Mon.Apr 12, 2021

article thumbnail

Texas Man Charged With Planning to Bomb AWS Data Center

Data Breach Today

DOJ: Suspect Believed He Could Disrupt 70% of Internet Traffic A Texas man is facing a federal charge after he allegedly tried to buy explosives from an undercover FBI agent to bomb an AWS data center in Virginia, according to the Justice Department. The suspect believed the bombing could interrupt 70% of internet traffic, prosecutors say.

352
352
article thumbnail

ParkMobile Breach Exposes License Plate Data, Mobile Numbers of 21M Users

Krebs on Security

Someone is selling account information for 21 million customers of ParkMobile , a mobile parking app that’s popular in North America. The stolen data includes customer email addresses, dates of birth, phone numbers, license plate numbers, hashed passwords and mailing addresses. KrebsOnSecurity first heard about the breach from Gemini Advisory , a New York City based threat intelligence firm that keeps a close eye on the cybercrime forums.

Passwords 346
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Facebook Tries to 'Scrape' Its Way Through Another Breach

Data Breach Today

Social Network Attempts 'Not Hacking' Spin on Theft of 533 Million Users' Details Facebook has been attempting to dismiss the appearance of a massive trove of user data by claiming it wasn't hacked, but scraped. No matter how the theft is characterized, 533 million users have just learned that their nonpublic profile details were stolen and sold to fraudsters.

IT 338
article thumbnail

Expired certificate caused a Pulse Secure VPN global scale outage

Security Affairs

Pulse Secure VPN users were not able to login due to the expiration of a code signing certificate used to digitally sign and verify software components. Pulse Secure VPN users were not able to login after a code signing certificate used to digitally sign and verify software components has expired. Multiple users have reported on Pulse Secure VPN community their difficulties to log in their devices.

article thumbnail

Peak Performance: Continuous Testing & Evaluation of LLM-Based Applications

Speaker: Aarushi Kansal, AI Leader & Author and Tony Karrer, Founder & CTO at Aggregage

Software leaders who are building applications based on Large Language Models (LLMs) often find it a challenge to achieve reliability. It’s no surprise given the non-deterministic nature of LLMs. To effectively create reliable LLM-based (often with RAG) applications, extensive testing and evaluation processes are crucial. This often ends up involving meticulous adjustments to prompts.

article thumbnail

Iranian Nuclear Site Shut Down by Apparent Cyberattack

Data Breach Today

Report: Israeli Government Involved Israeli public media outlet Kan, citing intelligence sources, says an Israeli government cyberattack was responsible for the shutdown of an Iranian nuclear power facility on Sunday in what Iran describes as an act of "sabotage.

More Trending

article thumbnail

Microsoft to Buy Nuance Communications for $19.7 Billion

Data Breach Today

Deal Part of Effort to Provide Industry-Specific Cloud Offerings Microsoft Corp. on Monday announced it will acquire cloud-based speech technology and artificial intelligence vendor Nuance Communications in an all-cash transaction valued at $19.7 billion. The deal is expected to close by the end of this year.

article thumbnail

100M More IoT Devices Are Exposed—and They Won't Be the Last

WIRED Threat Level

The Name:Wreck flaws in TCP/IP are the latest in a series of vulnerabilities with global implications.

IoT 126
article thumbnail

Why Is Mastercard Working on Digital ID Assurance?

Data Breach Today

Sarah Clark Discusses Card Payment Network's Expanded Mission Sarah Clark of Mastercard discusses why the card payment network is expanding its focus to include digital identity assurance.

IT 287
article thumbnail

LinkedIn confirmed that it was not a victim of a data breach

Security Affairs

LinkedIn has formally denied that the recently disclosed data leak was caused by a security breach, data were obtained via web scraping. LinkedIn has issued a formal statement to deny that the recent leak that exposed the account details of more than 500 million of its registered users was caused by a security breach. A threat actor has put for sale on a popular hacker forum an archive containing data purportedly scraped from 500 million LinkedIn profiles , with another 2 million records leaked

article thumbnail

How and Why Should You Be Tracking Geopolitical Risk?

