Security Affairs

JANUARY 6, 2022

NY OAG warned 17 companies that roughly 1.1 million of their customers have had their user accounts compromised in credential stuffing attacks. The New York State Office of the Attorney General (NY OAG) has warned 17 companies that roughly 1.1 million accounts of their customers were compromised in credential stuffing attacks.

Accountability 130

Accountability Retail Passwords Data breaches 130

Malwarebytes

FEBRUARY 22, 2023

DNA Diagnostics Center (DDC), an Ohio-based private DNA testing company, last week reached a settlement deal with the Ohio and Pennsylvania state attorneys general in relation to a 2021 breach that saw the theft of 45,000 residents ' personal details. million customers who had undergone genetic testing across the US.

Penetration Testing 85

Penetration Testing InfoSec Accountability Authentication 85

The Hacker News

JANUARY 24, 2023

LastPass-owner GoTo (formerly LogMeIn) on Tuesday disclosed that unidentified threat actors were able to steal encrypted backups of some customers' data along with an encryption key for some of those backups in a November 2022 incident.

Backups 90

Backups Data breaches Encryption 90

CyberSecurity Insiders

JUNE 28, 2023

A new ransomware named ‘8Base’ is on the prowl and seems to be only targeting companies that do not show seriousness in protecting information of their customers and employees. The post 8Base Ransomware targets only companies neglecting privacy of employees and customers appeared first on Cybersecurity Insiders.

Ransomware 79

Ransomware Manufacturing Threat Detection Cybercrime 79

Security Affairs

FEBRUARY 10, 2023

The TA886 group used custom toolset, such as WasabiSeed and Screenshotter, to take screenshots from the victim’s system and evaluate the opportunity to install a bot and stealer. The experts first spotted the attacks attributed to this threat actor in October 2022, they believe that the group is financially motivated.

Malware 90

Malware Phishing Spyware Cybercrime 90

Penetration Testing

NOVEMBER 29, 2023

In an unsettling revelation that underscores the relentless threats in the digital world, Okta, a renowned identity management company, recently acknowledged a cybersecurity breach of alarming magnitude.

Data breaches 63

Data breaches Penetration Testing Cybersecurity 63

Bleeping Computer

JANUARY 5, 2022

The New York State Office of the Attorney General (NY OAG) has warned 17 well-known companies that roughly 1.1 million of their customers have had their user accounts compromised in credential stuffing attacks. [.].

Accountability 109

Accountability 109

Penetration Testing

NOVEMBER 13, 2023

The latest victim in a series of cyber-attacks targeting... The post Bitcoin ATM Company Coin Cloud Suffers Massive Data Breach, Exposing Personal Information of 300,000 Customers appeared first on Penetration Testing.

Data breaches 80

Data breaches Penetration Testing Cyber Attacks 80

CyberSecurity Insiders

APRIL 25, 2022

A Caribbean based company is urging its customers to delete credit card info saved onto its website after it detected a data breach on its servers. Aeropost, Inc that is into the business of logistics and e-commerce, is asking its customers to delete all card related info saved onto the company’s account, respectively.

Data breaches 86

Data breaches Banking Accountability Cyber Attacks 86

Security Affairs

FEBRUARY 16, 2022

TrickBot malware is targeting customers of 60 financial and technology companies with new anti-analysis features. The infamous TrickBot malware was employed in attacks against customers of 60 financial and technology companies with new anti-analysis features. “ Follow me on Twitter: @securityaffairs and Facebook.

Malware 91

Malware Banking Cryptocurrency Technology 91

CyberSecurity Insiders

APRIL 6, 2021

All these days, we have seen ransomware gangs striking companies and stealing & locking up their data from access until a ransom is paid. Now, a research carried out by KrebsOnSecurity says that the gangs are emailing customers of the victimized businesses to put an extra pressure on them.

Ransomware 89

Ransomware Cyber Attacks Software Cybersecurity 89

The Hacker News

FEBRUARY 16, 2022

The notorious TrickBot malware is targeting customers of 60 financial and technology companies, including cryptocurrency firms, primarily located in the U.S., even as its operators have updated the botnet with new anti-analysis features.

Malware 93

Malware Cryptocurrency Technology 93

SecureWorld News

SEPTEMBER 16, 2021

Being put on hold by customer service can be incredibly frustrating. That attack hit TTEC Holdings, one of the largest customer experience companies in the world, which assists with customer support and sales over the phone. Note: CX is customer experience]. Note: CX is customer experience].

Ransomware 71

Ransomware Encryption Cybersecurity Information Security 71

SC Magazine

JULY 2, 2021

Vendor Kaseya recommends customers “IMMEDIATELY shutdown” VSA servers until further notice. Huntress says they have seen a ransom demand of $5 million in one case, though the company cautions that may not be consistent across victims. customers that will be tested thoroughly.?We on-premises?customers

Media 110

Media Small Business Encryption Ransomware 110

SC Magazine

JULY 2, 2021

Vendor Kaseya recommends customers “IMMEDIATELY shutdown” VSA servers until further notice. “We are experiencing a potential attack against the VSA that has been limited to a small number of on-premise customers only as of 2:00 PM EDT today,” the company wrote on its webpage. This is a developing story.

Media 115

Media Encryption Ransomware Accountability 115

Security Boulevard

OCTOBER 14, 2021

The post Joy Of Tech® ‘Companies That Harm Customers’ appeared first on Security Boulevard. via the Comic Noggins of Nitrozac and Snaggy at The Joy of Tech® !

52

52

Tech Republic Security

NOVEMBER 16, 2020

Implementing appropriate data privacy is critical for company operations and success. Learn some of the challenges and solutions recommended to do the job right.

