Equifax, Google, Alex Stamos, and Kaspersky – Paul’s Security Weekly #532

New Gmail security, who to blame for the Equifax breach, three billion compromised Yahoo accounts, embarrassing encryption ignorance, and why is Alex Stamos hunting down Russian political ads on Facebook? Paul’s Stories: Who is Alex Stamos, the man hunting down Russian political ads on Facebook? Google’s new Gmail security: If you’re a high-value target, you’ll […]

The post Equifax, Google, Alex Stamos, and Kaspersky – Paul’s Security Weekly #532 appeared first on Security Weekly.

Continue reading Equifax, Google, Alex Stamos, and Kaspersky – Paul’s Security Weekly #532

Equifax Breach Fallout: Your Salary History

In May, KrebsOnSecurity broke a story about lax security at a payroll division of big-three credit bureau Equifax that let identity thieves access personal and financial data on an unknown number of Americans. Incredibly, this same division makes it simple to access detailed salary and employment history on a large portion of Americans using little more than someone’s Social Security number and date of birth — both data elements that were stolen in the recent breach at Equifax. Continue reading Equifax Breach Fallout: Your Salary History

Equifax Hack Blamed On Single Employee

Equifax Hack Blamed On Single Employee

We wrote about the Equifax Hack, Data Breach and Leak last month, which happened due to a flaw in Apache Struts that for some reason hadn’t been patched.

Now it seems the CEO Rick Smith is basically placing the blame on a single employee that failed to pass a message on to the right people, rather than taking responsibility for an organisational failure. It’s also interesting there was a scheduled security scan not long after the flaw was disclosed and it wasn’t detected.

Read the rest of Equifax Hack Blamed On Single Employee now! Only available at Darknet.

Continue reading Equifax Hack Blamed On Single Employee

It’s 3 Billion! Yes, Every Single Yahoo Account Was Hacked In 2013 Data Breach

The largest known hack of user data in the history just got tripled in size.

Yahoo, the internet company that’s acquired by Verizon this year, now believes the total number of accounts compromised in the August 2013 data breach, which was disclosed in December last year, was not 1 billion—it’s 3 Billion.

Yes, the record-breaking Yahoo data breach affected every user on its service at the

Continue reading It’s 3 Billion! Yes, Every Single Yahoo Account Was Hacked In 2013 Data Breach

Fear Not: You, Too, Are a Cybercrime Victim!

Maybe you’ve been feeling left out because you weren’t among the lucky few hundred million or billion who had their personal information stolen in either the Equifax or Yahoo! breaches. Well buck up, camper: Both companies took steps to make you feel better today.

Yahoo! announced that, our bad!: It wasn’t just one billion users who had their account information filched in its record-breaking 2013 data breach. It was more like three billion (read: all) users. Meanwhile, big three credit bureau Equifax added 2.5 million more victims to its roster of 143 million Americans who had their Social Security numbers and other personal data filched in a breach earlier this year. At the same time, Equifax’s erstwhile CEO informed Congress that the breach was the result of even more bone-headed security than was first disclosed.

To those still feeling left out by either company after this spate of news, I have only one thing to say (although I feel a bit like a broken record in repeating this): Assume you’re compromised, and take steps accordingly. Continue reading Fear Not: You, Too, Are a Cybercrime Victim!

All 3 billion of Yahoo’s users were impacted by 2013 hack

Every single one of Yahoo’s 3 billion users was impacted by a data breach in 2013, despite the company previously saying only 1 billion accounts were impacted, illustrating that the company is still wrestling with the full scope and details of the enormous breach. The company, now part of Verizon’s Oath, disclosed the information in a quiet update to its account security update page. “Based on an analysis of the information with the assistance of outside forensic experts, Yahoo has determined that all accounts that existed at the time of the August 2013 theft were likely affected,” Yahoo’s page reads. The new conclusion comes based on “recently obtained new intelligence,” according to a statement from the company. “While this is not a new security issue, Yahoo is sending email notifications to the additional affected user accounts. The investigation indicates that the user account information that was stolen did not include passwords in […]

The post All 3 billion of Yahoo’s users were impacted by 2013 hack appeared first on Cyberscoop.

Continue reading All 3 billion of Yahoo’s users were impacted by 2013 hack

Equifax, former CEO reveal more details about the devastating breach

Mandiant has concluded the forensic part of its Equifax breach investigation, and the results are as follows: 2.5 million additional US consumers were potentially impacted, bringing the total to 145.5 million The initial estimate of some 100,000 Canadian citizens being impacted was incorrect: in the end, the information of some 8,000 Canadian consumers was compromised, as well as credit card information of some of them The number of affected UK consumers has still not been … More Continue reading Equifax, former CEO reveal more details about the devastating breach