Category Archives: verizon

It’s 3 Billion! Yes, Every Single Yahoo Account Was Hacked In 2013 Data Breach

Posted on by

The largest known hack of user data in the history just got tripled in size.

Yahoo, the internet company that’s acquired by Verizon this year, now believes the total number of accounts compromised in the August 2013 data breach, which was disclosed in December last year, was not 1 billion—it’s 3 Billion.

Yes, the record-breaking Yahoo data breach affected every user on its service at the

Continue reading It’s 3 Billion! Yes, Every Single Yahoo Account Was Hacked In 2013 Data Breach→

All 3 billion of Yahoo’s users were impacted by 2013 hack

Posted on by

Every single one of Yahoo’s 3 billion users was impacted by a data breach in 2013, despite the company previously saying only 1 billion accounts were impacted, illustrating that the company is still wrestling with the full scope and details of the enormous breach. The company, now part of Verizon’s Oath, disclosed the information in a quiet update to its account security update page. “Based on an analysis of the information with the assistance of outside forensic experts, Yahoo has determined that all accounts that existed at the time of the August 2013 theft were likely affected,” Yahoo’s page reads. The new conclusion comes based on “recently obtained new intelligence,” according to a statement from the company. “While this is not a new security issue, Yahoo is sending email notifications to the additional affected user accounts. The investigation indicates that the user account information that was stolen did not include passwords in […]

The post All 3 billion of Yahoo’s users were impacted by 2013 hack appeared first on Cyberscoop.

Continue reading All 3 billion of Yahoo’s users were impacted by 2013 hack→

‘Confidential’ Verizon credentials, server logs left publicly exposed

Posted on by

Stop us if you’ve heard this before: Sensitive data was left publicly exposed on an Amazon Web Services S3 storage server owned by a billion-dollar corporation. This time the offender is Verizon Wireless who left data including server logs and internal credentials exposed, according to Kromtech Security Research Center. “Although no customers data are involved in this data leak, we were able to see files and data named ‘VZ Confidential’ and ‘Verizon Confidential’, some of which contained usernames, passwords and these credentials could have easily allowed access to other parts of Verizon’s internal network and infrastructure,” Bob Diachenko, a Kromtech executive, explained in a statement. “Another folder contained 129 Outlook messages with internal communications within Verizon Wireless domain, again, with production logs, server architecture description, passwords and login credentials.” The leak, first reported by ZDNet, is the latest in a long march of 2017 exposures highlighting just how easy it is […]

The post ‘Confidential’ Verizon credentials, server logs left publicly exposed appeared first on Cyberscoop.

Continue reading ‘Confidential’ Verizon credentials, server logs left publicly exposed→

Viacom left master keys exposed on a public AWS server

Posted on by

The American media giant Viacom left one gigabyte of sensitive files publicly exposed, according to researchers from the cybersecurity firm UpGuard. It’s the latest in a long string of incidents in which a wide spectrum of companies have found out that moving to cloud computing like Amazon Web Services can come with cybersecurity pitfalls resulting from misconfiguration mistakes. The exposed files included Viacom’s secret cloud keys — information that a hacker could have used to take control of the company’s cloud servers. “Such a scenario could enable malicious actors to launch a host of damaging attacks, using the IT infrastructure of one of the world’s largest broadcast and media companies,” UpGuard’s Dan O’Sullivan explained. “The potential nefarious acts made possible by this cloud leak could have resulted in grave reputational and business damages for Viacom, on a scale rarely seen.” UpGuard researcher Chris Vickery originally found the leak Aug. 30 and notified Viacom the […]

The post Viacom left master keys exposed on a public AWS server appeared first on Cyberscoop.

Continue reading Viacom left master keys exposed on a public AWS server→

Wyden demands answers from telecom giants, NSA over SS7 vulnerabilities

Posted on by

Democratic Sen. Ron Wyden is demanding to know how America’s largest telecommunications companies plan to stop hackers from exploiting vulnerabilities in an outdated mobile-data transfer framework that remains fundamental to how cellphones function. Wyden sent a series of letters Thursday to the chief executives of AT&T, Sprint, Verizon and T-Mobile to learn about their efforts to mitigate risks associated with weak points in Signaling System No 7, or SS7, a set of protocols that allow for different mobile phone networks to connect to one another. In addition, the Oregon senator sent a letter to the NSA director, Adm. Michael Rogers, requesting information about past attempts by adversaries to hack into SS7 for the purpose of spying on Americans, including military personnel, civilians and companies. The Daily Beast was the first to report on Wyden’s multiple letters. There are well-known security issues with SS7, including reported cases of intelligence agencies exploiting vulnerabilities in […]

The post Wyden demands answers from telecom giants, NSA over SS7 vulnerabilities appeared first on Cyberscoop.

Continue reading Wyden demands answers from telecom giants, NSA over SS7 vulnerabilities→

Half of Organizations Fail to Maintain PCI Compliance, Finds New Report

Posted on by

Nearly half of organizations that store, process or transmit card data are still failing to maintain PCI DSS compliance from year to year, reveal new statistics. According to the 2017 Verizon Payment Security Report, the number of enterprises becoming fully compliant is on an upward trend—growing almost five-fold since 2012. Last year, 55.4 percent of […]… Read More

The post Half of Organizations Fail to Maintain PCI Compliance, Finds New Report appeared first on The State of Security.

Continue reading Half of Organizations Fail to Maintain PCI Compliance, Finds New Report→