Security Affairs

AUGUST 29, 2018

Qualys experts discovered that OpenSSH is still vulnerable to Oracle attack, it is affected by the CVE-2018-15919 flaw at least since September 2011. Security experts from Qualys discovered that OpenSSH is still vulnerable to Oracle attack, it is affected by the CVE-2018-15919 flaw at least since September 2011. Pierluigi Paganini.

Authentication 93

Authentication Passwords Libraries Security 93

Data Breach Today

MARCH 20, 2020

Cybereason CSO Sam Curry on Business Continuity and Reducing Risk Cybereason CSO Sam Curry is no stranger to crisis - he was on the team that responded to the RSA breach in 2011. But the COVID-19 pandemic brings an unprecedented challenge: How do you manage business continuity and reduce risk with a 100 percent remote workforce?

Risk 243

Risk Security 243

Schneier on Security

MAY 27, 2021

Really good long article about the Chinese hacking of RSA, Inc. They were able to get copies of the seed values to the SecurID authentication token, a harbinger of supply-chain attacks to come.

Authentication 117

Authentication Cybersecurity 117

Krebs on Security

APRIL 14, 2023

KrebsOnSecurity received a nice bump in traffic this week thanks to tweets from the Federal Bureau of Investigation (FBI) and the Federal Communications Commission (FCC) about “ juice jacking ,” a term first coined here in 2011 to describe a potential threat of data theft when one plugs their mobile device into a public charging kiosk.

Communications 315

Communications Access Risk Education 315

Krebs on Security

JUNE 28, 2022

AWMproxy, the storefront for renting access to infected PCs, circa 2011. In 2011, researchers at Kaspersky Lab showed that virtually all of the hacked systems for rent at AWM Proxy had been compromised by TDSS (a.k.a An example of a cracked software download site distributing Glupteba. Image: Google.com.

Passwords 282

Passwords Analytics Manufacturing Access 282

Data Breach Today

MAY 28, 2020

Millions of Older Credentials Apparently Used in Credential-Stuffing Attacks The Russian blogging platform LiveJournal confirmed this week that it suffered several brute-force attacks in 2011 and 2012. But it insists that the 26 million usernames and passwords that are now available for sale on darknet forums came from other sources.

Sales 191

Sales Passwords IT 191

Data Breach Today

JULY 30, 2019

Art Coviello, former chair of RSA, which was breached in 2011, shares first-hand insight on steps the breached institution and its CEO should be taking now. The Capital One data breach is in early stages of remediation.

Data breaches 168

Data breaches IT 168

WIRED Threat Level

MAY 20, 2021

In 2011, Chinese spies stole the crown jewels of cybersecurity—stripping protections from firms and government agencies worldwide. Here’s how it happened.

Cybersecurity 145

Cybersecurity Government IT Security 145

Krebs on Security

FEBRUARY 22, 2022

But Missouri prosecutors now say they will not pursue charges following revelations that the data had been exposed since 2011 — two years after responsibility for securing the state’s IT systems was centralized within Parson’s own Office of Administration. Missouri Gov. Mike Parson (R), vowing to prosecute the St.

Education 360

Education Access Security Communications 360

Krebs on Security

MAY 13, 2024

NEROWOLFE A search on the ICQ number 669316 at Intel 471 shows that in April 2011, a user by the name NeroWolfe joined the Russian cybercrime forum Zloy using the email address d.horoshev@gmail.com , and from an Internet address in Voronezh, RU. 2011 said he was a system administrator and C++ coder.

Ransomware 277

Ransomware Encryption Systems administration Government 277

Krebs on Security

DECEMBER 3, 2021

com back in 2011, and sanjulianhotels[.]com ” A report on Palvisa (PDF) purchased from Rekvizitai.vz — an official online directory of Lithuanian companies — says Palvisa was established in 2011 by a Vytautaus Mockus, using the phone number 86.7273687 , and the email address bo3dom@gmail.com. com (2017).

Access 324

Access Ransomware Passwords Sales 324

Security Affairs

FEBRUARY 6, 2024

“According to the indictment, between 2011 and July 2017, Aliaksandr Klimenka, 42, allegedly controlled BTC-e, a digital currency exchange, with Alexander Vinnik and others.” The authorities reported that since 2011, 7 million Bitcoin had gone into the BTC-e exchange and 5.5 ” reads the press release published by DoJ.

