Last year, a security researcher alerted Equifax that anyone could have stolen the personal data of all Americans. The company failed to heed the warning. Great reporting by Lorenzo Franceschi-Bicchierai on Motherboard. Go read it all.
Category: Commentaries and Analyses
Thirty Percent of CEO Email Accounts Exposed in Breaches: Study
Kevin Townsend reports: Thirty percent of CEOs from the world’s largest organizations have had their company email address and password stolen from a breached service. Given the continuing tendency for users to employ simple passwords and reuse the same passwords across multiple accounts, the implication is that at least some of these CEOs are at…
Dark web vendors are selling remote access to corporate PCs for as little as $3
Danny Palmer reports: Dark Web marketplaces are selling remote access to desktop PCs for as little as $3, allowing criminals to spy on firms without resorting to malware. […] One of the most popular underground stores selling access is ‘Ultimate Anonymity Services’. Founded in early 2016, UAS offers over 35,000 RDP credentials for sale in…
Is a vendetta by the FBI keeping an innocent man in jail, or has DOJ just lost its mind altogether?
I’ve had enough. Actually, I’ve had more than enough. I should have written this post months ago. Last week I received notice from Twitter Legal that they had been served with a grand jury subpoena for my account information. Also listed in the grand jury subpoena were four other Twitter accounts, only one of which…
DOJ Subpoenas Twitter About Popehat, Dissent Doe And Others Over A Smiley Emoji Tweet
Over on TechDirt, Mike Masnick had the patience to write up and report on some of what I should have written up already, but hadn’t. Read Mike’s report on how I and others wound up as the targets of a grand jury subpoena on TechDirt. And if you read carefully, you’ll see that I wound…
WP29 guidelines on personal data breach notification under GDPR
Anita Anand of Allen & Overy writes: The Article 29 Working Party this week published draft Guidelines on personal data breach notificationunder GDPR. The relevant GDPR provisions are often misrepresented, and in many respects leave matters open to interpretation – a good or bad thing depending on the day. Many are now asking what further…