Security Affairs

MARCH 19, 2023

The NBA (National Basketball Association) disclosed a data breach after a third-party firm providing a newsletter service was breached. The NBA (National Basketball Association) is notifying followers of a data breach after a third-party company providing a newsletter service was breached.

Data breaches 92

Data breaches Hacking Passwords Phishing 92

Security Affairs

JANUARY 23, 2023

The recent Mailchimp data breach has impacted multiple organizations, some of them are already notifying their customers. The popular email marketing and newsletter platform Mailchimp recently disclosed a news data breach , the incident exposed the data of 133 customers. reads the post published by TechCrunch.

Data breaches 84

Data breaches Accountability Social Engineering Small Business 84

Security Affairs

AUGUST 8, 2022

Communications company Twilio discloses a data breach after threat actors have stolen employee credentials in an SMS phishing attack. Communications company Twilio discloses a data breach, threat actors had access to the data of some of its customers. SecurityAffairs – hacking, data breach).

Data breaches 87

Data breaches Social Engineering Phishing Accountability 87

Security Affairs

AUGUST 30, 2019

Foxit Software, the company behind the Foxit PDF reader app, disclosed a data breach that exposed customers’ information, including passwords. Foxit Software, the PDF software provider behind the Foxit PDF reader app disclosed a security breach that took place recently exposing customers’ information.

Data breaches 80

Data breaches Passwords Software Identity Theft 80

The Last Watchdog

OCTOBER 24, 2022

Employee security awareness is the most important defense against data breaches. Related: Leveraging security standards to protect your company. It involves regularly changing passwords and inventorying sensitive data. As such, you should limit the amount of information that employees have access to.

Passwords 214

Passwords Security Awareness Data breaches Cybersecurity 214

Security Affairs

APRIL 4, 2022

Threat actors gained access to internal tools of the email marketing giant MailChimp to conduct phishing attacks against crypto customers. During the weekend, multiple owners of Trezor hardware cryptocurrency wallets reported having received fake data breach notifications from Trezor, BleepingComputer first reported.

Phishing 115

Phishing Data breaches Cryptocurrency Social Engineering 115

Malwarebytes

FEBRUARY 27, 2024

The German Federal Office for Information Security (BSI) has published a report on The State of IT Security in Germany in 2023 , and the number one threat for consumers is… identity theft. What to do in the event of a data breach Check the vendor’s advice. Change your password. Take your time.

Identity Theft 102

Identity Theft Data breaches Artificial Intelligence Passwords 102

Daniel Miessler

MAY 19, 2020

TOPIC: In this episode, Daniel takes a look at the 2020 Verizon Data Breach Investigations Report. Verizon’s Breach Report is one of the best infosec reports out there, and I’m always excited when I hear it’s been released. Errors were causal events in 22% of breaches. 58% had personal data compromised.

Data breaches 130

Data breaches Phishing Malware Hacking 130

Security Affairs

NOVEMBER 22, 2019

Bad news for T-Mobile prepaid customer, the US-based telecom giant T-Mobile today disclosed a new data breach incident. The US branch of the telecommunications giant T -Mobile disclosed a security breach that according to the company impacted a small number of customers of its prepaid service. Pierluigi Paganini.

Wireless 99

Wireless Data breaches Mobile Telecommunications 99

Security Affairs

NOVEMBER 23, 2019

Chinese smartphone vendor OnePlus has suffered a new data breach, according to a company’s notice hackers accessed customers’ order information. OnePlus disclosed a data breach, an “unauthorized party” accessed some customers’ order information, including names, contact numbers, emails, and shipping addresses.

Data breaches 100

Data breaches Passwords Advertising Accountability 100

Security Affairs

AUGUST 10, 2022

. “Yesterday, August 8, 2022, Twilio shared that they’d been compromised by a targeted phishing attack. The company uses Okta as its identity provider and messages include a link to a phishing page that was designed to look identical to a legitimate Okta login page. ” reads the announcement published by Cloudflare.

Data breaches 73

Data breaches Phishing DDOS Software 73

Security Affairs

JUNE 7, 2021

RockYou2021, the largest password compilation of all time has been leaked on a popular hacker forum, it contains 8.4 billion entries of passwords. . What seems to be the largest password collection of all time has been leaked on a popular hacker forum. The same user also claims that the compilation contains 82 billion passwords.

