KnowBe4

FEBRUARY 14, 2023

CyberheistNews Vol 13 #07 | February 14th, 2023 [Scam of the Week] The Turkey-Syria Earthquake Just when you think they cannot sink any lower, criminal internet scum is now exploiting the recent earthquake in Turkey and Syria. I talk often about the back-and-forth that exists between cybercriminal groups and security vendors.

Phishing 83

Phishing Security awareness Compliance Risk 83

IT Governance

MARCH 11, 2024

Cybernews’s research team discovered the MongoDB server in December 2023 and contacted Glosbe. million OpenSea records for sale on hacking forum A cyber criminal known as ‘bossmoves90004’ claims to have exfiltrated 6.9 Glosbe did not reply, but the open instance was soon closed. Data breached: 6,935,412 individuals’ data.

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

IT Governance

DECEMBER 11, 2023

Researchers from the German cyber security company Aplite discovered 3,806 servers from 111 countries accessible on the Internet. Source (New) Transport USA Yes 129,611 Tcman Source (New) Manufacturing Spain Yes 108 GB (179 files) Compass Group Italia Source (New) Hospitality Italy Yes 107 GB Pan-American Life Insurance Group, Inc.

Data Privacy 101

Data Privacy Energy and Utilities Privacy Manufacturing 101

Krebs on Security

DECEMBER 29, 2022

Until recently, I was fairly active on Twitter , regularly tweeting to more than 350,000 followers about important security news and stories here. I will also continue to post on LinkedIn about new stories in 2023. Two months later, Experian would be hit with a class-action lawsuit over these security and privacy failures.

Passwords 237

Passwords Ransomware Computer and Electronics Encryption 237

IT Governance

FEBRUARY 6, 2024

At the time of writing, it’s unclear whether this is related to a 2023 data breach suffered by the company, as discussed by Have I Been Pwned’s Troy Hunt last March. million Gumtree user records allegedly for sale A user database from the classified advertising platform Gumtree has allegedly been offered for sale on a hacking forum.

Data Privacy 88

Data Privacy Privacy Insurance Security 88

eSecurity Planet

MARCH 28, 2023

Originally designed as a network access control (NAC) solution, Aruba ClearPass continues to evolve into a portfolio of network security tools. 10+ million authentications a day) as well as distributed environments requiring local authentication survivability across multiple geographies (e.g. 30 points of presence).

Authentication 116

Authentication Access IoT MDM 116

IT Governance

JANUARY 30, 2024

Mobile network database breach exposes 750 million Indians’ personal data The Indian security company CloudSEK claims to have found the personal data of 750 million Indians for sale on an “underground forum”. Data breached: 2 PB. TB Four Hands Source (New) Manufacturing USA Yes 1.5 Source (New) Non-profit USA Yes 25,908.62

Data Privacy 52

Data Privacy Retail Privacy Manufacturing 52

IT Governance

DECEMBER 19, 2023

An investigation determined that personal data, including names, addresses, phone numbers, Social Security numbers, dates of birth and bank account numbers, belonging to nearly 15 million people was obtained by an unauthorised party between 30 October and 1 November. Data breached: personal data belonging to 14,690,284 individuals.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

IT Governance

APRIL 29, 2024

Publicly disclosed data breaches and cyber attacks: in the spotlight Data scraping site taken offline after billions of Discord users’ messages offered for sale A data scraping website called Spy.pet has been taken offline after harvesting more than 4 billion messages made by almost 630 million Discord users and offering them for sale.

Data Privacy 94

Data Privacy Privacy Manufacturing Security 94

Security Affairs

APRIL 28, 2024

Every week the best security articles from Security Affairs are free for you in your email box. A new round of the weekly SecurityAffairs newsletter arrived! Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Security 115

Security Data breaches Ransomware Mining 115

IT Governance

FEBRUARY 1, 2023

Welcome to our January 2023 list of data breaches and cyber attacks. The new year comes with the promise of fresh beginnings and the promise to revolve the bad habits of our past, but we’ve had no such luck in the cyber security sector. You can find the full list of data breaches and cyber attacks below.

Data breaches 136

Data breaches Ransomware Insurance Government 136