Data Breach Today

APRIL 11, 2020

SEC has settled charges against two traders who were accused of profiting from the hacking of an EDGAR server in 2016. Ukrainian Man Behind the Actual Hacking Remains at Large The U.S. The Ukrainian man who allegedly hacked the system by bypassing its authentication control remains at large.

Authentication 342

Authentication IT 342

Data Breach Today

SEPTEMBER 1, 2020

Facebook Takes Down Accounts Associated with Russia's 'Internet Research Agency' Troll Farm Facebook says the Russian troll group that interfered in the 2016 U.S. election is at it again, using sham accounts and a fake news site to spread disinformation in advance of the November election. Facebooks says it took down the accounts involved.

IT 347

IT 347

Krebs on Security

JUNE 7, 2020

A judge in Israel handed down the sentences plus fines and probation against Yarden Bidani and Itay Huri , both Israeli citizens arrested in 2016 at age 18 in connection with an FBI investigation into vDOS. ” This likely refers to 23-year-old Jesse Wu , who KrebsOnSecurity noted in October 2016 pseudonymously registered the U.K.

Marketing 319

Marketing IT Cybersecurity Access 319

Data Breach Today

JUNE 25, 2021

Secret Service has published a Most Wanted Fugitives list featuring 10 suspects wanted in connection with financial cybercrimes The agency is offering rewards of up to $1 million for information on two Ukrainian suspects who allegedly targeted the SEC in 2016.

325

325

Krebs on Security

JANUARY 20, 2020

Preston was featured in the 2016 KrebsOnSecurity story DDoS Mitigation Firm Has History of Hijacks , which detailed how the company he co-founded — BackConnect Security LLC — had developed the unusual habit of hijacking Internet address space it didn’t own in a bid to protect clients from attacks.

Systems administration 318

Systems administration IoT IT Security 318

Krebs on Security

MAY 18, 2020

” From 2013 to 2016, upO was a major player on Exploit[.]in For roughly one year beginning in 2016, Lebron was a top moderator on Exploit. For roughly one year beginning in 2016, Lebron was a top moderator on Exploit. in in late 2016, complaining that RedBear was refusing to pay a debt owed to him.

Ransomware 322

Ransomware Marketing Security IT 322

Data Breach Today

JULY 26, 2021

million of its customers as a result of a 2016 global data breach. Uber Must Tighten Data Handling, Regulator Says Australia's data regulator has found that Uber interfered with the privacy of 1.2 Uber says it's made improvements to its systems and its internal security policies.

Privacy 290

Privacy Data breaches Security IT 290

Data Breach Today

MAY 13, 2020

Top 10 Vulnerabilities Exploited by Sophisticated Foreign Hackers Detailed by CISA From 2016 to 2019, sophisticated nation-state attackers preferred to target 10 vulnerabilities more than all others, the U.S. Cybersecurity and Infrastructure Security Agency and FBI warn in a new alert.

Cybersecurity 290

Cybersecurity Security 290

Data Breach Today

NOVEMBER 26, 2019

Company Acquired RSA as One Component of Its Purchase of EMC in 2016 Dell Technologies is considering the possible sale of its RSA security division, hoping such a deal could be worth $1 billion, according to Bloomberg, which cites "people familiar with the matter."

Sales 273

Sales Security IT 273

Data Breach Today

SEPTEMBER 22, 2020

million HIPAA settlement with a Georgia orthopedic clinic stemming from a 2016 breach involving The Dark Overlord hacking group. Regulator: Georgia Clinic Showed 'Systemic Noncompliance' Federal regulators have announced a $1.5

Compliance 264

Compliance 264

Data Breach Today

AUGUST 31, 2022

Federal Law Enforcement Agents Offer Tips on Improving Detection, Rapid Response Ransomware gets the headlines, and phishing sets off the most alerts, but business email compromise costs enterprises the most - more than $43 billion since 2016.

Phishing 245

Phishing Ransomware 245

Krebs on Security

JANUARY 8, 2019

Last week, KrebsOnSecurity heard from a reader who’d just purchased a copy of Microsoft Office 2016 Professional Plus from a seller on eBay for less than $4. Let’s call this Red Flag #1, as a legitimately purchased license of Microsoft Office 2016 is still going to cost between $70 and $100.

Passwords 256

Passwords Access Cloud IT 256

Data Breach Today

APRIL 11, 2022

After releasing patches for vulnerabilities in its software every second Tuesday of every month since 2016, Microsoft says it is now set to roll out automatic updates. Some security experts weigh in.

