article thumbnail

The Right Way to Change Your Identity Service Providers

Data Breach Today

Takeda's Head of Security Authentication Discusses the Process and Challenges Markus Kalka, head of security authentication services at Takeda, talks about the challenges of changing identity service providers and shares the experience of consolidating three services into one at his company, a Japanese multinational pharmaceutical.

article thumbnail

French pharmaceuticals distribution platform Apodis Pharma leaking 1.7+ TB of confidential data

Security Affairs

The CyberNews investigation team discovered French pharmaceuticals distribution platform Apodis Pharma leaking 1.7+ Apodis Pharma is a company that offers a digital supply chain management platform and other software solutions created for pharmacies, healthcare institutions, pharmaceutical laboratories, and health insurance companies.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Ask Fitis, the Bear: Real Crooks Sign Their Malware

Krebs on Security

Code-signing certificates are supposed to help authenticate the identity of software publishers, and provide cryptographic assurance that a signed piece of software has not been altered or tampered with. “Why do I need a certificate? At least my laptop is sure of it.” ” Fitis’s Livejournal account. Image: Archive.org.

article thumbnail

Over a billion records belonging to CVS Health exposed online

Security Affairs

This week WebsitePlanet along with the researcher Jeremiah Fowler discovered an unsecured database, belonging to the US healthcare and pharmaceutical giant CVS Health, that was exposed online. The database was accessible to everyone without any type of authentication. ” reported the WebsitePlanet website. Pierluigi Paganini.

article thumbnail

Google warned users of 33,015 nation-state attacks since January

Security Affairs

The company’s alert advises Gmail users to take several measures to secure their accounts, such as enrolling in the Advanced Protection Program, keeping software up to date, enabling Gmail 2-step verification , as well as using Google Authenticator and/or a physical security key for 2-step verification.

article thumbnail

Alleged docs relating to Covid-19 vaccine leaked in darkweb

Security Affairs

Security experts from threat intelligence firm Cyble have found several documents relating to the Covid-19 vaccine allegedly stolen from the European Medicines Agency (EMA) leaked in the Darkweb. In the last months, security experts reported the surge of the illegal market for Covid-19 vaccines on the Darkweb market.

article thumbnail

Open database leaves major Chinese ports exposed to shipping chaos?

Security Affairs

ElasticSearch lacks a default authentication and authorization system – meaning the data must be put behind a firewall, or else run the risk of being freely accessed, modified or deleted by threat actors. appeared first on Security Affairs. Original Post @CyberNews. About the author Damien Black. Pierluigi Paganini.