Krebs on Security

APRIL 14, 2023

KrebsOnSecurity received a nice bump in traffic this week thanks to tweets from the Federal Bureau of Investigation (FBI) and the Federal Communications Commission (FCC) about “ juice jacking ,” a term first coined here in 2011 to describe a potential threat of data theft when one plugs their mobile device into a public charging kiosk.

Communications 298

Communications Risk Access Education 298

Security Affairs

NOVEMBER 15, 2022

Happy BirthDay Security Affairs! I launched Security Affairs for passion in November 2011 and since then the blog was visited by tens of millions of readers. Eleven years ago I decided to launch Security Affairs, a blog that is considered today one of the most valuable sources of the cybersecurity industry.

Security 100

Security Cybersecurity Government IT 100

The Last Watchdog

FEBRUARY 24, 2022

Yes, and that is what Sony exactly lost when they were hacked and the personal info of every one of its customers leaked in 2011. Now, let me give you a few reasons, why pen testing has emerged as a “must-have” security practice. For example, your website security may prove strong, applications not so much.

Security 233

Security Compliance Retail IoT 233

Data Breach Today

JULY 19, 2021

All Aligned With China's Ministry of State Security The U.S.

Government 299

Government Security 299

The Last Watchdog

JUNE 26, 2023

In addition, we are constantly improving the mechanisms that allow us to quickly and conveniently integrate DerScanner into secure development processes,” said Dan Chernov, Chief Executive Officer (CEO) of DerScanner. At the present time, our team consists of 70 scientists and researchers.

Security 100

Security Marketing IT 100

IG Guru

JUNE 7, 2022

FTC and DOJ Order Twitter to Pay $150 Million Penalty for Violating 2011 FTC Order and Cease Profiting from Deceptively Collected Data. The post FTC Charges Twitter with Deceptively Using Account Security Data to Sell Targeted Ads appeared first on IG GURU.

Security 78

Security Information governance Government Privacy 78

Security Affairs

NOVEMBER 17, 2020

Happy BirthDay Security Affairs! I launched Security Affairs for passion in November 2011 and since then the blog read by millions of readers. I started with a single post per day, nine years later I’m still the only contributor and I do all my best to cover the most important news in the cyber security landscape.

Security 132

Security IT Cybersecurity Risk 132

Dark Reading

JANUARY 10, 2023

Rashid reflects on the monumental Black Hat 2011 moment when Jay Radcliffe showed how to hack his insulin pump. Hacking to kill: Dark Reading's Fahmida Y.

Security 85

Security 85

Security Affairs

OCTOBER 4, 2020

Every week the best security articles from Security Affairs free for you in your email box. The post Security Affairs newsletter Round 284 appeared first on Security Affairs. A new round of the weekly SecurityAffairs newsletter arrived! Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Security 116

Security Ransomware Insurance Information Security 116

Security Affairs

MARCH 18, 2024

The International Monetary Fund (IMF) disclosed a security breach, threat actors compromsed 11 email accounts earlier this year. The impacted email accounts were re-secured. ” The agency has already secured the compromised email accounts and added that it is not aware of further compromise beyond them.

Cybersecurity 139

Cybersecurity Security IT Data breaches 139

Security Affairs

JANUARY 2, 2022

According to a report published by Invezz, the number of crypto security breaches increased by up 850% in the last decade. It is estimated that the cryptocurrencies stolen between January 2011 and December 2021 amount to $12.1 SecurityAffairs – hacking, crypto security breaches). The post Crypto security breaches cause $4.25

Security 120

Security Marketing IT Information Security 120

Krebs on Security

JUNE 28, 2022

Security experts had long seen a link between Glupteba and AWM Proxy, but new research shows AWM Proxy’s founder is one of the men being sued by Google. AWMproxy, the storefront for renting access to infected PCs, circa 2011. An example of a cracked software download site distributing Glupteba. Image: Google.com.

Passwords 267

Passwords Analytics Manufacturing Sales 267

Security Affairs

SEPTEMBER 28, 2022

nuvola is the new open-source cloud security tool to address the privilege escalation in cloud environments. nuvola is the new open source security tool made by the Italian cyber security researcher Edoardo Rosa ( @_notdodo_ ), Security Engineer at Prima Assicurazioni. Cloud Security Context.

