Troy Hunt

DECEMBER 17, 2017

Before I left DC, I promised the folks there that I'd come back with recommendations on how we can address the root causes of data breaches. I'm going to do that in a five-part, public blog series over the course of this week. They may deny the usefulness of the skill. "god rights"). Oh - and it uses a password of 12345678.

Data breaches 238

Data breaches Education Passwords Penetration Testing 238

Security Boulevard

JUNE 20, 2023

NIST Privacy Framework - organizations must identify the purposes for collecting and using PII. Federal Trade Commission (FTC) Act, Section 5 - organizations must disclose their data collection practices, including the purposes for which they collect and use PII.

Data collection 52

Data collection IoT Marketing Data privacy 52

Security Affairs

APRIL 6, 2023

User personal data for sale. Crooks offers data collected through phishing campaign to the subscribers. Data includes verified online banking credentials, in some cases phishers also provides info on the account balances. ” continues the analysis. ” Phishing-as-a-Service. .

Phishing 98

Phishing Scams Social Engineering Accountability 98

Google Security

MAY 5, 2023

This technology behind passkeys allows users to log in to their account using any form of device-based user verification, such as biometrics or a PIN code. If you create a passkey on one device the Google Password Manager can make it available on your other devices that are signed into the same system account.

Authentication 123

Authentication Passwords Technology Password Management 123

BH Consulting

AUGUST 31, 2023

Having policies and procedures to secure social media accounts and minimise the potential for incidents can help. So in this blog, I’ll talk about the risks and steps to mitigate them. The organisation had suffered reputational damage after one of the team followed some accounts that didn’t fit with its values. More than 4.7

Media 52

Media Accountability Passwords Authentication 52

Malwarebytes

JANUARY 25, 2024

The threat actor is abusing Google advertiser accounts to create malicious ads and pointing them to pages where unsuspecting users will download Remote Administration Trojan (RATs) instead. While we don’t know the threat actor’s true intentions, data collection and spying may be one of their motives.

Malware 126

Malware Advertising Accountability Encryption 126

Security Affairs

APRIL 15, 2023

The collected data is sent to the C2 server every two days, but the cycle depends on the remote configuration. The level of data collection depends on the permissions granted to the app using the malicious library.

Data collection 98

Data collection Mobile Malware Education 98

Security Affairs

APRIL 6, 2023

The Threat Report Portugal: H2 2022 compiles data collected on the malicious campaigns that occurred from July to December, H2, 2022. The Portuguese Abuse Open Feed 0xSI_f33d is an open-sharing database with the ability to collect indicators from multiple sources, developed and maintained by Segurança-Informática.

Threat Reports 98

Threat Reports Phishing Malware Banking 98

Troy Hunt

NOVEMBER 25, 2020

Back to the bit about risks impacting data collected by IoT devices and back again to CloudPets, Context Security's piece aligned with my own story about kids' CloudPets messages being left exposed to the internet. Here we had a situation where an attacker could easily control moving parts within a car from a remote location.

IoT 363

IoT Firmware Risk Encryption 363

Security Affairs

DECEMBER 29, 2019

According to Twelve Security , the exposed data includes: User name and email of those who purchased cameras and then connected them to their home 24% of the 2.4 According to Twelve Security , the exposed data includes: User name and email of those who purchased cameras and then connected them to their home 24% of the 2.4

IoT 96

IoT Accountability Advertising Wireless 96

Troy Hunt

DECEMBER 20, 2017

I try the "report abuse" feature (the closest thing I could find to a contact form) except that error'd out because I allegedly had an account with them and wasn't logged on (I later learned that someone else had created an account using my email address). — Michael Kan (@Michael_Kan) February 28, 2017.

Data breaches 247

Data breaches Risk Accountability Data collection 247

BH Consulting

MARCH 26, 2025

It introduces accountability measures for large platforms, and strengthens users’ rights. The Data Act enhances access to and use of non-personal data across sectors. The Digital Services Act regulates online services to enhance digital trust.