Security 246

Security IT 246

Data Breach Today

JANUARY 14, 2019

court has sentenced Daniel Kaye, 30, after he admitted launching DDoS attacks against Liberia's largest telecommunications company in 2015 and 2016. Daniel Kaye Was Paid to Disrupt Liberia's Largest Telecommunications Firm A U.K. A rival internet services provider paid Kaye $100,000 to launch the attacks.

236

236

Data Breach Today

MARCH 25, 2021

Dmitri Alperovitch, Former CrowdStrike CTO, Offers an Analysis The SolarWinds supply chain attack demonstrates that Russian intelligence services have learned from previous operations and adjusted their tactics, says Dmitri Alperovitch, the former CTO of security firm CrowdStrike, which investigated Russian interference in the 2016 election.

Security 232

Security 232

Krebs on Security

JUNE 22, 2022

The user “RSOCKS” on the Russian crime forum Verified changed his name to RSOCKS from a previous handle: “ Stanx ,” whose very first sales thread on Verified in 2016 quickly ran afoul of the forum’s rules and prompted a public chastisement by the forum’s administrator. ” the post enthuses.

Sales 308

Sales Access Systems administration Marketing 308

Data Breach Today

APRIL 29, 2020

million settlement of a class action lawsuit against Banner Health stemming from a 2016 data breach. Court Grants Final Approval of $8.9 Million Banner Health Class Action Lawsuit Settlement A federal court recently granted final approval for an $8.9

Data breaches 236

Data breaches Security Information Security 236

Data Breach Today

JULY 22, 2023

billion in cryptocurrency from the Bitfinex virtual currency exchange in 2016. Russian Entrepreneur, Would-Be Rapper to Seal Plea Deal in NY Federal Court A U.S. couple is set to file a plea deal for their role in laundering $4.5

IT 238

IT 238

Data Breach Today

FEBRUARY 19, 2019

After Insurance, Fast-Food Chain's Breach Costs Are Nearly $34 Million Fast-food giant Wendy's has reached a $50 million settlement agreement with financial institutions that sued after attackers planted RAM-scraping malware on point-of-sale systems in 1,025 of its restaurants in 2015 and 2016, stealing massive quantities of payment card data.

Insurance 235

Insurance Sales IT 235

Data Breach Today

JULY 21, 2020

Parliament Panel's Report Slams Government for Not Investigating Russian Activities The British government was underprepared for Russia's alleged attempts to influence the outcomes of the Brexit referendum in 2016 and the 2017 general election and failed to conduct adequate investigations, according to a report by the U.K.

Government 222

Government Security 222

Collaboration 2.0

SEPTEMBER 5, 2024

Our latest deep dive crunches the numbers from 2016 to 2024, revealing fascinating insights into the popularity of programming languages and how emerging trends and industry shifts have influenced developer preferences.

IT 76

IT 76

Data Breach Today

MARCH 19, 2019

Users of Mirai Likely Seek Enterprise-Class Bandwidth, Says Palo Alto Networks Mirai, the powerful malware that unleashed unprecedented distributed denial-of-service attacks in 2016, has never gone away.

IT 219

IT 219

Data Breach Today

AUGUST 30, 2019

Watering-Hole Attack Analysis From Google Follows Apple's February Patches Since at least 2016, hacked websites have targeted zero-day flaws in current versions of Apple iOS to surreptitiously implant data-stealing and location-tracking malware, says Google's Project Zero team. Apple patched the latest vulnerabilities in February.

214

214

Krebs on Security

AUGUST 12, 2018

million from accounts at the National Bank of Blacksburg in two separate ATM cashouts between May 2016 and January 2017. The 2016 unlimited operation against National Bank began Saturday, May 28, 2016 and continued through the following Monday. All told, the attackers managed to siphon almost $570,000 in the 2016 attack.

Phishing 236

Phishing Authentication Retail Encryption 236

Data Breach Today

AUGUST 22, 2019

million from ATMs and financial institutions since 2016, has become more active this year, using new tools and tactics in its attacks and expanding its reach globally, according to the security firm Group-IB. Russian-Speaking Group Causing More Damage as It Expands Globally "Silence," a Russian-speaking criminal group that has stolen $4.2

Security 210

Security IT 210

Data Breach Today

JULY 9, 2019

Breach Persisted 4 Years - and Through Acquisition - Before Being Discovered Britain's privacy watchdog says it plans to fine hotel giant Marriott $125 million under GDPR for security failures tied to a 2014 breach of the guest reservation database for Starwood, which Marriott acquired in 2016.

