Facebook data on more than 3 million people who took a personality quiz was published on a poorly protected website where it could have been accessed by unauthorized parties, according to New Scientist. In a report exposing the potential leak, New Scientist says that the data contained Facebook users’ answers to a personality trait test. While it didn’t include users’ names, in many cases it contained their age, gender, and relationship status. For 150,000 people, it even contained their status updates.Continue Reading…
Train WiFi May Expose Passenger Data and Control Systems
Vulnerabilities on the Wi-Fi networks of a number of rail operators could expose customers’ credit card information, according to Infosec Biz Pen Test Partners this week.
The research was conducted over several years, said Pen Test’s Ken Munro. “In most cases, they are pretty secure, although whether the Wi-Fi works or not is another matter,” he added.
Rail Europe Had a Three-Month Long Credit Card Breach
If you booked train tickets for a European getaway in the past few months, you might want to check your bank statements. Rail Europe, a site used by Americans to buy train tickets in Europe, has revealed a three-month data breach of credit cards and debit cards.Continue Reading…
GLitch: New ‘Rowhammer’ Attack Can Remotely Hijack Android Phones
For the very first time, security researchers have discovered an effective way to exploit a four-year-old hacking technique called Rowhammer to hijack an Android phone remotely. Dubbed GLitch, the proof-of-concept technique is a new addition to the Rowhammer attack series which leverages embedded graphics processing units (GPUs) to carry out a Rowhammer attack against Android smartphones.Continue Reading…
Fake HSBC Payment Advice delivers Trickbot
This example is an email containing the subject of “Payment Advice ” pretending to come from HSBC UK but actually coming from a look-a-like or typo-squatted domain “noreply@hsbc-paymentadvice.co.uk” or “noreply@hsbcpaymentadvice.co.uk” with a malicious word doc attachment is today’s latest spoof of a well-known company, bank or public authority delivering Trickbot banking Trojan.
A Former Hacker Reveals What He’s Learned About Cybersecurity
Russian hackers are notorious for their hacking skills, but one American says he hacked a Russian cyber gang at just 15 years old. Eric Taylor, who went by the nickname Cosmo the God, also posted personal information of celebrities and government officials, including Michelle Obama, former CIA director John Brennan, Kim Kardashian and Tiger Woods.
SunTrust Data Breach
Another day, another data breach…
And another instance of a bank taking the weak posture of offering free identity protection as a post-breach Band-Aid when there’s a better solution out there!
Sweepstakes Scam: Publishers Clearing House Scam
A Circleville, Ohio woman reported losing $8,697 to a sweepstakes scam. She received a letter from the “Publishers Clearing House Award Notification Department”, claiming she had won $600,000 in a one-time payment. Continue Reading…
UnityPoint Health
This Midwestern network of hospitals, clinics, and home care services said that about 16,000 people could be affected by a recent security incident. The UnityPoint Health breach occurred after employee email accounts were compromised in a phishing attack. Patients’ Social Security numbers and financial information are among the data exposed.
The Smart Home That Spied On Its Owner
For two months in early 2018, technology journalist Kashmir Hill let innocent household items spy on her. She had turned her one-bedroom apartment into a “smart home” and was measuring how much data was being collected by the firms that made the devices.Continue Reading…