Catalin Cimpanu reports: A hacker has published today a list of plaintext usernames and passwords, along with IP addresses for more than 900 Pulse Secure VPN enterprise servers. ZDNet, which obtained a copy of this list with the help of threat intelligence firm KELA, verified its authenticity with multiple sources in the cyber-security community. Read more…
Category: Business Sector
SG: The Central Depository and two other organisations fined for data privacy breach
Yip Wai Yee reports: The Central Depository (CDP) and two other organisations have been fined a total of $47,000 for breaching data privacy laws. CDP received the biggest fine of $32,000 after it mailed dividend cheques to outdated addresses, putting more than 200 account holders at risk of having their personal data disclosed. According to…
Twitter says security flaw may have exposed Android users’ direct messages
Salvador Rodriguez reports: Twitter on Wednesday disclosed a new security vulnerability that may have exposed the direct messages of users who access the service using Android devices. Specifically, the vulnerability could have exposed the private data of Twitter users running devices with Android OS versions 8 and 9, the company said. Read more on CNBC.
Delivery startup, iVoy, experiences data breach, over 127,000 accounts exposed
Mariana Lopez reports: What a week it must have been over at Mexican logistics startup, iVoy. When your users’ data has been potentially compromised, you have a lot to do. Last Tuesday (28), news broke that it was among a series of companies to experience a data breach. In the process, a reported 127,432 account users’ emails and iVoy passwords were…
Court Approves Class Action Settlement in RE: YAHOO! Inc.
Zarish Baig of Squire Patton Boggs writes: Yahoo!’s data breach class action is finally being put to rest. Last month, the Northern District of California approved the proposed $117.5M settlement to resolve the claims of approximately 194 million class members in In re Yahoo! Inc. Customer Data Sec. Breach Litig., No. 16-MD-02752-LHK, 2020 U.S. Dist….
Canon hit by Maze Ransomware attack, 10TB data allegedly stolen
Lawrence Abrams reports: Canon has suffered a ransomware attack that impacts numerous services, including Canon’s email, Microsoft Teams, USA website, and other internal applications. BleepingComputer has been tracking a suspicious outage on Canon’s image.canon cloud photo and video storage service resulting in the loss of data for users of their free 10GB storage feature. Read…