Welcoming the Belgian Government to Have I Been Pwned

Presently sponsored by: Credential stuffing is currently the biggest threat to organisations, find out how you can protect your network right now with safepass.me

Supporting national CERTs with free API domain searches across their assets is becoming an increasing focus for Have I Been Pwned and today I’m happy to welcome the 19th government on board, Belgium. As of now, the Centre for Cyber Security Belgium (CCB) has full access to query all their

Continue reading Welcoming the Belgian Government to Have I Been Pwned

Welcoming the Dominican Republic Government to Have I Been Pwned

Presently sponsored by: Credential stuffing is currently the biggest threat to organisations, find out how you can protect your network right now with safepass.me

Continuing with the launch of the Have I Been Pwned Domain Search API to national government cyber agencies, I am very happy to welcome the first Latin American country on board, the Dominican Republic. Their National Cybersecurity Incident Response Team (CSIRT-RD) is the 18th national CERT that has free and

Continue reading Welcoming the Dominican Republic Government to Have I Been Pwned

Pwned Passwords, Open Source in the .NET Foundation and Working with the FBI

Presently sponsored by: Tired of poor coverage and false positives with your DAST scanner? Reinvent web application security. Try Probely today!

I’ve got 2 massive things to announce today that have been a long time in the works and by pure coincidence, have aligned such that I can share them together here today. One you would have been waiting for and one totally out of left field. Both these announcements are

Continue reading Pwned Passwords, Open Source in the .NET Foundation and Working with the FBI

Welcoming the Trinidad & Tobago Government to Have I Been Pwned

Presently sponsored by: Tired of poor coverage and false positives with your DAST scanner? Reinvent web application security. Try Probely today!

Today I’m very happy to welcome the first Caribbean government to Have I Been Pwned, Trinidad & Tobago. As of today, the Trinidad and Tobago Cyber Security Incident Response Team (TT-CSIRT) has full and free access to query their government domains and gain visibility into where they’ve impacted by data

Continue reading Welcoming the Trinidad & Tobago Government to Have I Been Pwned

Welcoming the Swedish Government to Have I Been Pwned

Presently sponsored by: Tired of poor coverage and false positives with your DAST scanner? Reinvent web application security. Try Probely today!

Today I’m very happy to welcome to 16th government to Have I Been Pwned, Sweden. The Swedish National Computer Security Incident Response Team CERT-SE now has full and free access to query all government domains via HIBP’s API and gain insights into the impact of data breaches on their government

Continue reading Welcoming the Swedish Government to Have I Been Pwned

Welcoming the Romanian Government to Have I Been Pwned

Presently sponsored by: CrowdSec – The open-source massively multiplayer firewall: respond to attacks & share signals across the community. Download it for free.

Today I’m very happy to announce the arrival of the 15th government to Have I Been Pwned, Romania. As of now, CERT-RO has access to query all Romanian government domains across HIBP and subscribe them for future notifications when subsequent data breaches affect aliases on those domains.

Romania joins a

Continue reading Welcoming the Romanian Government to Have I Been Pwned

Welcoming the Luxemburg Government CERT to Have I Been Pwned

Presently sponsored by: CrowdSec – The open-source massively multiplayer firewall: respond to attacks & share signals across the community. Download it for free.

Continuing my efforts to make more breach data available to governments after data breaches impact their domains, I’m very happy to welcome Luxemburg aboard Have I Been Pwned. More specifically, the CERT of the Grand Duchy of Luxemburg (govcert.lu) now has free API level access to query their national

Continue reading Welcoming the Luxemburg Government CERT to Have I Been Pwned

Data From The Emotet Malware is Now Searchable in Have I Been Pwned, Courtesy of the FBI and NHTCU

Presently sponsored by: CrowdSec – The open-source massively multiplayer firewall: respond to attacks & share signals across the community. Download it for free.

Earlier this year, the FBI in partnership with the Dutch National High Technical Crimes Unit (NHTCU), German Federal Criminal Police Office (BKA) and other international law enforcement agencies brought down what Europol rereferred to as the world’s most dangerous malware: Emotet. This strain of malware dates back as far as

Continue reading Data From The Emotet Malware is Now Searchable in Have I Been Pwned, Courtesy of the FBI and NHTCU

No honor among thieves: Scammers target stolen credit card hubs

Two online hubs for stolen credit cards found themselves on the receiving end of hack-and-leak operations last month. User data from the card store Swarmshop was posted to a different underground forum on March 17, exposing hundreds of thousands of compromised payment card records, security vendor Group-IB said in a report out Thursday. That follows news from last month that another forum, Carding Mafia, had been hacked, also exposing hundreds of thousands of user accounts. Word of the nefarious activity only is the latest drama to emerge from the cybercriminal underground. Another notorious forum, Joker’s Stash, recently shut down after attention from global law enforcement officials. In an unrelated case, a Russian man pleaded guilty in January to running an illicit hosting service meant to further fraud schemes. In the case of Swarmshop, it’s also actually the second time cybercriminals have targeted it. “While the source of the breach remains unclear, […]

The post No honor among thieves: Scammers target stolen credit card hubs appeared first on CyberScoop.

Continue reading No honor among thieves: Scammers target stolen credit card hubs