Collaborate Disseminate
Canada has proposed to pay $17.5 million to settle a privacy breach involving hundreds of thousands of individuals who applied for student loans. Under the proposed settlement, Canada would pay $60 to Canada Student Loan borrowers affected by the breac… Continue reading Canada Proposes $17.5M Settlement for Student Loan Privacy Breach
As organizations’ IT environments become increasingly more complex, so too does the software they install on their systems. Software developers and managers have embraced microservices written in node.js and Spring Boot, for example. These new ty… Continue reading OWASP Top 10 Most Critical Web Application Security Risks of 2017
Nissan Canada is in the process of notifying 1.13 million customers of a data breach that might have exposed their information. On 11 December, the automobile manufacturer’s Canadian headquarters discovered that both Nissan Canada Finance and INF… Continue reading Nissan Canada Notifies 1.1 Million Customers of Data Breach
We all know what a great year distributed denial-of-service (DDoS) attacks had in 2016. In the last four months, the web registered two significant DDoS campaigns. The first targeted Brian Krebs at a peak size of 620 Gbps. The second struck Dyn and, in… Continue reading 5 Notable DDoS Attacks of 2017
A U.S. district court has charged two Romanians with hacking 65 percent of the computers that control Washington DC’s surveillance camera network. An affidavit (PDF) filed with the United States District Court for the District of Columbia on 11 D… Continue reading Two Romanians Charged with Hacking 65% of DC Surveillance Camera Computers
“123456” has once again topped an annual list of the worst passwords created by users in North America and Western Europe. On 19 December, password management provider SplashData released the 2017 edition of its “Worst Passwords of th… Continue reading “123456” Still Reigns Supreme on Worst Passwords List
A Bitcoin exchange has announced it has filed for bankruptcy and will cease all operations after suffering its second hacking attack this year. On 19 December, South Korean exchange Youbit announced at 04:35 local time that bad actors had hacked its we… Continue reading Bitcoin Exchange Bids Adieu after Suffering Second Hack This Year
An oil transportation company discovered someone had installed Monero-mining software on its systems without its authorization. On 14 December, Vladimir Rushailo, vice president of the Russian state-owned transport monopoly Transneft, revealed that the… Continue reading Monero Mining Software Found on Oil Transport Company’s Systems
2017 was a busy year full of malware attacks and data breaches. Yes, these events caused (at least) their fair share disruption and damage. But as the year draws to a close, our attention should move beyond those immediate consequences in an effort to … Continue reading A Look Back at 2017 — Digital Security Lessons Learned
A new attack framework known as “Triton” is targeting industrial control systems (ICS) in an attempt to cause operational disruption and/or physical consequences. FireEye recently detected an incident at a critical infrastructure organizati… Continue reading New “Triton” Attack Framework Targeting ICS Systems