article thumbnail

National Safety Council data leak: Credentials of NASA, Tesla, DoJ, Verizon, and 2K others leaked by workplace safety organization

Security Affairs

The National Safety Council leaked thousands of emails and passwords of their members, including companies such as NASA and Tesla. The National Safety Council has leaked nearly 10,000 emails and passwords of their members, exposing 2000 companies, including governmental organizations and big corporations.

Passwords 137
article thumbnail

Over a billion records belonging to CVS Health exposed online

Security Affairs

This week WebsitePlanet along with the researcher Jeremiah Fowler discovered an unsecured database, belonging to the US healthcare and pharmaceutical giant CVS Health, that was exposed online. The database was accessible to everyone without any type of authentication.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

List of data breaches and cyber attacks in November 2020 – 586 million records breached

IT Governance

million) Phil i ppines COVID-19 track and trace app leaks citizens’ data (unknown) Contractor mistakenly removed data from Hong Kong’s Queen Mary Hospital (442) Cloud Clusters Inc.

article thumbnail

A Cyber Insurance Backstop

Schneier on Security

In the first week of January, the pharmaceutical giant Merck quietly settled its years-long lawsuit over whether or not its property and casualty insurers would cover a $700 million claim filed after the devastating NotPetya cyberattack in 2017. But this is easier said than done.

article thumbnail

Ten Years Later, New Clues in the Target Breach

Krebs on Security

In a lengthy post on April 4, 2013 titled “I DON’T UNDERSTAND ANYTHING,” Ika told Pustota forum members he was so spooked by recent events that he was closing the forum and quitting the cybercrime business entirely. “It’s no secret that karma farted in my direction,” Ika said at the beginning of his post.

article thumbnail

The Hacker Mind Podcast: Hacking Behavioral Biometrics

ForAllSecure

A lot of times we depend on usernames and passwords, but those really aren’t enough. If you just use username and passwords-- well that’s easily imitated. Multifactor a what's, what's your email, what's your password. Such as their MAC address, their IP address, their geolocation. Vamosi: Good point.

article thumbnail

The Hacker Mind Podcast: Hacking Industrial Control Systems

ForAllSecure

Think of a room in a larger conference where people of like interests gather to hear speakers, see demonstrations and participate in themed Capture the Flag events. Do these events in other countries spark concern in the United States or in Europe? Going to an ICS village event. Van Norman: Oh, absolutely.