There’s a follow-up to a case I first noted in May of 2015. Charles Harvey Eccleston, 62, a former employee of the U.S. Department of Energy (DOE) and the U.S. Nuclear Regulatory Commission (NRC), pleaded guilty yesterday to a federal offense stemming from an attempted e-mail “spear-phishing” attack in January 2015 that targeted dozens of DOE…
Category: Of Note
Cn: Hackers Steal Account Details of 20.6 Mln Taobao Users
Taobao, the Chinese equivalent of eBay, was reportedly hacked in October 2015, but it doesn’t seem to have made U.S. news. Marbridge Consulting writes: Police in Zhejiang province recently convened a press conference to announce that a group of hackers obtained information pertaining to approximately 99 mln accounts on Alibaba Group’s C2C e-commerce site Taobao….
The Data Breach You Haven’t Heard About: Hurd
Rep. Will Hurd writes that Congress and officials still don’t have answers about the discovery in December by software developer Juniper Networks of a backdoor in its ScreenOS software that could have allowed foreign entities to decrypt and read government communications. The backdoor is thought to have been inserted in 2013. And while the OPM breach…
Hackers ‘Dox’ Miami Police Officers With Data Stolen From Government Database
Lorenzo Francesco-Bicchierai reports: A group of hackers has dumped the names, phone numbers and email addresses of more than 80 police officers from Miami, Florida, in what appears to be an attempt to “dox” the agents. The hackers appear to be loosely affiliated with the group of alleged teen hackers, known as “Crackas With Attitude”…
KR: Credit card firms ordered to compensate consumers for data leak
The Korea Herald reports the latest development in a massive data leak first reported at the end of 2013: A local court on Friday ordered three credit card-related companies, hit by a massive data leak in 2014, to give 100,000 won ($83) to each victim, a ruling that could set a precedent for other similar…
FDA outlines cybersecurity recommendations for medical device manufacturers
Jan. 15 – The U.S. Food and Drug Administration today issued a draft guidance outlining important steps medical device manufacturers should take to continually address cybersecurity risks to keep patients safe and better protect the public health. The draft guidance details the agency’s recommendations for monitoring, identifying and addressing cybersecurity vulnerabilities in medical devices once they have…