Troy Hunt

SEPTEMBER 24, 2022

next week 😎 Absolutely over the moon to formally make @Charlotte_Hunt_ a part of our family ❤️ 💍 pic.twitter.com/XfahXElboC — Troy Hunt (@troyhunt) September 21, 2022 References Optus disclosed a breach, but really didn't share much solid information about it.

Software 191

Software 191

Krebs on Security

FEBRUARY 9, 2024

Until earlier this week, the support website for networking equipment vendor Juniper Networks was exposing potentially sensitive information tied to customer products, including which devices customers bought, as well as each product’s warranty status, service contracts and serial numbers. Update, 11:01 a.m. Department of Defense.

Artificial Intelligence 272

Artificial Intelligence Healthcare Accountability Banking 272

Troy Hunt

OCTOBER 4, 2023

Read more: [link] — Have I Been Pwned (@haveibeenpwned) August 16, 2022 When you think about it now, the simple mechanics of purchasing either metaphorical or literal s**t online dictates collecting information that, if disclosed, leaves you anything but anonymous. I wonder what other information might be captured during a purchase.

Internet 331

Internet Internet Data breaches 331

Troy Hunt

MARCH 2, 2023

But don't worry, no financial information was compromised! References GunAuction.com got pwned (it only took them 2 months to tell absolutely nobody about it too) The Ticketcounter hackers have been pwned (3 kids, surprise surprise) The office acoustic work is finally complete!

Data breaches 218

Data breaches 218

Schneier on Security

JULY 20, 2022

It’s actually malware, and provides information back to the Russians: The hackers pretended to be a “community of free people around the world who are fighting russia’s aggression”—much like the IT Army. But the app they developed was actually malware.

Malware 260

Malware DDOS Hacking 260

Heimadal Security

NOVEMBER 3, 2023

ISO 27001, sometimes referred to as ISO/IEC 27001 is an international standard that addresses organizational information security.

Data privacy 96

Data privacy Information Security Cybersecurity 96

Krebs on Security

APRIL 3, 2024

“Antibot” refers to functionality that attempts to evade automated detection techniques, keeping a phish deployed as long as possible. However, DomainTools also found the hosted version of HeartSender service leaks an extraordinary amount of user information that probably is not intended to be publicly accessible.

Phishing 221

Phishing Cybercrime Malware Advertising 221

Security Boulevard

JANUARY 22, 2023

Email security refers to the measures taken to protect email communications from unauthorized access, use, disclosure, disruption, modification, or destruction. Image Source What Is Email Security and Why Is It Important?

Technology 135

Technology 135

Security Affairs

MAY 6, 2024

Resecurity found a massive leak involving the exposure of personally identifiable information (PII) of over five million citizens of El Salvador on the Dark Web.

Identity Theft 109

Identity Theft Data breaches Cybercrime Government 109

The Last Watchdog

JUNE 12, 2023

Information privacy and information security are two different things. Related: Tapping hidden pools of security talent Information privacy is the ability to control who (or what) can view or access information that is collected about you or your customers. They take all this private information, and then they sell it.

Information Security 202

Information Security Data breaches CISO Encryption 202

Schneier on Security

NOVEMBER 8, 2023

These ideas, which we’ll refer to in the aggregate as “decoupling,” allow us to rethink both security and privacy. The first is organizational decoupling: dividing private information among organizations such that none knows the totality of what is going on. Here’s the gist.

Encryption 257

Encryption Authentication Government Software 257

Schneier on Security

JANUARY 21, 2022

Health customs forms which transmit passport details, demographic information, and medical and travel history are also vulnerable. However, as the app collects a range of highly sensitive medical information, it is unclear with whom or which organization(s) it shares this information.

Surveillance 329

Surveillance Encryption Wireless Government 329

Heimadal Security

NOVEMBER 1, 2023

The amendment to the Safeguard Rule refers to security incidents that impact more than 500 people. Federal Trade Commission (FTC) requires all non-banking financial institutions to report data breaches to FTC within 30 days.