Geopolitical risk is now at the top of the agenda for CEOs. But tracking it can be difficult. The world is more interconnected than ever, whether in terms of economics and supply chains or technology and communication. Geopolitically, however, it is becoming increasingly fragmented – threatening the operations, financial well-being, and security of globally connected companies.

article thumbnail

CIPL Submits Comments on Vietnam’s Draft Decree on Personal Data Protection

Hunton Privacy

On April 8, 2021, the Centre for Information Policy Leadership (“CIPL”) at Hunton Andrews Kurth submitted comments in response to the Ministry of Public Security (“MPS”) of Vietnam’s Draft Decree on Personal Data Protection (“Draft Decree”). The Draft Decree was published on the MPS website on February 9, 2021 and the deadline to submit comments was April 9, 2021.

article thumbnail

City ordered to produce messages in ‘native format’ via The Landmark

IG Guru

Overruling objections from Parkville’s mayor and aldermen, a judge ruled on Tuesday that the city officials of Parkville must produce discovery materials from their private messaging services as requested via subpoena. The post City ordered to produce messages in ‘native format’ via The Landmark appeared first on IG GURU.

FOIA 84
article thumbnail

INSPIRE 20 Podcast: Meet Erik Day, Senior Vice President, Small Business, Dell Technologies

Micro Focus

Erik Day, a senior vice president who leads Dell Technologies’ small-business division in North America and Brazil shares his thoughts on how he uses his influence for much more than just being a voice for the LGBTQ+ community. He believes he should also be used for being a feminist and being an ally to his black. View Article.

83
article thumbnail

Microsoft is open sourcing CyberBattleSim Enterprise Environment Simulator

Security Affairs

Microsoft released as open-source the ‘CyberBattleSim Python-based toolkit which is an Enterprise Environment Simulator. Microsoft has recently announced the open-source availability of the Python-based enterprise environment simulator. named ‘CyberBattleSim.’ “CyberBattleSim is an experimentation research platform to investigate the interaction of automated agents operating in a simulated abstract enterprise network environment.

article thumbnail

7 Pitfalls for Apache Cassandra in Production

Apache Cassandra is an open-source distributed database that boasts an architecture that delivers high scalability, near 100% availability, and powerful read-and-write performance required for many data-heavy use cases. However, many developers and administrators who are new to this NoSQL database often encounter several challenges that can impact its performance.

article thumbnail

Wake Up and Smell the JavaScript

Dark Reading

The SolarWinds attack showed the true meaning of a supply chain breach. And it's the canary in the coal mine for sensitive data on the Web.

Mining 99
article thumbnail

IcedID Circulates Via Web Forms, Google URLs

Threatpost

Attackers are filling out and submitting web-based "contact us" forms, thus evading email spam filters.

Security 108
article thumbnail

Microsoft Warns of Malware Delivery via Google URLs

Dark Reading

A new campaign abuses legitimate website contact forms to send URLs that ultimately deliver the IcedID banking Trojan.

140
140
article thumbnail

3 ways to bridge the cloud skills gap

OpenText Information Management

The benefits of moving to the cloud are established—it’s no longer a matter of if but of how and when businesses will make the transition. IDC reports that 90 percent of businesses are using cloud today on their journey to becoming a digital-first enterprise. The pace of that transition doubled during the pandemic. Moving applications … The post 3 ways to bridge the cloud skills gap appeared first on OpenText Blogs.

Cloud 75
article thumbnail

Reimagined: Building Products with Generative AI

“Reimagined: Building Products with Generative AI” is an extensive guide for integrating generative AI into product strategy and careers featuring over 150 real-world examples, 30 case studies, and 20+ frameworks, and endorsed by over 20 leading AI and product executives, inventors, entrepreneurs, and researchers.

article thumbnail

1.3M Clubhouse Users’ Data Dumped in Hacker Forum for Free

Threatpost

Clubhouse denies it was ‘breached’ and says the data is out there for anyone to grab.

IT 109
article thumbnail

Microsoft Uses Machine Learning to Predict Attackers' Next Steps

Dark Reading

Researchers build a model to attribute attacks to specific groups based on tactics, techniques and procedures, and then figure out their next move.