Data privacy 210

Data privacy 210

Security Boulevard

FEBRUARY 16, 2021

When South Central Power Company underwent a penetration test, they realized they had to make some changes. The company dove headfirst into implementing Zero Trust principles across their organization, including in both IT and operational technology (OT) environments.

Penetration Testing 52

Penetration Testing Technology Cybersecurity 52

Threatpost

SEPTEMBER 20, 2019

A database lacking password protection exposed sensitive data of customers of Milwaukee-based mattress company Verlo Mattress.

Passwords 72

Passwords Data breaches Data privacy Cybercrime 72

Schneier on Security

APRIL 23, 2024

“At the end of the day, Microsoft, any company, is going to respond most directly to market incentives,” Grotto told us. “Unless this scrutiny generates changed behavior among its customers who might want to look elsewhere, then the incentives for Microsoft to change are not going to be as strong as they should be.”

Banking 235

Banking Government Marketing Cybersecurity 235

Security Affairs

OCTOBER 12, 2018

Fitmetrix fitness software company exposed customer data online, a 119GB archive containing name, gender, email address, birth date, height, weight and more. A fitness software company Fitmetrix may have exposed a database hosted on AWS containing millions of customer records. Pierluigi Paganini.

Software 89

Software Data breaches Advertising Accountability 89

Schneier on Security

APRIL 9, 2024

The Board also concludes that Microsoft’s security culture was inadequate and requires an overhaul, particularly in light of the company’s centrality in the technology ecosystem and the level of trust customers place in the company to protect their data and operations. The report includes a bunch of recommendations.

Hacking 247

Hacking Government Accountability Technology 247

Graham Cluley

APRIL 7, 2021

Cybercriminal extortionists have adopted a new tactic to to apply even more pressure on their corporate victims: contacting the victims' customers, and asking them to demand a ransom is paid to protect their own privacy. Read more in my article on the Tripwire State of Security blog.

Ransomware 134

Ransomware Data breaches Malware 134

The Last Watchdog

APRIL 1, 2024

Related: Data privacy vs data security However, this remains a novel concept at most companies. Can you frame the barriers and obstacles companies can expect to encounter. Building your program and embedding these capabilities with a customer focus in mind is the difference. Here’s that exchange, edited for clarity and length.

Cybersecurity 221

Cybersecurity CISO B2B Risk 221

The Hacker News

MARCH 15, 2023

A cyberespionage actor known as Tick has been attributed with high confidence to a compromise of an East Asian data-loss prevention (DLP) company that caters to government and military entities.

Government 81

Government Malware Software 81

Security Affairs

JANUARY 7, 2019

Cyber criminals have stolen customer data from the Titan Manufacturing and Distributing company for nearly one year using a malware. Hackers hit the Titan Manufacturing and Distributing company and compromised its computer system to steal customer payment card data for an entire year. Pierluigi Paganini.

Manufacturing 76

Manufacturing Advertising Malware Hacking 76

Naked Security

FEBRUARY 14, 2022

More money than the UK's economy produces in a year!

133

133

Krebs on Security

FEBRUARY 9, 2024

Until earlier this week, the support website for networking equipment vendor Juniper Networks was exposing potentially sensitive information tied to customer products, including which devices customers bought, as well as each product’s warranty status, service contracts and serial numbers.

Artificial Intelligence 257

Artificial Intelligence Healthcare Accountability Banking 257

Krebs on Security

MARCH 20, 2024

Gaskell has been quoted in multiple “articles” about random subjects, such as this article at HRDailyAdvisor about the pros and cons of joining a company-led fantasy football team. ” Imagine that: Two different people-search companies mentioned in the same story about fantasy football. What are the odds?

Marketing 240

Marketing Technology Data privacy Advertising 240

Krebs on Security

MARCH 20, 2023

A new breach involving data from nine million AT&T customers is a fresh reminder that your mobile provider likely collects and shares a great deal of information about where you go and what you do with your mobile device — unless and until you affirmatively opt out of this data collection.

Mobile 275

Mobile Wireless Advertising Telecommunications 275

Krebs on Security

FEBRUARY 14, 2024

A tiny portion of the more than 6,500 customers who trusted U.S. Securence counts among its customers dozens of state and local governments, including: nc.gov — the official website of North Carolina; stillwatermn.gov , the website for the city of Stillwater, Minn.; Internet with their email. Individual inboxes of U.S.

Internet 330

Internet Internet Wireless Government 330

Security Affairs

APRIL 11, 2024

Business intelligence software company Sisense suffered a cyberattack that may have exposed sensitive information of major enterprises worldwide. Sisense, a business intelligence software company, experienced a cyberattack potentially exposing the sensitive data of global enterprises. ” reads the alert.

Data breaches 113

Data breaches Healthcare Cyber Attacks Software 113

Tech Republic Security

APRIL 5, 2017

Garadget, which offers an internet-connected garage door opener, recently denied a customer access to its server after he left a negative review. Here's how to respond in a more professional manner.

IoT 121

IoT Internet Internet 121

Security Boulevard

APRIL 12, 2024

A hard-coded credential catastrophe: The analytics firm kept big companies’ secrets in an insecure AWS bucket. The post Sisense Hacked: CISA Warns Customers at Risk appeared first on Security Boulevard. Government says victims include the “critical infrastructure sector.”

Risk 139

Risk Hacking Government Digital transformation 139

Security Affairs

MARCH 29, 2024

Hot Topic suffered credential stuffing attacks that exposed customers’ personal information and partial payment data. is an American fast-fashion company specializing in counterculture-related clothing and accessories, as well as licensed music. ” reads the notification sent to the potentially impacted customers.

Accountability 115

Accountability Mobile Passwords Authentication 115