Remove Course Remove Mining Remove Phishing Remove Video
article thumbnail

Acuity Who? Attempts and Failures to Attribute 437GB of Breached Data

Troy Hunt

Slightly different column count to mine (and similar but different to the hacker forum post), and slightly different email count, but the similarities remain striking. So how many "Acuity" companies are out there in total?! And it's called Acuity!

Insurance 122
article thumbnail

Padlocks, Phishing and Privacy; The Value Proposition of a VPN

Troy Hunt

As I started delving back through my own writing over the years, the picture became much clearer and it really crystallised just this week after I inadvertently landed on a nasty phishing site. In the end I broke it down into 3 Ps: padlocks, phishing and privacy. Here's the value proposition of a VPN in the modern era: 1.

Privacy 143
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

The Decreasing Usefulness of Positive Visual Security Indicators (and the Importance of Negative Ones)

Troy Hunt

And let's be fair to Barclays - it's not just them offering outdated and inaccurate advice about the true meaning of the padlock: Taking a mandatory Cyber Awareness Course. Last year, I wrote a long piece on certs and phishing which I'll come back to and talk about more a little later on. But the option does not exist.

article thumbnail

Happy 13th Birthday, KrebsOnSecurity!

Krebs on Security

You just knew 2022 was going to be The Year of Crypto Grift when two of the world’s most popular antivirus makers — Norton and Avira — kicked things off by installing cryptocurrency mining programs on customer computers. It emerges that email marketing giant Mailchimp got hacked.

Passwords 233
article thumbnail

PayPal's Beautiful Demonstration of Extended Validation FUD

Troy Hunt

Here's the exact moment deep-linked in the recorded video: Well that was unexpected. Now, you may have actually spotted in the video that the cert was issued by "DigiCert SHA2 Extended Validation Server CA" which would imply EV. Of course they are! It all started on stage at NDC Sydney in September, more than 8 months ago now.

Phishing 103
article thumbnail

2024 State of Cybersecurity: Reports of More Threats & Prioritization Issues

eSecurity Planet

Compromised Credentials Compromised identities from phishing, info stealers, keyloggers, and bad password habits provide the entry point for most ransomware attacks and data breaches. NetScout: Observed 13,142,840 DDoS attacks, including: 104,216 video gaming enterprise attacks. 20,551 gambling industry attacks.