GDPR 209

GDPR Privacy Security IT 209

Krebs on Security

MARCH 22, 2021

Norse imploded rather suddenly in 2016 following a series of managerial missteps and funding debacles. In 2016, financial reality once again would catch up with the company’s leadership when Norse abruptly ceased operations and was forced to lay off most of its staff. Remember Norse Corp. ,

Computer and Electronics 300

Computer and Electronics Honeypots Archiving Marketing 300

Krebs on Security

FEBRUARY 5, 2020

Mathew Marulla began leasing a Ford Focus electric vehicle in 2013, but turned the car back in to Ford at the end of his lease in 2016. Out of curiosity, Marulla decided to check if his old MyFordMobile.com credentials from 2016 still worked.

Personal data 309

Personal data Access Marketing Privacy 309

Krebs on Security

SEPTEMBER 10, 2021

While last night’s Meris attack on this site was far smaller than the recent Cloudflare DDoS, it was far larger than the Mirai DDoS attack in 2016 that held KrebsOnSecurity offline for nearly four days. By comparison, the 2016 Mirai DDoS generated approximately 450,000 requests-per-second.

IoT 317

IoT Manufacturing IT Security 317

Krebs on Security

MARCH 10, 2020

Firsov also tweeted about competing in and winning several “capture the flag” hacking competitions, including the 2016 and 2017 CTF challenges at Positive Hack Days (PHDays), an annual security conference in Moscow. Isis’ profile on antichat. ” A Google Translate version of that advertisement is here (PDF).

Sales 310

Sales Passwords Authentication Security 310

Data Breach Today

JANUARY 8, 2020

Request Echoes 2016 Legal Standoff Between Apple and the FBI The FBI has sent a letter to Apple asking for help in accessing encrypted data from two iPhones belonging to a deceased shooter. The bureau's move may be a prelude to another legal fight between the FBI and Apple over strong encryption.

Access 195

Access Encryption 195

Krebs on Security

JULY 7, 2021

” In a blog post , Microsoft’s Security Response Center said it was delayed in developing fixes for the vulnerability in Windows Server 2016 , Windows 10 version 1607 , and Windows Server 2012. “After installing such updates, delegated admin groups like printer operators can only install signed printer drivers.

Security 356

Security IT 356

Data Breach Today

MAY 6, 2020

2016 election interference. Election Interference German prosecutors believe that an alleged Russian hacker who apparently is a member of an elite military unit is responsible for the 2015 cyberattack against Germany's parliament, according to a news report. Earlier, the suspect was charged in connection with U.S.

Military 191

Military 191

Security Affairs

MAY 25, 2022

Some of the flaws added to the catalog in this turn are dated back to 2016, such as the issues affecting Apple ( CVE-2016-4655 , CVE-2016-4656 , CVE-2016-4657 ), Microsoft ( CVE-2016-0162 , CVE-2016-3351 , CVE-2016-3298 ) and Cisco Devices ( CVE-2016-6366 , CVE-2016-6367 ).

IT 145

IT Cybersecurity Security Risk 145

Data Breach Today

OCTOBER 19, 2022

Zscaler President Sinha Replaces John Merrill, Who Led DigiCert From 2016 to 2022 Certificate heavyweight DigiCert has landed Zscaler second-in-command Amit Sinha as its new leader and tasked him with boosting trust around connected device and user authentication.

Authentication 182

Authentication IT 182

Krebs on Security

JUNE 25, 2019

com — were seen as early as 2016 as distribution points for the Hummer Trojan , a potent strain of Android malware often bundled with games that completely compromises the infected device. com 2016-02-18 ALIBABA CLOUD COMPUTING (BEIJING) CO., At least another five of the domains registered to tosaka1027@gmail.com — 99youx[.]com

Cloud 257

Cloud Manufacturing Marketing Data breaches 257

Data Breach Today

JUNE 13, 2024

Threat Actor Uses Admin Panel to Track Multiple Campaigns A likely Pakistani cyberespionage operation has expanded its tool set since it first targeted Indian officials, likely in 2016. That's probable evidence the threat actor has "seen a high degree of success," say researchers from Cisco Talos.

IT 162

IT 162