Cloud 112

Cloud Security Metadata Data breaches 112

Security Affairs

JUNE 9, 2023

Gox in 2011 and money laundering. Gox in 2011 and the operation of the illicit cryptocurrency exchange BTC-e. Bilyuchenko is also charged with conspiring with Alexander Vinnik to run the virtual currency exchange BTC-e from 2011 to 2017. Gox exchange and operating BTC-e appeared first on Security Affairs.

Access 98

Access Security IT Information Security 98

Krebs on Security

MAY 13, 2024

Pin also was active at that same time on the Russian-language security forum Antichat , where they told fellow forum members to contact them at the ICQ instant messenger number 669316. 2011 said he was a system administrator and C++ coder. NeroWolfe’s introductory post to the forum Verified in Oct.

Ransomware 260

Ransomware Encryption Systems administration Government 260

Security Affairs

FEBRUARY 6, 2024

“According to the indictment, between 2011 and July 2017, Aliaksandr Klimenka, 42, allegedly controlled BTC-e, a digital currency exchange, with Alexander Vinnik and others.” The authorities reported that since 2011, 7 million Bitcoin had gone into the BTC-e exchange and 5.5 ” reads the press release published by DoJ.

IT 131

IT Information Security Security 131

Security Affairs

APRIL 15, 2021

April 2021 Security Patch Day includes 14 new security notes and 5 updates to previously released notes, one of them fixes a critical issue in SAP Commerce. SAP Security Note #3040210 , tagged with a CVSS score of 9.9 SAP Security Note #3040210 , tagged with a CVSS score of 9.9

Security 120

Security IT Information Security 120

Hunton Privacy

MAY 31, 2022

On May 25, 2022, Twitter reached a proposed $150 million settlement with the Department of Justice (“DOJ”) and the Federal Trade Commission to resolve allegations that the company deceptively used nonpublic user contact information obtained for account security purposes to serve targeted ads to Twitter users.

Privacy 99

Privacy Information Security Data Privacy Compliance 99

The Security Ledger

MARCH 27, 2024

In this episode of The Security Ledger Podcast (#257) Paul speaks with Dennis Kengo Oka, a senior principal automotive security strategist at the firm Synopsys about the growing cyber risks to automobiles as connected vehicle features proliferate in the absence of strong cybersecurity protections. Read the whole entry. »

Security 52

Security Cybersecurity Risk Government 52

Krebs on Security

FEBRUARY 22, 2022

Missouri Governor Mike Parson made headlines last year when he vowed to criminally prosecute a journalist for reporting a security flaw in a state website that exposed personal information of more than 100,000 teachers. Louis Post-Dispatch for reporting a security vulnerability that exposed teacher SSNs. In October 2021, St.

Education 354

Education Access Security Communications 354

WIRED Threat Level

SEPTEMBER 27, 2019

Any iPhone device from 2011 to 2017 could soon be jailbroken, thanks to an underlying flaw that there's no way to patch.

Security 105

Security 105

The Last Watchdog

SEPTEMBER 26, 2019

Is mobile technology on a course to become more secure than traditional computing? Related: Securing the Internet of Things I’ve been writing about organizations struggling to solve the productivity vs. security dilemma that’s part and parcel of the BYOD craze for some time now. We spoke at Black Hat 2019.

Security 147

Security Encryption Access Passwords 147

Security Affairs

NOVEMBER 10, 2024

US CFPB warns employees to avoid work-related mobile calls and texts following China-linked Salt Typhoon hack over security concerns. Chris Krebs from SentinelOne suggested that the group behind Salt Typhoon may be affiliated with China’s Ministry of State Security, specifically the APT40 group, which specializes in intelligence collection.

Government 132

Government Cybersecurity Compliance Access 132

Security Affairs

APRIL 22, 2024

Compromised data vary by individuals and organizations, it includes names, passport numbers, Social Security numbers, online crypto account identifiers and bank account numbers, and more. Curiously, in 2011, Thomson Reuters acquired World-Check, then in October 2018, Thomson Reuters closed a deal with The Blackstone Group.

Risk 140

Risk Archiving Access Privacy 140

WIRED Threat Level

MAY 20, 2021

In 2011, Chinese spies stole the crown jewels of cybersecurity—stripping protections from firms and government agencies worldwide. Here’s how it happened.