113
113
article thumbnail

Zero Trust: The Mobile Dimension

Threatpost

Hank Schless, senior security solutions manager at Lookout, discusses how to secure remote working via mobile devices.

article thumbnail

New Malware Downloader Spotted in Targeted Campaigns

Dark Reading

Saint Bot is being used to drop stealers on compromised systems but could be used to deliver any malware.

95
article thumbnail

How to Migrate From DataStax Enterprise to Instaclustr Managed Apache Cassandra

If you’re considering migrating from DataStax Enterprise (DSE) to open source Apache Cassandra®, our comprehensive guide is tailored for architects, engineers, and IT directors. Whether you’re motivated by cost savings, avoiding vendor lock-in, or embracing the vibrant open-source community, Apache Cassandra offers robust value. Transition seamlessly to Instaclustr Managed Cassandra with our expert insights, ensuring zero downtime during migration.

article thumbnail

Man Arrested for AWS Bomb Plot

Threatpost

A man caught in an FBI sting said he wanted to destroy "70 percent of the internet" by going after the tech giant's data centers.

Cloud 80
article thumbnail

OpenText World Europe 2021—Discover the Ultimate Cloud™

OpenText Information Management

Organizations have massively transformed over the past year. Work models are in flux, new endpoints are proliferating, data is under siege, consumer behavior is changing and global supply chains are being disrupted. COVID-19 continues to drive significant change and disruption, and where this all lands remains unclear. But what we do know is that those … The post OpenText World Europe 2021—Discover the Ultimate Cloud™ appeared first on OpenText Blogs.

Cloud 64
article thumbnail

Data is amazing. Your enterprise should think so too

Collibra

Build your enterprise data culture: T-Mobile’s top 10 strategies. You need to put the power of data into the people’s hands! You can have the most innovative data platform for your company, but if all the awesome remains in your development space alone, then your enterprise is missing out on the potential acceleration and benefits. At T-Mobile, we drive successful engagement across the enterprise through strategies that can translate across many different products and systems.

article thumbnail

DAM for rent: The rise of cloud-based digital asset management by subscription

OpenText Information Management

The use of rich media in day-to-day operations is no longer limited to marketing departments or content-centric organizations like those in the motion picture industry, museums or news broadcasting. Rich media has now become a key part of almost any business. As a result, digital asset management (DAM) has become a valuable capability for a wide variety of organizations, from financial services to logistics providers and everything in between.

Cloud 59
article thumbnail

Entity Resolution Checklist: What to Consider When Evaluating Options

Are you trying to decide which entity resolution capabilities you need? It can be confusing to determine which features are most important for your project. And sometimes key features are overlooked. Get the Entity Resolution Evaluation Checklist to make sure you’ve thought of everything to make your project a success! The list was created by Senzing’s team of leading entity resolution experts, based on their real-world experience.

article thumbnail

Percayso Inform – powering data-driven innovation for the insurance industry.

Information Matters

The UK has a successful and rapidly growing data-driven insurtech sector. Finding new ways to use data and technology to transform this multi-billion pound industry is helping insurers and brokers Read more. The post Percayso Inform – powering data-driven innovation for the insurance industry. appeared first on Information Matters.

article thumbnail

Lisa Sotto Leads LexisNexis’ Emerging Issues Webinar on Everything You Need to Know About the CPRA

Hunton Privacy

On March 18, 2021, Lisa Sotto , Chair of Hunton’s global Privacy and Cybersecurity practice , and Mike Swift , MLaw Chief Global Digital Risk Correspondent, led a webinar on Everything You Need to Know About the California Privacy Rights Act. The webinar, which was part of LexisNexis’ Emerging Issues Webinar Series , provides an immersive look at the California Privacy Rights Act (“CPRA”) and other recent privacy laws.

Privacy 57
article thumbnail

Biden Nominates Former NSA Officials for Top Cybersecurity Roles

Dark Reading

President Biden has nominated Jen Easterly as the new director of CISA and is expected to nominate Chris Inglis as the first national cyber director.