Banking 91

Banking Consumer Protection Data breaches Cybersecurity 91

Security Affairs

DECEMBER 18, 2023

Info stealers, also known as information stealers, are a type of malicious software (malware) designed to covertly collect sensitive and personal information from a victim’s computer or network. This data may include usernames, passwords, credit card numbers, social security numbers, and other sensitive information.

Banking 117

Banking Cybercrime Malware Accountability 117

The Hacker News

MAY 1, 2023

A Vietnamese threat actor has been attributed as behind a "malverposting" campaign on social media platforms to infect over 500,000 devices worldwide over the past three months to deliver variants of information stealers such as S1deload Stealer and SYS01stealer.

Media 96

Media 96

Krebs on Security

FEBRUARY 1, 2024

However, the document refers to the victim in this case only by the name “Victim 1.” CISA’s alert on Scattered Spider says they are a cybercriminal group that targets large companies and their contracted information technology (IT) help desks. This story will be updated in the event any of them respond. 2, 2024.

Cryptocurrency 236

Cryptocurrency Ransomware Retail Government 236

Krebs on Security

AUGUST 16, 2022

Last month, they sold customer information on 36 million customers of the Mexican phone company Telcel ; in March, they sold 33,000 images of Mexican IDs — with the front picture and a selfie of each citizen. “The set of information referred to is inaccurate and outdated, and does not put our users and customers at risk.”

Data breaches 261

Data breaches Banking Cybercrime Marketing 261

The Hacker News

MARCH 3, 2023

reference library specification that could potentially lead to information disclosure or privilege escalation. A pair of serious security defects has been disclosed in the Trusted Platform Module (TPM) 2.0

IoT 96

IoT 96

Troy Hunt

NOVEMBER 24, 2019

Speaking of delivering, I actually got 3 blog posts out this week which I've not done for a while, the most significant of which relates to "data enrichment" companies (also often referred to as "data aggregators").

VPN 218

VPN Surveillance Banking Data breaches 218

Heimadal Security

SEPTEMBER 16, 2022

These phrases refer to maintaining the security of both systems and sensitive information by controlling who has access and what they are permitted […]. The post What Is Privileged Identity Management (PIM)? appeared first on Heimdal Security Blog.

Technology 111

Technology 111

Krebs on Security

SEPTEMBER 18, 2023

The victim shaming website operated by the cybercriminals behind 8Base — currently one of the more active ransomware groups — was until earlier today leaking quite a bit of information that the crime group probably did not intend to be made public. by making a “POST” request). The homepage for Jcubegroup[.]com

Ransomware 243

Ransomware Accountability Encryption Internet 243

Troy Hunt

JANUARY 29, 2024

Still just a kid, at least in the colloquial fashion in which we refer to youngsters as when we get a bit older, but surely still legally a minor when he chose to begin collecting data breaches. You may only search information about yourself, or those you are authorized in writing to do so.

Data breaches 275

Data breaches Passwords Advertising Personal Security 275

InfoWorld on Security

AUGUST 4, 2022

A zero-knowledge proof, also known as ZKP protocol, attempts to establish a fact between parties with a minimum amount of information exchange. In cryptography, it is intended to limit the transfer of information during authentication activities. The first paper to propose the idea appeared in a few variations in the late 1980s.

Authentication 114

Authentication 114

Pen Test Partners

JANUARY 31, 2024

With that control disabled an attacker could potentially modify aircraft performance data or adjust airport information e.g. runway lengths. An attacker could use this weakness to intercept and decrypt potentially sensitive information in transit. With ATS disabled, insecure communication happens. Changing this risks in-flight issues.

Hacking 121

Hacking Engineering Encryption Software 121

Krebs on Security

JULY 1, 2020

But absent any additional information from the victim company or their partners who may be affected by the attack, these kinds of stories and blog posts look a great deal like ambulance chasing and sensationalism.