Cybersecurity 142

Cybersecurity Government IT Security 142

Security Affairs

SEPTEMBER 9, 2022

CISA added 12 more security flaws to its Known Exploited Vulnerabilities Catalog including four D-Link vulnerabilities. The post CISA adds 12 new flaws to its Known Exploited Vulnerabilities Catalog appeared first on Security Affairs. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

IT 135

IT Passwords Ransomware Cybersecurity 135

Security Affairs

MAY 31, 2020

The EU Agency for Cybersecurity ENISA has published a new report and accompanying repository on measures and information sources that could help security experts and operators of IT and critical infrastructure to proactively detect network security incidents in the EU. ” reads the report. ” reads the report.

Cybersecurity 140

Cybersecurity Security IT Information Security 140

Krebs on Security

FEBRUARY 22, 2024

Security experts who reviewed the leaked data say they believe the information is legitimate, and that i-SOON works closely with China’s Ministry of State Security and the military. In 2021, the Sichuan provincial government named i-SOON as one of “the top 30 information security companies.” ”

Government 288

Government Cybersecurity Sales Blockchain 288

Hunton Privacy

JUNE 10, 2011

On June 7, 2011, Senator Patrick Leahy (D-VT) introduced the “ Personal Data Privacy and Security Act of 2011 ” (the “Act”), co-sponsored by Senators Charles Schumer (D-NY) and Ben Cardin (D-MD). impacts federal databases or concerns federal employees or contractors engaged in national security or law enforcement services.

Personal data 40

Personal data Data Privacy Privacy Security 40

Threatpost

FEBRUARY 27, 2019

Many machines, including almost all Apple laptops and desktops produced since 2011, are vulnerable to data exfiltration via weaponized peripherals.

Security 62

Security 62

Collaboration 2.0

DECEMBER 16, 2010

A hundred years ago we had virtually no data associated with us beyond possibly owning a passport, a few pieces of legal paperwork and maybe some national security files about us we [.]

Security 105

Security 105

eSecurity Planet

JUNE 17, 2021

Naturally, database vendors are leading providers of database security tools, and a growing number of cloud-based database providers are moving deeper into the data security space. Security is paramount. Starting our list of the top database security vendors is the multinational cloud computing company, Alibaba Cloud.

Security 120

Security Cloud Encryption Computer and Electronics 120

Security Affairs

JANUARY 10, 2019

Security firm Qualys has disclosed three flaws (CVE-2018-16864, CVE-2018-16865, and CVE-2018-16866 ) in a component of systemd , a software suite that provides fundamental building blocks for a Linux operating system used in most major Linux distributions. ” reads the security advisory. Pierluigi Paganini.

Security 111

Security Access IT 111

Hunton Privacy

JUNE 14, 2011

On June 7, 2011, the Congress of the Republic of Peru passed the Personal Data Protection Law ( Ley de Protección de Datos Personales, Proyecto de Ley 4079/2009-PE). View a copy of the Personal Data Protection Law (in Spanish) as passed on June 7, 2011. Require consent for the processing of personal data.

Privacy 40

Privacy Personal data Communications Government 40

Security Affairs

SEPTEMBER 5, 2022

It has already happened in the past that the popular antivirus software has identified Chrome as a malicious code, the website The Register reported a similar problem in 2011. The post Windows Defender identified Chromium, Electron apps as Hive Ransomware appeared first on Security Affairs. Pierluigi Paganini.

Ransomware 98

Ransomware Security IT Information Security 98

Security Affairs

AUGUST 6, 2023

CDHE discovered the ransomware attack on June 19, 2023, it immediately launched an investigation into the security breach with the help of third-party specialists. At the time of this writing, no ransomware group has claimed responsibility for the security breach. ” reads the Notice of Data Incident published by the company.

Education 98

Education Data breaches Ransomware Access 98

Security Affairs

OCTOBER 29, 2020

Iran-linked APT group Phosphorus successfully hacked into the email accounts of multiple high-profile individuals and security conference attendees. “Phosphorus, an Iranian actor, has targeted with this scheme potential attendees of the upcoming Munich Security Conference and the Think 20 (T20) Summit in Saudi Arabia.”

Security 86

Security Authentication Phishing Government 86