IT 136

IT Information Security Security 136

WIRED Threat Level

SEPTEMBER 27, 2019

Any iPhone device from 2011 to 2017 could soon be jailbroken, thanks to an underlying flaw that there's no way to patch.

Security 111

Security 111

Security Affairs

MAY 31, 2020

This report identifies and analyzes how proactive detection in the EU is evolved between 2011 and 2019. Survey among incident response teams in Europe; Comparison with the 2011 survey. Among the goals of the project there is the exploration of new areas that could help to improve operational cooperation and information sharing.

Cybersecurity 142

Cybersecurity Security IT Information Security 142

Krebs on Security

AUGUST 26, 2020

O’Neill said he opened the investigation into Ngo’s identity theft business after reading about it in a 2011 KrebsOnSecurity story, “ How Much is Your Identity Worth? As I wrote of Ngo’s service back in November 2011: “Superget lets users search for specific individuals by name, city, and state.

Computer and Electronics 360

Computer and Electronics Access IT Data collection 360

Krebs on Security

JUNE 21, 2023

has been associated with the user Kerens on the Russian hacking forum Exploit from 2011 to the present day. The very first post by Kerens on Exploit in 2011 was a negative review of a popular crypting service that predated Cryptor[.]biz .” Meanwhile, the Jabber address masscrypt@exploit.im

e-Delivery 251

e-Delivery Passwords Cybersecurity Sales 251

Krebs on Security

MARCH 17, 2021

Many other emails poured in, including numerous “bounced” messages delivered in reply to missives from Cashedge.com , a money transfer service that Fiserv acquired in 2011. Emails get bounced — or returned to the sender — when they are sent to an address that doesn’t exist or that is no longer active.

e-Discovery 338

e-Discovery Phishing Communications IT 338

The Last Watchdog

FEBRUARY 24, 2022

Yes, and that is what Sony exactly lost when they were hacked and the personal info of every one of its customers leaked in 2011. Huge sum, right? Related: Supply-chain hacks prove worrisome. This came to the news because Sony is one of the biggest names on the planet.

Security 233

Security Compliance Retail Risk 233

Krebs on Security

JULY 20, 2021

In 2011, KrebsOnSecurity dissected “SevAntivir” — Severa’s eponymous fake antivirus affiliate program — showing it was used to deploy new copies of the Kelihos spam botnet. Severa ran several affiliate programs that paid cybercriminals to trick people into installing fake antivirus software.

Government 332

Government Phishing Communications IT 332

Security Affairs

MARCH 18, 2024

This isn’t the first incident suffered by IMF, the agency suffered a major security breach in 2011. Bleeping computer contacted IMF, which confirmed that that despite it uses the Microsoft 365, the incident does not appear to be part of Microsoft targeting recently disclosed.

Cybersecurity 142

Cybersecurity Security IT Data breaches 142

IT Governance

JUNE 18, 2018

Back in 2011, RSA employees received two phishing emails, which would ultimately lead to SecurID’s two-factor authentication system being compromised – costing RSA $66 million. The email subject line read ‘2011 Recruitment Plan.’. It was a spreadsheet titled ‘2011 Recruitment plan.xls.’. RSA SecurID breach.

Phishing 105

Phishing Authentication Marketing Access 105

Security Affairs

JUNE 9, 2023

Gox in 2011 and money laundering. Gox in 2011 and the operation of the illicit cryptocurrency exchange BTC-e. Bilyuchenko is also charged with conspiring with Alexander Vinnik to run the virtual currency exchange BTC-e from 2011 to 2017. Two Russian nationals have been charged with the hack of the cryptocurrency exchange Mt.

Access 98

Access Security IT Information Security 98

Data Breach Today

MAY 15, 2018

Updating that rule was mandated under the HITECH Act, but the modification has been in limbo since 2011. Agency Will Ditch Previous HIPAA Privacy Rule Revamp Plan, Seek New Ideas Federal regulators plan to craft a new proposal for revamping a HIPAA Privacy Rule provision for "accounting of disclosures" of electronic patient records.

Privacy 100

Privacy 100

Hunton Privacy

MAY 31, 2022

In a complaint filed in federal court, the government alleged that Twitter violated both the FTC Act and a 2011 FTC Order by misrepresenting the extent to which the company maintained and protected users’ nonpublic contact information.

