USPS ‘Informed Delivery’ Is Stalker’s Dream

Credit to Author: BrianKrebs| Date: Mon, 02 Oct 2017 16:32:33 +0000

A free new service from the U.S. Postal Service that provides scanned images of incoming mail days before it is slated to arrive at its destination address is raising eyebrows among security experts who worry about the service’s potential for misuse by private investigators, identity thieves, stalkers or abusive ex-partners. The USPS says it hopes to have changes in place by early next year that could help blunt some of those concerns.

Read more

Here’s What to Ask the Former Equifax CEO

Credit to Author: BrianKrebs| Date: Fri, 29 Sep 2017 16:07:09 +0000

Richard Smith — who resigned as chief executive of big-three credit bureau Equifax this week in the wake of a data breach that exposed 143 million Social Security numbers — is slated to testify in front of no fewer than four committees on Capitol Hill next week. If I were a lawmaker, here are some of the questions I’d ask when Mr. Smith goes to Washington.

Read more

Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards

Credit to Author: BrianKrebs| Date: Tue, 26 Sep 2017 21:28:31 +0000

Sonic Drive-In, a fast-food chain with nearly 3,600 locations across 45 U.S. states, has acknowledged a breach affecting an unknown number of store payment card systems. The ongoing breach may have led to a fire sale on millions of stolen credit and debit card accounts that are now being peddled in shadowy underground cybercrime stores, KrebsOnSecurity has learned.

Read more

Source: Deloitte Breach Affected All Company Email, Admin Accounts

Credit to Author: BrianKrebs| Date: Mon, 25 Sep 2017 20:12:46 +0000

Deloitte, one of the world’s “big four” accounting firms, has acknowledged a breach of its internal email systems, British news outlet The Guardian revealed today. Deloitte has sought to downplay the incident, saying it impacted “very few” clients. But according to a source close to the investigation, the breach dates back to at least the fall of 2016, and involves the compromise of all administrator accounts at the company as well as Deloitte’s entire internal email system.

Read more

Canadian Man Gets 9 Months Detention for Serial Swattings, Bomb Threats

Credit to Author: BrianKrebs| Date: Mon, 25 Sep 2017 15:49:39 +0000

A 19-year-old Canadian man was found guilty of making almost three dozen fraudulent calls to emergency services across North America in 2013 and 2014. The false alarms, two of which targeted this author — involved phoning in phony bomb threats and multiple attempts at “swatting” — a dangerous hoax in which the perpetrator spoofs a call […]

Read more

Equifax or Equiphish?

Credit to Author: BrianKrebs| Date: Sun, 24 Sep 2017 12:53:16 +0000

More than a week after it said most people would be eligible to enroll in a free year of its TrustedID identity theft monitoring service, big three consumer credit bureau Equifax has begun sending out email notifications to people who were able to take the company up on its offer. But in yet another security stumble, the company appears to be training recipients to fall for phishing scams.

Read more

Equifax Breach: Setting the Record Straight

Credit to Author: BrianKrebs| Date: Thu, 21 Sep 2017 03:35:26 +0000

Bloomberg published a story this week citing three unnamed sources who told the publication that Equifax experienced a breach earlier this year which predated the intrusion that the big-three credit bureau announced on Sept. 7. To be clear, this earlier breach at Equifax is not a new finding and has been a matter of public record for months. Furthermore, it was first reported on this Web site in May 2017.

Read more