Government 52

Government Artificial Intelligence Risk Digital transformation 52

Centraleyes

APRIL 17, 2025

Various regulatory bodies and industry organizations either require or recommend the use of COSO: The Securities and Exchange Commission (SEC) and the Public Company Accounting Oversight Board (PCAOB) recognize COSO as a valid framework for SOX compliance, ensuring public companies maintain strong internal controls over financial reporting.

Risk 52

Risk Technology Accountability Cybersecurity 52

Hacker's King

AUGUST 7, 2024

In this article, we will explore how to use an OSINT tool to gather information about a phone number, email address, and social media account. It combines many open-source tools into a single tool, simplifying the data collection and analysis processes for researchers and cybersecurity professionals.

Media 52

Media Data collection Accountability Hacking 52

Thales Cloud Protection & Licensing

MAY 31, 2022

To that effect, TCS, Global leader in cyber security services, and Thales recently announced a partnership offering a one-stop solution for data privacy that organisations leverage to manage this complexity and help reach compliance. Accountability and delegated responsibility. Implementing privacy. Glocal” expertise, global and local.

Data privacy 71

Data privacy Digital transformation Accountability Data collection 71

Troy Hunt

DECEMBER 19, 2017

The site asks you for some personal information when you create the account which it then stores in a database. Who now owns that data? This is an important question because it drives the way organisations then treat that data. Data Collection Should be Minimised, Not Maximisation. The cat site?

Data breaches 169

Data breaches Data collection B2B Mobile 169

Thales Cloud Protection & Licensing

APRIL 17, 2024

Security researchers from Imperva described in a blog called XSS Marks the Spot: Digging Up Vulnerabilities in ChatGPT how they discovered multiple security vulnerabilities in OpenAI’s ChatGPT that, if exploited, would enable bad actors to hijack a user’s account. Consent management is also considered critical.

Risk 71

Risk Data collection Artificial Intelligence Accountability 71

Identity IQ

JANUARY 17, 2023

Staying safe on the internet means knowing what privacy data is and how to help protect your personal information. In this blog, we will take a closer look at what privacy data is and share details about how you can keep yourself safe. Login information for online accounts you have. Why Is Data Privacy Important?

Data privacy 98

Data privacy Identity Theft Accountability Banking 98

Security Boulevard

APRIL 17, 2024

Security researchers from Imperva described in a blog called XSS Marks the Spot: Digging Up Vulnerabilities in ChatGPT how they discovered multiple security vulnerabilities in OpenAI’s ChatGPT that, if exploited, would enable bad actors to hijack a user’s account. Consent management is also considered critical.

Risk 69

Risk Data collection Artificial Intelligence Accountability 69

Webroot

OCTOBER 3, 2024

As OpenText’s Muhi Majzoub, EVP and Chief Product Officer, points out: “ As personal and family AI use increases, it’s essential to have straightforward privacy and security solutions and transparent data collection practices so everyone can use generative AI safely.

Education 115

Education Passwords Password Management Authentication 115

CyberSecurity Insiders

APRIL 30, 2021

where fraudsters impersonated a trusted business partner , manipulat ing the CEO into transferring $243,000 to the scammers’ account. . In this blog, we look at the rise of deepfakes and how businesses and consumers alike can protect themselves. ? . one business leader fell victim to a deepfake scam ?where What are deepfakes? .

Technology 93

Technology Authentication Media Accountability 93

Security Boulevard

MARCH 31, 2022

Data collection from FTP clients, IM clients. In a blog post published on March 22nd, 2022, Microsoft confirmed that one of their user accounts had been compromised by the Lapsus$ (also known as DEV-0537) threat actor, though they claimed that the information accessed was limited and that “no customer code or data was involved”.

Cybersecurity 98

Cybersecurity Social Engineering Passwords Malware 98

Thales Cloud Protection & Licensing

JULY 12, 2018

But making the IoT work requires trust in the devices and the data they collect. In this blog, and in one by my colleague Julie Lassabliere from Safelayer Secure Communications , we explore the need for trusted device identification and data integrity in the IoT. The post Knock, Knock; Who’s There? –

IoT 72

IoT Data collection Encryption eCommerce 72

McAfee

NOVEMBER 22, 2021

Based on the data collected by our research team from millions of connected McAfee Enterprise users across the globe, the overall usage of enterprise cloud services spiked by 50% across all industries, while the collaboration services witnessed an increase of up to 600% in usage.

