Rich Mogull – Computer Security Articles

Cybersecurity Firm Imperva Discloses Breach

August 27, 2019 admin Alissa Knight, data breaches, DisruptOPS, Heli Erickson, imperva, Incapsula, Rich Mogull, Web Application Firewall

Credit to Author: BrianKrebs| Date: Tue, 27 Aug 2019 16:52:58 +0000

Imperva, a leading provider of Internet firewall services that help Web sites block malicious cyberattacks, alerted customers on Tuesday that a recent data breach exposed email addresses, scrambled passwords, API keys and SSL certificates for a subset of its firewall users. Redwood Shores, Calif.-based Imperva sells firewall technology designed to detect and block various types of malicious Web traffic, from denial-of-service attacks to digital probes aimed at undermining the security of Web-based software applications.

Independent Krebs

What We Can Learn from the Capital One Hack

August 2, 2019 admin A Little Sunshine, Apache, Capital One breach, CloudFlare, data breaches, DisruptOPS, Evan Johnson, metadata service, ModSecurity, Rich Mogull, Server Side Request Forgery, SSRF, The Coming Storm, WAF, Web Application Firewall, William Bengston

Credit to Author: BrianKrebs| Date: Fri, 02 Aug 2019 21:30:34 +0000

On Monday, a former Amazon employee was arrested and charged with stealing more than 100 million consumer applications for credit from Capital One. Since then, many have speculated the breach was perhaps the result of a previously unknown “zero-day” flaw, or an “insider” attack in which the accused took advantage of access surreptitiously obtained from her former employer. But new information indicates the methods she deployed have been well understood for years.