Privacy 99

Privacy Information Security Data Privacy Compliance 99

The Guardian Data Protection

MARCH 20, 2018

Sandy Parakilas, the platform operations manager at Facebook responsible for policing data breaches by third-party software developers between 2011 and 2012, told the Guardian he warned senior executives at the company that its lax approach to data protection risked a major breach. Related: Where's Zuck?

Data breaches 112

Data breaches Privacy Risk IT 112

Security Affairs

SEPTEMBER 9, 2022

Last week, Google rolled out emergency fixes to address a vulnerability, tracked as CVE-2022-3075 , in the Chrome web browser that is being actively exploited in the wild.

IT 139

IT Passwords Ransomware Cybersecurity 139

The Guardian Data Protection

APRIL 17, 2018

Statement comes as company faces US lawsuit over facial recognition feature launched in 2011 and planned to expand to EU Facebook has released more information on the social media platform’s tracking of users off-site, after its CEO, Mark Zuckerberg, failed to answer questions about the process from US politicians and as the company prepares to fight (..)

Security 107

Security IT Privacy 107

Krebs on Security

AUGUST 4, 2023

” Indeed, KrebsOnSecurity first covered RLO-based phishing attacks back in 2011 , and even then it wasn’t a new trick. . “When the same email is sent through Mimecast, Mimecast is smart enough to detect the encoding and it renames the attachment to ‘ fdp.eml.’

Phishing 214

Phishing Computer and Electronics Marketing IT 214

Security Affairs

NOVEMBER 17, 2020

I launched Security Affairs for passion in November 2011 and since then the blog read by millions of readers. Happy BirthDay Security Affairs! Nine years together!

Security 136

Security IT Cybersecurity Risk 136

Dark Reading

JANUARY 10, 2023

Rashid reflects on the monumental Black Hat 2011 moment when Jay Radcliffe showed how to hack his insulin pump. Hacking to kill: Dark Reading's Fahmida Y.

Security 85

Security 85

Krebs on Security

OCTOBER 1, 2019

Škorjanc and his hacker handle Iserdo were initially named in a Justice Department indictment from 2011 (PDF) along with two other men who allegedly wrote and sold the Mariposa botnet code. An advertisement for the ButterFly Bot.

Mining 42

Mining Marketing IT 42

Security Affairs

NOVEMBER 15, 2021

I launched Security Affairs for passion in 2011 and millions of readers walked with me. Ten years together! I’m very excited. Ten years ago I launched Security Affairs, the blog over the past decade obtained important successes in the cyber security community, but the greatest one is your immense affection.

Security 115

Security Cybersecurity IT Data breaches 115

Troy Hunt

JULY 6, 2022

11 years now, wow 😲 It's actually 11 and a bit because it was April Fool's Day in 2011 that my first MVP award came through. At the time, I referred to myself as "The Accidental MVP" as I'd no expectation of an award, it just came from me being me.

Passwords 118

Passwords IT 118

Krebs on Security

FEBRUARY 22, 2024

i-SOON CEO Wu Haibo, in 2011. Indeed, among the documents apparently leaked from i-SOON is a sales pitch slide boldly highlighting the hacking prowess of the company’s “APT research team” (see screenshot above). Image: nattothoughts.substack.com.

Government 302

Government Cybersecurity Sales Blockchain 302

Troy Hunt

OCTOBER 29, 2020

Since that date in 2011, I doubt there's been a single day I haven't used 1Password to log into a website, fill in my credit card details or refer to other notes stored securely within the product.

Passwords 138

Passwords Security IT 138

Schneier on Security

MAY 3, 2021

The complaint outlines how Sterlingov allegedly paid for the server hosting of Bitcoin Fog at one point in 2011 using the now-defunct digital currency Liberty Reserve.

Blockchain 129

Blockchain IT 129

Security Affairs

OCTOBER 16, 2021

FinCEN analyzed a data set composed of 2,184 SARs filed between 1 January 2011 and 30 June 2021 and identified 177 CVC (convertible virtual currency) wallets addresses that were used in ransomware operations associated with the above ransomware variants.

Ransomware 137

Ransomware Security Information Security IT 137