec 128

Security Boulevard

MARCH 10, 2024

In episode 320, Tom and Scott discuss the contentious issue of who is accountable when Facebook or Instagram accounts are hacked, discussing potential failings on both the user’s and Meta’s part.

Media 75

Media Accountability Hacking Malware 75

The Last Watchdog

JANUARY 28, 2019

Through the course of this year, Gartner forecasts that the infosec market will climb 9 percent to $124 billion. The perpetrators deploy botnets to automate the injection of surreptitiously obtained usernames and password pairs until they gain fraudulent access to a targeted account. percent, according to tech consultancy Gartner.

Passwords 196

Passwords Password Management Internet Internet 196

Krebs on Security

FEBRUARY 22, 2024

“The infosec industry is always trying to distinguish [the work] of one APT group from another. ” SentinelOne’s Cary said he came to the same conclusion, noting that the Protonmail account tied to the GitHub profile that published the records was registered a month before the leak, on January 15, 2024.

Government 336

Government Hacking Cyber threats Mobile 336

Security Affairs

AUGUST 10, 2022

The investigation conducted by Cisco Security Incident Response (CSIRT) and Cisco Talos revealed that threat actors compromised a Cisco employee’s credentials after they gained control of a personal Google account where credentials saved in the victim’s browser were being synchronized. ” reads the analysis published by Cisco Talos.

Ransomware 139

Ransomware Hacking VPN Phishing 139

Threatpost

OCTOBER 18, 2021

Chris Hass, director of information security and research at Automox, discusses how to assign security responsibility, punishment for poor cyber-hygiene and IDing 'security champions' to help small businesses.

Small Business 97

Small Business Accountability Cybersecurity Information Security 97

The Falcon's View

JANUARY 3, 2019

Consider, if you will, that fundamentally we in infosec want people to make better decisions. However, when people are empowered to make their own decisions and are held accountable for the lasting impacting , then and only then will they start adopting more of a caretaker mentality and start considering long-term impacts.

InfoSec 40

InfoSec Engineering Digital transformation CISO 40

Security Affairs

FEBRUARY 2, 2021

9TH ANNUAL INFOSEC AWARDSNOW OPEN FOR NOMINATIONS WITH AN INCREDIBLE SOCIAL MEDIA LIVE BOOST AND VIRTUAL RED CARPET TO CELEBRATE OUR WINNERS, HELD DURING RSA CONFERENCE 2021 IN SAN FRANCISCO, CA, USA. (You can download a PDF version once you open the page flipping version) Do you like Yumpu, an alternative online flipbook version?

InfoSec 115

InfoSec DNS Media Marketing 115

Notice Bored

JULY 23, 2020

As I'm drafting the procedure, I'm itching to mention related aspects such as governance, accountability, access control, competence, oversight, monitoring, resilience and more. but those would be distracting details.

InfoSec 52

InfoSec Risk Accountability Government 52

Security Affairs

MARCH 6, 2021

Microsoft revealed that at least one China-linked APT group, tracked as HAFNIUM , chained these vulnerabilities to access on-premises Exchange servers to access email accounts, and install backdoors to maintain access to victim environments. Cyber #Cybersecurity #InfoSec — US-CERT (@USCERT_gov) March 6, 2021.

InfoSec 145

InfoSec Hacking Accountability Cybersecurity 145

Security Affairs

FEBRUARY 17, 2020

About a year ago, we publicly released the Yomi Hunter sandbox for a few simple reasons: in Yoroi we believe in the InfoSec community value, we think it plays a central role in the fight of cyber-threats and we feel the need to support it. . Well, how to participate? Or just include the “#yomihunter” hashtag to your tweets. How it works?

InfoSec 93

InfoSec Malware Advertising Cyber threats 93

Malwarebytes

JULY 10, 2023

The other vulnerabilities included cross-site scripting (XSS), potentially used to hijack accounts or impersonate others (CVE-2023-36459), and a technique used for phishing through “verified profile links” (CVE-2023-36462). The final flaw allowed for Denial of Service (DoS) through slow HTTP responses (CVE-2023-36461).

InfoSec 95

InfoSec Penetration Testing Media Risk 95

Threatpost

DECEMBER 29, 2021

Jason Kent, hacker-in-residence at Cequence Security, discusses sneaky shopping bot tactics (i.e., domain parking) seen in a mass campaign, and what retail security teams can do about them.

Retail 114

Retail Accountability InfoSec 114