Adobe Breach Retrospective
The Adobe breach didn’t just affect individuals, but also companies, due to password reuse. We’ve set up a site where you can check the leaked Adobe data for affected users in your organization.
A History of Hacking: Timeline Infographic
Hacking has remained a fine-tuned craft of the ages; from a breach of telegraph messages in 1903 to the Target breach of just late last year, our ideas of security have evolved, as well as our tactics.
After a Data Breach: Who’s Liable?
Following the investigation into a breach, the unraveling of the mess afterward can take months, and even years to resolve. Learn who's liable in this situation by taking a look at the cases of Target and The Independent Community Bankers of America (ICBA).
Protecting Against Critical Infrastructure Attacks: Nuclear & Otherwise
The Nuclear Regulatory Commission (NRC) was the target of three separate breaches, according to DarkReading.com and NextGov.com.
Hard-Coded & Default Passwords: Gateway for Massive Attacks
According to an analyst at CERT/CC’s Vulnerability Notes Database, certain Netgear switches contain hard-coded passwords that can allow a remote attacker to authenticate to the web server running on the device.
Anatomy of a Data Breach (2014)
> When it comes to the 2014 Verizon Data Breach Investigations Report (DBIR), web application, cyber-espionage and POS intrusions topped off the list of most frequently occurring categories of data breaches.
POS Remote Access Software: Vulnerable Without 2FA
Breaches of card data and point of sale systems often involve remote access management tools, as attackers scan for remote administration software, then use automated tools to break into weakly protected systems.
The PayPal 2FA Bypass: How Legacy Infrastructure Impacts Modern Security
> If you haven’t enabled two-factor on your PayPal account, you must like living dangerously. With the prevalence of phishing and other credential stealing techniques, relying solely on a password to protect your financially-lucrative accounts is a bad idea.
Duo Security Researchers Uncover Bypass of PayPal’s Two-Factor Authentication
> Researchers at Duo Labs, the advanced research team at Duo Security, discovered that it is possible to bypass PayPal’s two-factor authentication Security Key mechanism, in PayPal nomenclature.
Human Error Accounts for Over 95 Percent of Security Incidents, Reports IBM
According to the IBM Security Services 2014 Cyber Security Intelligence Index, over 95 percent of all incidents investigated recognize human error as a contributing factor.