amazon – Page 3 – PossibleThreat Articles

Ring makes 2FA mandatory to keep hackers out of your doorbell account

February 20, 2020 0 Comments 2-factor Authentication, 2fa, amazon, credential stuffing, Data Sharing, doorbell, Internet of Things, IoT, neighbors, password reuse, ring, security threats, video doorbell, webcam

Credit to Author: Lisa Vaas| Date: Thu, 20 Feb 2020 10:03:25 +0000

Amazon is following Google’s lead by forcing all users to use two-factor authentication when logging into their Ring accounts.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/ZP4hOfnjH24″ height=”1″ width=”1″ alt=””/>

Security Sophos

Sensitive plastic surgery images exposed online

February 18, 2020 0 Comments amazon, Amazon web services, AWS, aws bucket, Cloud Security, cloud storage, data leak, data loss, data protection, exposed data, medical data, medical images, next motion, online privacy, personally identifiable information, PII, plastic surgery, Privacy, security threats, vpnMentor

Credit to Author: Danny Bradbury| Date: Tue, 18 Feb 2020 11:04:56 +0000

Researchers at VPN advisory company vpnMentor have found yet another online data exposure caused by a misconfigured cloud database.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/3bHx9OL42rQ” height=”1″ width=”1″ alt=””/>

Security Sophos

Data about inmates and jail staff spilled by leaky prison app

February 12, 2020 0 Comments amazon, amazon s3, amazon simple storage service (s3) bucket, Cloud, cloud storage, correctional facility, correctional risk services, crs technologies, Cryptography, data breach, data leak, data loss, exposed database, google cloud, inmates, jailcore, jailhouse, Law & order, PII, port scanning, prescriptions, prison, prisoners, Privacy, privacy policy, s3 bucket, security threats, sha-256, ssl certification, terms of service, tos, vpnMentor, web mapping

Credit to Author: Lisa Vaas| Date: Wed, 12 Feb 2020 10:16:24 +0000

A web-mapping project came across detainees’ prescriptions and other PII that could be used by identity thieves to victimize prisoners.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/ypFJWLIWMOE” height=”1″ width=”1″ alt=””/>

Security Sophos

UN report alleges that Saudi crown prince hacked Jeff Bezos’s phone

January 23, 2020 0 Comments amazon, Celebrities, crown prince, Hacked, jamal khashoggi, jeff bezos, malware, mbs, mohammed bin salman, pegasus, phone hack, saudi arabia, security threats, whatsapp

Credit to Author: Lisa Vaas| Date: Thu, 23 Jan 2020 11:38:10 +0000

Digital forensic evidence points to the phone’s massive, months-long data egress having likely been triggered by Pegasus mobile spyware.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/cudbgBhrFvg” height=”1″ width=”1″ alt=””/>

Security Sophos

Apps are sharing more of your data with ad industry than you may think

January 16, 2020 0 Comments adcolony, ads, advertising, amazon, Android, app privacy, appnexus, appsflyer, behavioral ad industry, braze, bucksense, California Consumer Privacy Act, CCPA, clue, data brokers, digital marketing bill of rights for minors, drug use, facebook, fluxloop, fysical, GDPR, Google, gps data, grindr, happn, leanplum, location data, Marketing, Mobile, mobile ad platforms, mobile ads, mobile marketing, muslim: qibla finder, muslims, my talking tom 2, mydays, neura, norwegian consumer council, okcupid, openx, perfect365, PII, placer, places/fouraquare, political views, Privacy, profiling, pubnative, qibla finder, receptiv, religious preferences, safegraph, sexual orientation, smaato, targeted advertising, tinder, twitter, unacast, verve, vungle, wave keyboard

Credit to Author: Lisa Vaas| Date: Thu, 16 Jan 2020 13:43:44 +0000

Apps like Grindr, Tinder and Happn are (over-)sharing data about sexuality, religion, and location with a shadowy network of data brokers. And it’s not just dating apps that are doing it…<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/NPeC4ksaHAY” height=”1″ width=”1″ alt=””/>

MalwareBytes Security

Please don’t buy this: smart doorbells

December 9, 2019 0 Comments amazon, august view, bitdefender, black friday, christmas, cyber monday, el monte, Gizmodo, google nest hello, jeff bezos, motherboard, please don't buy this, ring, senator ed markey, senator ron wyden, smart doorbells, the intercept, vice

Credit to Author: David Ruiz| Date: Mon, 09 Dec 2019 17:15:56 +0000

This holiday season, please reconsider buying smart doorbells to protect your online shipments. The cybersecurity and privacy risks are too severe.

Categories:

Please don’t buy this

Tags: amazon August View Bitdefender black friday Christmas cyber monday El Monte Gizmodo Google Nest Hello Jeff Bezos Motherboard Ring Senator Ed Markey Senator Ron Wyden smart doorbells The Intercept Vice

(Read more…)

The post Please don’t buy this: smart doorbells appeared first on Malwarebytes Labs.

MalwareBytes Security

A week in security (December 2 – December 8)

December 9, 2019 0 Comments A week in security, amazon, bank, buckets, phish, week in security, weekly roundup, xmas

Credit to Author: Malwarebytes Labs| Date: Mon, 09 Dec 2019 16:47:06 +0000

A roundup of the previous week’s security blogs and other news, including a new ransomware, an explanation of containerization, fixing leaky buckets, jewelry heists, and more.

Categories:

A week in security

Tags: amazon bank buckets phish week in security weekly roundup xmas

(Read more…)

The post A week in security (December 2 – December 8) appeared first on Malwarebytes Labs.

Security Sophos

Ad fraud: Fake local news sites are rolling in the dough

December 3, 2019 0 Comments ad fraud, ads, amazon, bots, click fraud, fake news, Google, google ad network, google ads, seo

Credit to Author: Lisa Vaas| Date: Tue, 03 Dec 2019 11:11:41 +0000

“forbesbusinessinsider.com?” Names like that sound close enough to real news domains to pass, but bots are the only ones visiting.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/qLSQ70kb1xM” height=”1″ width=”1″ alt=””/>

Security Sophos

Basta un laser per hackerare gli assistenti vocali di smartphone e altoparlanti

November 28, 2019 0 Comments amazon, Per gli utenti, voice assistant

Credit to Author: Sophos Italia| Date: Thu, 14 Nov 2019 14:42:17 +0000

Come ben sanno gli appassionati di tecnologia, Google Assistant, Amazon Alexa, Apple Siri e Facebook Portal sono piattaforme Internet basate sull’intelligenza artificiale che gli utenti controllano emettendo comandi vocali tramite smartphone o altoparlanti domestici “intelligenti”. O almeno è quello che abbiamo pensato fino a questa settimana, quando un team americano-giapponese ha pubblicato un documento di […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/nsLEHM3qvh8″ height=”1″ width=”1″ alt=””/>

Security Sophos

Smartphone and speaker voice assistants can be hacked using lasers

November 6, 2019 0 Comments Alexa, amazon, facebook, facebook portal, Google, Google Home, google voice assistant, lasers, security threats, signal injection, Siri, vulnerability

Credit to Author: John E Dunn| Date: Wed, 06 Nov 2019 13:03:16 +0000

A US-Japanese team published a research paper which confirms an interesting and under-estimated possibility – these devices will also accept “signal injection” commands sent to them using pulses of laser light over distances of a hundred metres or more.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/_7WhfQGzceQ” height=”1″ width=”1″ alt=””/>