Passwords 114

Passwords Data breaches Accountability Password Management 114

Security Affairs

SEPTEMBER 5, 2022

Cybersecurity firm Armorblox discovered a new phishing campaign aimed at American Express customers. Armorblox researchers uncovered a new phishing campaign that is targeting American Express customers. The page was crafted to request the victims to enter their user ID and password. Pierluigi Paganini.

Phishing 97

Phishing Scams Social Engineering Password Management 97

Security Affairs

AUGUST 22, 2023

While the leaked information highlights Belcan’s commitment to information security through the implementation of penetration tests and audits, attackers could exploit the lapse in leaving the tests’ results open, together with admin credentials hashed with bcrypt.

Passwords 81

Passwords Penetration Testing Engineering Manufacturing 81

Security Affairs

JULY 23, 2021

This breach compromised citizens’ physical addresses, phone numbers, IDs, tax documents, and more. Due to the large number and various types of unique documents, it is difficult to estimate the number of people exposed in this breach. Phishing emails often use scare tactics to force users to open the attachment.

Data breaches 99

Data breaches Identity Theft Government Phishing 99

Security Affairs

JULY 22, 2019

Last week, hackers published a list of Discord credentials (email addresses/passwords) that were allegedly phished from the users of the gaming chat platform. “Along with their message, the hackers posted a database of the allegedly phished credentials, split into multiple sections of those that work and those that don’t.

Phishing 78

Phishing Data breaches Passwords Advertising 78

Security Affairs

MAY 31, 2023

The file contained PostgreSQL and Redis databases credentials, including host, port, username, and password. Typically, these instances serve as potential treasure troves, housing crucial information such as customer records, payment data, and a myriad of other invaluable details. env) hosted on the official Neho’s website.

Passwords 91

Passwords Phishing Accountability Banking 91

Security Affairs

JANUARY 18, 2021

The OpenWRT forum, the community behind the open-source project for embedded operating systems based on Linux, disclosed a data breach. OpenWRT forum was compromised during the weekend and user data were stolen by intruders. The administrators of the forum disclosed the data breach with an announcement published on the forum.

Hacking 131

Hacking Data breaches Passwords Accountability 131

Security Affairs

JUNE 2, 2021

This leak exposed users’ email addresses, IP addresses, Facebook data, and more to potential attack. The leaked data numbers in the millions and was accessible to anyone who possessed the link. There was no need for a password or login credentials to access the information, and the data was not encrypted.

Data breaches 108

Data breaches Accountability Mobile Phishing 108

Security Affairs

JULY 30, 2019

While Capital One incident is making the headlines, another incident may have severe consequences, the Los Angeles Police Department (LAPD) also suffered a data breach. The City’s Information Technology Agency has added additional layers of security to guard against future events of this kind.” Pierluigi Paganini.

Data breaches 80

Data breaches Identity Theft Advertising Media 80

Security Affairs

MAY 10, 2022

“Frappo” acts as a Phishing-as-a-Service and enables cybercriminals the ability to host and generate high-quality phishing pages which impersonate major online banking, e-commerce, popular retailers, and online-services to steal customer data. Detailed analysis of the Phishing-As-A-Service Frappo is available here: [link].

Phishing 71

Phishing Banking Retail Financial Services 71

Security Affairs

JANUARY 22, 2024

You can check if your data was exposed in historic data breaches using the Cybernews data leak checker. Our team is working hard to update the tool and provide you with means to check if your data was exposed in the MOAB. According to the team, the consumer impact of the supermassive MOAB could be unprecedented.

Identity Theft 126

Identity Theft Data breaches Accountability Phishing 126

Security Affairs

DECEMBER 17, 2023

.” At this time, we are not aware of any exposure to the data that customers store in MongoDB Atlas.” ” The US firm urges customers to be vigilant for social engineering and phishing attacks. The company also recommends active multi-factor authentication (MFA), and regularly rotate their MongoDB Atlas passwords.

Social Engineering 118

Social Engineering Data breaches Cyber Attacks Accountability 118

Security Affairs

MAY 2, 2024

Threat actors breached the Dropbox Sign production environment and accessed customer email addresses and hashed passwords Cloud storage provider DropBox revealed that threat actors have breached the production infrastructure of the DropBox Sign eSignature service and gained access to customer information and authentication data.

Hacking 98

Hacking Authentication Passwords Accountability 98

Identity IQ

FEBRUARY 21, 2024

IdentityIQ The traditional method of safeguarding our accounts with passwords is facing growing challenges. As technology evolves, so do the methods employed by hackers, making passwords both inconvenient and increasingly susceptible to breaches. Passkey vs. Password – What’s the Difference? What is a Passkey?

