Data Breach

BreachForums Founder Will Not Be Going To Jail

Conor Brian Fitzpatrick, who founded and oversaw BreachForums, received a sentence of time served and 20 years of supervised release. Fitzpatrick, also known online as “pompompurin,” was detained in New York in March 2023 and charged with possessing child pornography and conspiring to commit access device fraud. After posting a $300,000 bond and entering a […]

BreachForums Founder Will Not Be Going To Jail Read More »

Microsoft Receives a €60 million Fine from France for Using Advertising Cookies Without User Consent.

A €60 million ($63.88 million) fine has been levied against Microsoft’s Ireland subsidiary by France’s privacy authority for placing advertising cookies on customers’ computers without getting their permission, a violation of EU data protection laws. Users of Microsoft’s Bing search engine did not have a “tool to refuse cookies as simply as accepting them,” according

Microsoft Receives a €60 million Fine from France for Using Advertising Cookies Without User Consent. Read More »

LastPass Acknowledges Serious Data Breach, Password Vaults Stolen

The LastPass security breach in August 2022 might have been more serious than the firm had initially revealed. The well-known password management service disclosed on Thursday that, using information stolen from the earlier break-in, malicious actors were able to steal a wealth of personal information belonging to its users, including their encrypted password vaults. Basic

LastPass Acknowledges Serious Data Breach, Password Vaults Stolen Read More »

LastPass Suffers Another Security Breach; Exposed Some Customers Information

Popular password-management firm LastPass announced that it is looking into a second security issue in which hackers gained access to some of its customer data. According to LastPass CEO Karim Toubba, “We recently discovered suspicious activity within a third-party cloud storage service, which is now used by both LastPass and its partner, GoTo.” In October

LastPass Suffers Another Security Breach; Exposed Some Customers Information Read More »

Hackers Leak Another Set of Medibank Customer Data on the Dark Web

Following its reluctance to pay a ransom, Medibank revealed on Thursday that the threat actors responsible for the disastrous cyberattack have disclosed another data dump of information taken from its systems on the dark web. The Australian health insurance said, “We are in the midst of reviewing the data, but the data released looks to

Hackers Leak Another Set of Medibank Customer Data on the Dark Web Read More »

Microsoft Confirms Server Misconfiguration Led to 65,000+ Companies’ Data Leak

In response to a security mistake that left an endpoint publicly available over the internet without any authentication, Microsoft this week acknowledged that it unintentionally exposed information pertaining to thousands of customers. According to a warning from Microsoft, “this misconfiguration created the potential for unauthenticated access to some business transaction data corresponding to interactions between

Microsoft Confirms Server Misconfiguration Led to 65,000+ Companies’ Data Leak Read More »

400 Android and iOS Apps Stealing User Log-in Credentials Have Been Detected by Facebook

On Friday, Meta Platforms announced that it had discovered over 400 malicious apps on Android and iOS that it claimed were aimed at online users in order to steal their Facebook login credentials. According to a study provided with The Hacker News by the social media giant, “These programs were placed on the Google Play

400 Android and iOS Apps Stealing User Log-in Credentials Have Been Detected by Facebook Read More »

Ex-NSA Systems Security Engineer Detained for Attempting To Sell Secret Data to Foreign Government

A former employee of the National Security Agency (NSA) in the United States has been detained on suspicion of attempting to sell sensitive information to a foreign agent who was actually a Federal Bureau of Investigation undercover agent (FBI). From June 6 to July 1, 2022, Jareh Sebastian Dalke, 30, worked for the NSA for

Ex-NSA Systems Security Engineer Detained for Attempting To Sell Secret Data to Foreign Government Read More »

Shopify Caught Using Weak Password Policy Involved in Password Breaches

According to a recent revelation, the Shopify customer-facing section of its website has extremely lax password requirements. The article claims that Shopify requires its users to create passwords that are at least five characters long and do not contain a space at the start or end. One billion passwords that were known to have been

Shopify Caught Using Weak Password Policy Involved in Password Breaches Read More »