Troy Hunt

APRIL 12, 2021

This post has been brewing for a while, but the catalyst finally came after someone (I'll refer to him as Jimmy) recently emailed me regarding the LOQBOX data breach from 2020. Turns out there were a bunch of tweets mentioning me in this context in Feb 2020 , but that was all. C'mon, seriously?!

Data breaches 349

Data breaches Phishing Scams Advertising 349

Krebs on Security

SEPTEMBER 5, 2023

In November 2022, the password manager service LastPass disclosed a breach in which hackers stole password vaults containing both encrypted and plaintext data for more than 25 million users. “I ran my own analysis on top of their data and reached the same conclusion that Taylor reported. .” Then on Aug.

Cryptocurrency 348

Cryptocurrency Passwords Encryption Accountability 348

The Last Watchdog

MAY 20, 2022

Keeping up with new risks, resolving them as soon as they occur, and recovering from incidents identified too late may, as you can certainly imagine, take up valuable resources and cause businesses to lose time, money, and the trust of their clients/partners. Related: Reviving ‘observability’ to secure complex networks.

Marketing 247

Marketing Digital transformation Technology Cybersecurity 247

Anton on Security

DECEMBER 10, 2021

Example SOC Troubles from some presentation :-) As we are working on the next SOC paper jointly with Deloitte ( paper 1 , paper 2 , paper 3 coming out really soon), we came across the need to review some of the current technology challenges in the SOC. Hence this blog was born. BTW, if somebody wakes me up at 3:00 a.m.

Technology 242

Technology CISO Data collection Threat Detection 242

McAfee

APRIL 26, 2021

Movies like The Italian Job , Inception , and Ocean’s 11 are riveting, but outside of cinema these types of heists don’t really happen anymore, right? What’s worse is that the museum didn’t insure the jewelry, resulting in a $1.2 If you’re like me, you love a good heist film. Think again. billion-dollar loss.

Data breaches 71

Data breaches Internet Internet Insurance 71

Troy Hunt

NOVEMBER 8, 2021

They'd left a MongoDB instance exposed to the public without a password and someone had snagged all their data. Within the data were references that granted access to voice recordings made by children, stored in an S3 bucket that also had no auth. So, why didn't CloudPets respond to attempts to contact them?

Scams 69

Scams Data breaches InfoSec Social Engineering 69

Security Boulevard

DECEMBER 10, 2021

As we are working on the next SOC paper jointly with Deloitte ( paper 1 , paper 2 , paper 3 coming out really soon), we came across the need to review some of the current technology challenges in the SOC. Hence this blog was born. and says “Anton, what is the top reason why a security operation center may fail?” But I digress.

Technology 59

Technology CISO Data collection Threat Detection 59

Duo's Security Blog

DECEMBER 21, 2020

I think we can all agree that 2020 was anything but a typical year (and a poster child for Murphy’s law "anything that can go wrong, will go wrong.") Our industry is really good about posting about what has gone wrong, highlighting the latest data breaches, vulnerabilities and threat vectors.

Cybersecurity 52

Cybersecurity Passwords VPN Authentication 52

Troy Hunt

MARCH 2, 2020

This is going to be a lengthy blog post so let me use this opening paragraph as a summary of where Project Svalbard is at : Have I Been Pwned is no longer being sold and I will continue running it independently. Per the Project Svalbard announcement blog post, I engaged KPMG to run the merger and acquisition (M&A) process for me.

Data breaches 341

Data breaches Marketing Cyber Insurance InfoSec 341

Troy Hunt

JULY 24, 2020

Then I started thinking it sounds a bit obnoxious anyway so maybe it wasn't really that relevant (yet somehow, here we are.) Then the PC itself started sounding really unhappy, like the bearings in a fan had gone. until eventually, I thought "stuff it, let's just write about the computer bits". So here are. No sign of life whatsoever.

IoT 363

IoT Retail Manufacturing Data breaches 363

The Last Watchdog

SEPTEMBER 1, 2020

‘Mafiaboy’ The trouble is Clark, 17, of Tampa, Florida, is teaching us much the same lessons in the summer of 2020 that de Guzman and Calce did in the spring of 2000. Here’s what all consumers and companies should heed going forward. Graham Ivan Clark, Onel de Guzman and Michael Calce. On the cusp of electing a U.S.

Hacking 138

Hacking Media Accountability CISO 138