Passwords 52

Passwords Authentication Accountability Phishing 52

CyberSecurity Insiders

MARCH 28, 2023

Understanding the FTC Safeguards Rule The FTC Safeguards Rule is a set of regulations that require covered financial institutions to develop, implement, and maintain an information security program designed to protect customer information. A WISP is a comprehensive plan that outlines how you will protect customer data.

Data breaches 125

Data breaches Authentication Risk Phishing 125

Security Affairs

DECEMBER 16, 2022

Social Blade is an American social media analytics platform, the company disclosed the security breach after a database containing company data was offered for sale on a hacker forum this week. “On The company pointed out that the credit card data was not exposed.

Data breaches 90

Data breaches Passwords Media Phishing 90

Security Affairs

JANUARY 2, 2020

The Poloniex cryptocurrency exchange is forcing users to reset their passwords following a data leak. . Another bad news for the community of the virtual currencies communities, the Poloniex cryptocurrency exchange has forced its users to reset their passwords following a data leak. . charlysatoshi. This is a real email!

Passwords 59

Passwords Cryptocurrency Data breaches Advertising 59

Security Affairs

NOVEMBER 15, 2023

Storing personal information in logs should be avoided, as it elevates their sensitivity level. User security log. Source: Cybernews The information exposed in this data leak could have been exploited for fraud, identity theft, phishing attempts, or as a source of data for meticulously targeted cyberattacks.

Passwords 102

Passwords Identity Theft Social Engineering Spyware 102

Security Affairs

APRIL 20, 2020

Over 267 million Facebook profiles are offered for sale on dark web sites and hacker forums, the dump is offered for £500 ($623) and doesn’t include passwords. Hackers are offering for sale over 267 million Facebook profiles for £500 ($623) on dark web sites and hacker forums, the archive doesn’t include passwords.

Data breaches 145

Data breaches Passwords Advertising Phishing 145

CyberSecurity Insiders

JULY 21, 2021

Ensure that account credentials are secure. According to Verizon’s 2021 Data Breach Investigations Report , credentials are the type of data cybercriminals most want to steal in a breach. Meanwhile, a quarter report that they’ve used generic passwords like “password” and “ABC123.”All

Social Engineering 145

Social Engineering Password Management Passwords Phishing 145

Thales Cloud Protection & Licensing

OCTOBER 24, 2022

Data breaches damage trust. Thales has worked together with the University of Warwick to produce the 2022 Consumer Trust Index survey, which includes some interesting findings: 33% of consumers globally have become victims of a data breach. Who most trusts digital platforms to hold and process personal data?

Security Awareness 71

Security Awareness Data breaches Social Engineering Phishing 71

Security Affairs

APRIL 28, 2024

A credential stuffing attack is a type of cyber attack where hackers use large sets of username and password combinations, typically obtained from previous data breaches, phishing campaigns, or info-stealer infections, to gain unauthorized access to user accounts on various online services.

VPN 109

VPN Accountability Firewall Data breaches 109

Hot for Security

MARCH 17, 2021

Fact: Zynga, the California-based social game developer, suffered a major data breach in 2019 when a malicious actor stole 218 million records belonging to “Words With Friends” players. If you were a victim of the Zynga data breach, you’ve probably changed the password for your account already.

Data breaches 105

Data breaches Passwords Accountability Media 105

Security Affairs

MARCH 16, 2020

Last week, Open Exchange Rates disclosed a data breach that exposed the personal information and hashed passwords for customers of its API service. ” reads the data breach notification. Stolen data could be used by threat actors to target organizations with spear- phishing campaigns.

Data breaches 105

Data breaches Passwords Advertising Accountability 105

SecureWorld News

JULY 3, 2023

The global average data breach cost is $4.24 Human error accounts for 95% of all data breaches. This means that most cyberattacks could be prevented by following simple cybersecurity best practices, such as using strong passwords, updating software, and avoiding phishing emails. million by 2022.

Cybercrime 89

Cybercrime Social Engineering Data breaches Cyber threats 89

Security Affairs

OCTOBER 2, 2021

According to a data breach notification letter filed with US state attorney general offices, the attackers with the knowledge of their username and password and phone number associated with the account, were able to steal funds bypassing the SMS-based authentication. ” reads the data breach notification letter. .

Cryptocurrency 116

Cryptocurrency Data breaches Authentication Accountability 116