data breaches – Page 4 – Computer Security Articles

LastPass: ‘Horse Gone Barn Bolted’ is Strong Password

September 22, 2023 admin A Little Sunshine, data breaches, International Computer Science Institute, karim toubba, lastpass breach, Nicholas Weaver, The Coming Storm, Web Fraud 2.0, wladimir palant

Credit to Author: BrianKrebs| Date: Fri, 22 Sep 2023 23:41:09 +0000

The password manager service LastPass is now forcing some of its users to pick longer master passwords. LastPass says the changes are needed to ensure all customers are protected by their latest security improvements. But critics say the move is little more than a public relations stunt that will do nothing to help countless early adopters whose password vaults were exposed in a 2022 breach at LastPass.

Independent Krebs

FBI Hacker Dropped Stolen Airbus Data on 9/11

September 13, 2023 admin A Little Sunshine, airbus, breachforums, data breaches, FBI, genesis market, hudson rock, infragard, microsoft, redline, The Coming Storm, usdod

Credit to Author: BrianKrebs| Date: Thu, 14 Sep 2023 00:22:05 +0000

In December 2022, KrebsOnSecurity broke the news that a cybercriminal using the handle “USDoD” had infiltrated the FBI’s vetted information sharing network InfraGard, and was selling the contact information for all 80,000 members. The FBI responded by reverifying all InfraGard members and by seizing the cybercrime forum where the data was being sold. But on Sept. 11, 2023, USDoD resurfaced after a lengthy absence to leak sensitive employee data stolen from the aerospace giant Airbus, while promising to visit the same treatment on top U.S. defense contractors.

Independent Krebs

Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach

September 5, 2023 admin 1password, A Little Sunshine, adblock plus, Ars Technica, chainalysis, data breaches, karim toubba, lastpass breach, metamask, Nicholas Weaver, nick bax, plex, taylor monahan, The Coming Storm, unciphered, Web Fraud 2.0, wladimir palant

Credit to Author: BrianKrebs| Date: Wed, 06 Sep 2023 00:21:07 +0000

In November 2022, the password manager service LastPass disclosed a breach in which hackers stole password vaults containing both encrypted and plaintext data for more than 25 million users. Since then, a steady trickle of six-figure cryptocurrency heists targeting security-conscious people throughout the tech industry has led some security experts to conclude that crooks likely have succeeded at cracking open some of the stolen LastPass vaults.

Independent Krebs

Kroll Employee SIM-Swapped for Crypto Investor Data

August 25, 2023 admin A Little Sunshine, blockfi, data breaches, ftx, kroll breach, Latest Warnings, SIM swapping, T-Mobile

Credit to Author: BrianKrebs| Date: Fri, 25 Aug 2023 18:05:10 +0000

Security consulting giant Kroll disclosed today that a SIM-swapping attack against one of its employees led to the theft of user information for multiple cryptocurrency platforms that are relying on Kroll services in their ongoing bankruptcy proceedings. And there are indications that fraudsters may already be exploiting the stolen data in phishing attacks. Cryptocurrency lender BlockFi and the now-collapsed crypto trading platform FTX each disclosed data breaches this week thanks to a recent SIM-swapping attack targeting an employee of Kroll — the company handling both firms’ bankruptcy restructuring.

Independent Krebs

LeakedSource Owner Quit Ashley Madison a Month Before 2015 Hack

July 18, 2023 admin A Little Sunshine, abusewithus, agentjags, Ashley Madison hack, ashleymadison.com, constella intelligence, data breaches, domaintools, eric malek, Hulu, impact team, Jordan Evan Bloom, LeakedSource, Ne'er-Do-Well News, near-reality.com, noel biderman, ownagegaming1@gmail.com, pictrace, Royal Canadian Mounted Police, Runescape, trevor sykes

Credit to Author: BrianKrebs| Date: Tue, 18 Jul 2023 14:57:04 +0000

[This is Part III in a series on research conducted for a recent Hulu documentary on the 2015 hack of marital infidelity website AshleyMadison.com.] In 2019, a Canadian company called Defiant Tech Inc. pleaded guilty to running LeakedSource[.]com, a service that sold access to billions of passwords and other data exposed in countless data breaches. KrebsOnSecurity has learned that the owner of Defiant Tech, a 32-year-old Ontario man named Jordan Evan Bloom, was hired in late 2014 as a developer for the marital infidelity site AshleyMadison.com. Bloom resigned from AshleyMadison citing health reasons in June 2015 — less than one month before unidentified hackers stole data on 37 million users — and launched LeakedSource three months later.

Independent Krebs

SEO Expert Hired and Fired By Ashley Madison Turned on Company, Promising Revenge

July 13, 2023 admin A Little Sunshine, Ashley Madison hack, data breaches, Hulu, impact team, Ne'er-Do-Well News, william webster harrison

Credit to Author: BrianKrebs| Date: Thu, 13 Jul 2023 21:45:02 +0000

[This is Part II of a story published here last week on reporting that went into a new Hulu documentary series on the 2015 Ashley Madison hack.] It was around 9 p.m. on Sunday, July 19, when I received a message through the contact form on KrebsOnSecurity.com that the marital infidelity website AshleyMadison.com had been hacked. The message contained links to confidential Ashley Madison documents, and included a manifesto that said a hacker group calling itself the Impact Team was prepared to leak data on all 37 million users unless Ashley Madison and a sister property voluntarily closed down within 30 days.

MalwareBytes Security

BreachForums to be shut down after all for fear of law enforcement infiltration

March 23, 2023 admin breachforums, dark web, data breaches, FBI, news, pompompurin

Categories: News

Tags: BreachForums

Tags: Pompompurin

Tags: FBI

Tags: Dark Web

Tags: data breaches

After the arrest of the administrator of the Dark Web site BreachForums there was talk about keeping it alive, but now the forums will be shut down for fear of law enforcement infiltration.

Independent Krebs

Google Suspends Chinese E-Commerce App Pinduoduo Over Malware

March 22, 2023 admin A Little Sunshine, breachforums, bytedance, darknavy, data breaches, google, Latest Warnings, liu huafang, pdd holdings, pinduoduo, project zero, temu, TikTok, Web Fraud 2.0, weibo

Credit to Author: BrianKrebs| Date: Wed, 22 Mar 2023 23:11:08 +0000

Google says it has suspended the app for the Chinese e-commerce giant Pinduoduo after malware was found in versions of the app. The move comes just weeks after Chinese security researchers published an analysis suggesting the popular e-commerce app sought to seize total control over affected devices by exploiting multiple security vulnerabilities in a variety of Android-based smartphones.