Weekly Update 128

Presently sponsored by: Live Workshop! Watch the Varonis DFIR team investigate a cyberattack using our data-centric security stack

I’m not intentionally pushing these out later than usual, but events have just been such over the last few weeks that it’s worked out that way. This one really is a short one though as there hasn’t been a lot of newsworthy stuff going on this week, other than the

Continue reading Weekly Update 128→

Weekly Update 127

Presently sponsored by: Twilio: Want to uplevel your authentication? Need to get off risky SMS 2FA? Learn about how you can with the Authy API…

It was another travel week so another slightly delayed weekly update, but still plenty of stuff going on all the same. Along with a private Sydney workshop earlier on, I’m talking about some free upcoming NDC meetup events in Brisbane and Melbourne and I’d love to get a great turnout

Continue reading Weekly Update 127→

Weekly Update 126

Presently sponsored by: Live Workshop! Watch the Varonis DFIR team investigate a cyberattack using our data-centric security stack

Another week, another conference. This time it was Microsoft Ignite in Sydney and as tends to happen at these events, many casual meetups, chats, beers, selfies, delivery of HIBP stickers and an all-round good time, albeit an exhausting one. That’s why I’m a day late this week having finally arrived

Continue reading Weekly Update 126→

The Race to the Bottom of Credential Stuffing Lists; Collections #2 Through #5 (and More)

Presently sponsored by: Live Workshop! Watch the Varonis DFIR team investigate a cyberattack using our data-centric security stack

A race to the bottom is a market condition in which there is a surplus of a commodity relative to the demand for it. Often the term is used to describe labour conditions (workers versus jobs), and in simple supply and demand terms, once there’s so much of something all

Continue reading The Race to the Bottom of Credential Stuffing Lists; Collections #2 Through #5 (and More)→

Weekly Update 125

Presently sponsored by: Twilio: Learn what regulations like PSD2 mean for your business, and how Twilio can help you achieve secure, compliant transactions

I’m back home! It was an amazing trip in many ways, not least of which was the time it gave both Scott and myself to reflect on workload and managing lives which can be a bit of a never-ending series of commitments. To that effect, I’ve been backing off Twitter

Continue reading Weekly Update 125→

Weekly Update 124

Presently sponsored by: Live Workshop! Watch the Varonis DFIR team investigate a cyberattack using our data-centric security stack

I’m pumping this weekly update out a little bit later, pushing it just before I get on the plane back home to Australia. I’ve just wrapped up a week in London with Scott doing all things NDC including a couple of days of workshops and a couple of talks each.

Continue reading Weekly Update 124→

Weekly Update 123

Presently sponsored by: Twilio: Learn about why building your own 2FA solution is risky and expensive. Use our Authy API to add 2FA to your app in a matter of days.

So it’s been a bit of a crazy week. I got onto the plane in Australia on Thursday evening just as Europe was waking up to the news of the 773M email address credential stuffing list I loaded into HIBP. And then the flood began; blog comments, emails, tweets –

Continue reading Weekly Update 123→

Weekly Update 122

Presently sponsored by: Live Workshop! Watch the Varonis DFIR team investigate a cyberattack using our data-centric security stack

And then there was the biggest data breach to go into HIBP ever! I wrote that sentence from home just after publishing all the data, then I got on a plane…

Holy cow that’s a lot of emails! Hundreds upon hundreds of emails came in whilst on the way to

Continue reading Weekly Update 122→

The 773 Million Record “Collection #1” Data Breach

Presently sponsored by: Live Workshop! Watch the Varonis DFIR team investigate a cyberattack using our data-centric security stack

Many people will land on this page after learning that their email address has appeared in a data breach I’ve called “Collection #1”. Most of them won’t have a tech background or be familiar with the concept of credential stuffing so I’m going to write this post for the masses

Continue reading The 773 Million Record “Collection #1” Data Breach→

Weekly Update 121

Presently sponsored by: Twilio: Need to add 2FA quickly to your application? Use the Authy API to easily add more than just SMS 2FA within a matter of days.

Well, it’s one more sunny weekly update then snow time again so I’ve gone particularly beachy today. I’m also particularly breachy, talking about a massive combo list I’m presently pondering for inclusion in HIBP. These lists are frequently used for account takeover attacks against the likes of Spotify which is

Continue reading Weekly Update 121→