Serious Security: How to make sure you don’t miss bug reports!
Hey, let’s create a text file that lists our security contacts! We’ll call it… security DOT txt. Continue reading Serious Security: How to make sure you don’t miss bug reports!
Category Archives: data leak
Pegasus Spyware is Back, Twitter Hacker Arrested, 16 Year Old Printer Bug
Pegasus spyware and NSO Group are back in the news because of a data leak of 50,000 phone numbers, another “hacker” was arrested for the great Twitter hack of 2020, and how a 16 year old printer vulnerability is affecting millions of HP, Samsung, and X… Continue reading Pegasus Spyware is Back, Twitter Hacker Arrested, 16 Year Old Printer Bug
File security violations within organizations have spiked 134% as the world reopened for business
BetterCloud surveyed more than 500 IT and security professionals—and examined internal data from thousands of organizations and users—to understand their top challenges, priorities, and the magnitude of data loss and sensitive information leaks. “Last … Continue reading File security violations within organizations have spiked 134% as the world reopened for business
It’s time for companies to take a hard look at how they manage secrets
Leaked infrastructure secrets – code, credentials and keys – which are exposed accidentally or intentionally cost companies an average of $1.2 million in revenue per year, according to a report from 1Password. The report explores how organi… Continue reading It’s time for companies to take a hard look at how they manage secrets
Unprotected CVS database exposed sensitive customer searches
Researchers have discovered an unprotected, exposed online database with over a billion records belonging to American healthcare company CVS Health. The discovery, made by researcher Jeremiah Fowler and the WebsitePlanet research team, happened in Marc… Continue reading Unprotected CVS database exposed sensitive customer searches
Air India Among Victims of SITA Data Leak of 4.5 Million Users
Air India has admitted that it was one of the victims of the sophisticated cyber attack that targeted passenger service system SITA in February. According to an article published by Tribune India, personal data of around 4.5 Million users got leaked in… Continue reading Air India Among Victims of SITA Data Leak of 4.5 Million Users
Apple Mum on 128 Million Users Hack
September 21, 2015, happened to be a big day for Apple. Not because they had to launch a new product. It was because they had to choose if they wanted to announce 128 million Apple users were hacked or be silent about it. According to Ars Technica, res… Continue reading Apple Mum on 128 Million Users Hack
Experian API Leaked Credit Scores
After Experian fixed a weakness at a partner website that let anyone view credit scores for nearly every American by just inputting a name and address, questions remain about whether the same problem exists with other partners, and how widespread the … Continue reading Experian API Leaked Credit Scores
Data Breaches vs. Data Leaks, FBI Exchange Server Controversy
This week Tom and Kevin are back with an all new episode! Data breaches vs. recent data leaks, and the controversy over the FBI operation conducted to remove web shells from compromised Microsoft Exchange servers. ** Links mentioned on the show ** Face… Continue reading Data Breaches vs. Data Leaks, FBI Exchange Server Controversy
Using memory encryption in web applications to help reduce the risk of Spectre attacks
There’s nothing quite like an actual proof-of-concept to make everyone listen. I was pleased by the PoC released by Google security engineers Stephen Röttger and Artur Janc earlier this month – in a nutshell, they showed how the Spectre vulnerabi… Continue reading Using memory encryption in web applications to help reduce the risk of Spectre attacks