Ransomware 308

Ransomware Cybercrime Encryption Malware 308

Heimadal Security

JUNE 22, 2023

The hacking group known as APT37, also referred to as StarCruft, Reaper, or RedEyes, has employed a new malware called FadeStealer to steal information. This sophisticated malware incorporates a ‘wiretapping’ feature that enables the threat actors to eavesdrop on and record conversations through victims’ microphones.

Malware 81

Malware Hacking Cybersecurity 81

CSO Magazine

MAY 22, 2022

Cryptography is the art of keeping information secure by transforming it into form that unintended recipients cannot understand. Cryptography definition.

Encryption 135

Encryption Information Security 135

Security Affairs

FEBRUARY 2, 2022

Security researcher discovered an Information Disclosure vulnerability in Brave browser and reported it through the HackerOne platform. Security researcher Kirtikumar Anandrao Ramchandani discovered an Information Disclosure vulnerability in the Brave Browser and reported it to the company through the HackerOne platform.

Hacking 93

Hacking Information Security 93

Heimadal Security

MAY 5, 2023

Often abbreviated as IAM, it refers to a collection of technologies, policies, and procedures that assist organizations in managing and verifying the identities of individuals and devices, granting access to data and other resources, and keeping track of who has accessed what information.

Technology 78

Technology Cybersecurity 78

The Last Watchdog

APRIL 1, 2024

Forrester’s report lays out a roadmap for CIOs, CISOs and privacy directors to drive this transformation – by weaving informed privacy and security practices into every facet of their business; this runs the gamut from physical and information assets to customer experiences and investment strategies.

Cybersecurity 235

Cybersecurity CISO B2B Risk 235

SecureBlitz

SEPTEMBER 28, 2022

This post will show you why ISO 27001 is important for small businesses… Information security refers to the measures taken to keep data secure from unauthorized access or changes. Therefore, […].

Small Business 82

Small Business Information Security Cybersecurity Education 82

Security Affairs

DECEMBER 24, 2023

The term digital skimming refers to the criminal practice of harvesting payment information of visitors of a website during checkout. The operation is part of EMPACT priority, a law enforcement activity targeting the criminals behind online fraud schemes. ” reads the press release published by Europol.

Hacking 119

Hacking Cybercrime Information Security 119

Security Affairs

DECEMBER 7, 2023

Nissan Oceania refers to the regional operations of the Nissan Motor Company in the Oceania region, which includes Australia and New Zealand. Nissan is working with its global incident response team and relevant stakeholders to investigate the extent of the incident and whether any personal information has been accessed.”

Cyber Attacks 117

Cyber Attacks Financial Services Scams Data breaches 117

Security Affairs

DECEMBER 22, 2023

You will find docs with personal information of their employees in the archives and much other interested stuff like NDAs, projects, information about clients and partners etc. Nissan Oceania refers to the regional operations of the Nissan Motor Company in the Oceania region, which includes Australia and New Zealand.

Ransomware 128

Ransomware Data breaches Financial Services Scams 128

CSO Magazine

JUNE 28, 2021

Open source intelligence (OSINT) is the practice of collecting information from published or otherwise publicly available sources. Open source in this context doesn't refer to the open-source software movement , although many OSINT tools are open source; instead, it describes the public nature of the data being analyzed.

Software 125

Software 125

Security Affairs

MARCH 14, 2024

Nissan Oceania refers to the regional operations of the Nissan Motor Company in the Oceania region, which includes Australia and New Zealand. Nissan is working with its global incident response team and relevant stakeholders to investigate the extent of the incident and whether any personal information has been accessed.”

Data breaches 96

Data breaches Identity Theft Financial Services Cybercrime 96

Security Affairs

FEBRUARY 26, 2024

“IntelBroker informed Hackread.com that they successfully executed the data breach by exploiting a vulnerability within one of the CRM systems utilized by the Los Angeles International Airport.” Company names Plane model numbers Tail numbers (Refers to an identification number painted on an aircraft tail).

Hacking 121

Hacking Data breaches Cybercrime Information Security 121