Dow Jones Watchlist of risky businesses exposed on public server

A company with access to the Dow Jones Watchlist of risky people and businesses left it on a public AWS server without a password. Continue reading Dow Jones Watchlist of risky businesses exposed on public server

Instagram data from 14 million profiles found in insecure database, researcher says

Information about more than 14 million Instagram accounts is being kept in an insecure database that could render users vulnerable to hackers, a security researcher told CyberScoop Friday. Data including users’ profile names, stored links to profile pictures and their Instagram ID is available in the database, which researcher Oliver Hough found on the Shodan web scanning service. The database, physically located in the U.K., includes 14,526,602 entries, according to a screenshot Hough tweeted Friday. Entries also have empty fields for home addresses and telephone numbers, he said. It’s not clear who is logging the information. But Hough suggested a third party could be scraping Instagram and storing public data for analysis later, either for targeted marketing or another purpose. He suggested the information could be combined with unrelated databases of stolen passwords, which hackers could correlate with the usernames leaked here to try to infiltrate victims’ accounts. “On the black hat side […]

The post Instagram data from 14 million profiles found in insecure database, researcher says appeared first on CyberScoop.

Continue reading Instagram data from 14 million profiles found in insecure database, researcher says

Japanese government will try to hack its citizens’ IOT devices

Japan will hack citizens’ IoT devices to mop up cyber security before the Olympics. Don’t like the notion? Here’s how to lock ’em down! Continue reading Japanese government will try to hack its citizens’ IOT devices

State agency exposes 3TB of data, including FBI info and remote logins

Oklahoma’s Department of Securities (ODS) exposed 3TB of files in plain text containing sensitive data on the public internet this month. Continue reading State agency exposes 3TB of data, including FBI info and remote logins