data breach – Page 11 – PossibleThreat Articles

US charges four Chinese military members with Equifax hack

February 12, 2020 0 Comments Breach Notification, china, chinese military, credit monitoring, data breach, data loss, Equifax, financial data, identity theft, Law & order, PII, Privacy, rce, security threats

Credit to Author: Lisa Vaas| Date: Wed, 12 Feb 2020 11:48:41 +0000

The indictment suggests the hack was part of a series of major data thefts organized by Chinese military and intelligence agencies.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/2euIheG1QVA” height=”1″ width=”1″ alt=””/>

Security Sophos

Data about inmates and jail staff spilled by leaky prison app

February 12, 2020 0 Comments amazon, amazon s3, amazon simple storage service (s3) bucket, Cloud, cloud storage, correctional facility, correctional risk services, crs technologies, Cryptography, data breach, data leak, data loss, exposed database, google cloud, inmates, jailcore, jailhouse, Law & order, PII, port scanning, prescriptions, prison, prisoners, Privacy, privacy policy, s3 bucket, security threats, sha-256, ssl certification, terms of service, tos, vpnMentor, web mapping

Credit to Author: Lisa Vaas| Date: Wed, 12 Feb 2020 10:16:24 +0000

A web-mapping project came across detainees’ prescriptions and other PII that could be used by identity thieves to victimize prisoners.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/ypFJWLIWMOE” height=”1″ width=”1″ alt=””/>

QuickHeal Security

A sloppy click can exfiltrate your important data!

February 3, 2020 0 Comments 90daydemopurplecdr2019-analysis-software.exe, cdo library, data breach, email, exfiltration, gjs.tmp, info-stealer, information stealer, jumpshare, keylogger, malware, mshtinr.dll, mshtinr.exe, online privacy, phishing, port 465, Privacy, Security, smtps protocol, Spam, stp media, stpmedia.exe, totallyanonymous.com’

Credit to Author: Anant Pulgam| Date: Mon, 03 Feb 2020 09:17:12 +0000

Phishing email still remains one of the top malware propagation medium. Recently, we came across an interesting phishing email containing couple of Jumpshare links pointing to malicious components. Jumpshare is an online file sharing service and often cyber criminals abuse these kind of file sharing services. Upon clicking on one of the links in…

Security Sophos

Trello exposed! Search turns up huge trove of private data

January 30, 2020 0 Comments craig jones, data breach, data loss, exposed data, gmail passwords, Privacy, public boards, public data, security threats, shadow it, trello

Credit to Author: John E Dunn| Date: Thu, 30 Jan 2020 17:07:16 +0000

A surprising number of users seem to be setting Trello boards, and their often highly sensitive content, to ‘public’.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/xSnZVFqX8_4″ height=”1″ width=”1″ alt=””/>

MalwareBytes Security

Securing the MSP: their own worst enemy

January 30, 2020 0 Comments advanced persistent threat, advanced persistent threats, APT, breach, credential management, credentials, data breach, Hacking, managed service provider, msp, msps, Opinion, phishing

Credit to Author: William Tsing| Date: Thu, 30 Jan 2020 16:00:00 +0000

Behind each cyberattack on the MSP is typically a system left unpatched, asset management undone, security officer not hired, or board who sees investment in security as a cost center rather than a long-term investment.

Categories:

Opinion

Tags: advanced persistent threat advanced persistent threats APT breach credential management credentials data breach hacking managed service provider MSP MSPs phishing

(Read more…)

The post Securing the MSP: their own worst enemy appeared first on Malwarebytes Labs.

QuickHeal Security

Ako Ransomware targeting businesses using RaaS

January 24, 2020 0 Comments computer security terms, Cyber crime, Cyber safety, data breach, email, encryption, enterprise, malware, Ransomware, Security, Spam, Uncategorized

Credit to Author: Shriram Munde| Date: Fri, 24 Jan 2020 11:00:51 +0000

Ako Ransomware targeting businesses using RaaS Quick Heal security researchers recently observed ransomware that uses RaaS (Ransomware as a Service) which is a subpart of MaaS (Malware as a Service). Before delving into the AKO ransomware or RaaS, one must understand what Malware as a Service means, as it is…

Security Sophos

Privacy watchdog throws wider net to protect children online

January 24, 2020 0 Comments age appropriate design code, children, children online, children's privacy, data breach, elizabeth denham, grooming, ico, Information Commissioner's Office, Instagram, Law & order, location data, molly russell, molly russell foundation, PII, predators, Privacy, privacy code, self-harm, social media, Social networks, stalking, suicide, Tracking

Credit to Author: Lisa Vaas| Date: Fri, 24 Jan 2020 10:09:18 +0000

A new, comprehensive code will compel online services to put children’s health and safety before data-collecting profits.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/85dspOTlfAY” height=”1″ width=”1″ alt=””/>

Security Sophos

Big Microsoft data breach – 250 million records exposed

January 22, 2020 0 Comments data breach, elastic search, Microsoft

Credit to Author: Paul Ducklin| Date: Wed, 22 Jan 2020 17:42:47 +0000

Microsoft has today announced a data breach that affected one of its customer databases.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/Cst7PO49oB0″ height=”1″ width=”1″ alt=””/>

Security Sophos

Regus spills data of 900 staff on Trello board set to ‘public’

January 22, 2020 0 Comments data breach, data loss, exposed data, misconfiguration, Privacy, regus, trello

Credit to Author: John E Dunn| Date: Wed, 22 Jan 2020 10:44:23 +0000

Another company has ended up accidentally spilling sensitive data from business collaboration tool Trello.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/2lrLx8iOU38″ height=”1″ width=”1″ alt=””/>

Security Sophos

FBI seizes credentials-for-sale site WeLeakInfo.com

January 20, 2020 0 Comments credentials-for-sale, data breach, data leak, data loss, FBI, Law & order, netherlands, northern ireland, security threats, stolen credentials, stolen data, uk, US, weleakinfo.com

Credit to Author: Danny Bradbury| Date: Mon, 20 Jan 2020 12:21:18 +0000

The FBI has seized the domain for WeLeakInfo.com, a site that sold breached data records, after a multinational effort by law enforcement.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/XbN7y20SIRI” height=”1″ width=”1″ alt=””/>