Digital transformation 86

Digital transformation Data collection Technology Mobile 86

Webroot

JANUARY 27, 2025

Here are some common examples: Health data : Information stored in a patient portal, online pharmacy, or health insurance website. Financial data : Details of your bank account, 401K fund, or IRA. Apps : Data collected by various applications you use.

Data privacy 61

Data privacy Backups Antivirus Encryption 61

Thales Cloud Protection & Licensing

MAY 22, 2024

The GDPR's new requirements necessitated a fundamental overhaul of CIAM approaches, a relevance that persists today: Key GDPR principles reshaping CIAM Explicit Consent : Before collecting data, businesses should obtain clear and affirmative consent from users.

Data collection 62

Data collection Data privacy Encryption Authentication 62

McAfee

JANUARY 28, 2020

If you reuse passwords, you only need one of your cloud services to be breached—once criminals have stolen your credentials through one service, they potentially have access to every account that shares those same credentials, including banking platforms, email and other services where sensitive data is stored.

Passwords 71

Passwords Mobile VPN Identity Theft 71

Centraleyes

DECEMBER 4, 2024

Privacy laws hold accountable those who steal or misuse data, and are necessary to protect privacy rights. NYPA is a comprehensive consumer privacy law that aims to protect the privacy of the citizens of New York by empowering them to exercise greater control over their personal information and by holding businesses accountable.

Data collection 52

Data collection Accountability Government Media 52

SC Magazine

APRIL 9, 2021

Security pros may recall the 2017 NotPetya attack on tax accounting software by M.E. The major public cloud providers have facilities that let teams do event and data collection without agents. But these types of attacks on commercial products aren’t new. In the past few years alone, at least four others come to mind.

Software 86

Software Data collection Malware Risk 86

Digital Shadows

NOVEMBER 5, 2024

In this blog, we’ll detail how an AI agent can take generative AI a step further. Generative AI is Just One Tool of Agentic AI While AI chatbots simplify initial data collection by giving quick access to information through direct prompts and queries, they still leave the analyzing and decision- making to analysts.

Passwords 52

Passwords Malware Data collection Phishing 52

Digital Shadows

NOVEMBER 5, 2024

In this blog, we’ll detail how an AI agent can take generative AI a step further. Generative AI is a Tool of Agentic AI While generative AI chatbots simplify initial data collection by giving quick access to information through direct prompts and queries, they still leave the analyzing and decision- making to analysts.

Malware 52

Malware Data collection Phishing Passwords 52

SecureList

NOVEMBER 25, 2022

Certain tech giants recently started adding tools to their ecosystems that are meant to improve the data collection transparency. A further tracking service operated by Google, Google Analytics, collects data on website visitors and provides detailed statistics to clients.

Internet 99

Internet Internet Advertising Marketing 99

Webroot

MARCH 10, 2021

Hybrid – As its name implies, some options blend cloud-based solutions with a local collection server to gather information and push a single source, securely, to the cloud for analysis and processing. Feeding your SIEM a healthy diet of data. appeared first on Webroot Blog. The post Does a SIEM make sense for my MSP?

Wireless 111

Wireless Data collection IoT Firewall 111

Security Boulevard

APRIL 18, 2023

Thank you to Cristian M for his AzureHound PR and BloodHound PR to bring support for attack paths traversing Automation Accounts, Logic Apps, Web Apps, and Function Apps. Cristian’s PRs also add support for Storage Accounts, which we will be including in a future update. The SMSA work didn’t quite make it in time for the BloodHound 4.3

Accountability 64

Accountability Data collection Authentication Cybersecurity 64

Centraleyes

OCTOBER 10, 2024

This blog will explore the key steps to automate GDPR compliance, best practices, and the tools available to facilitate this automation. Understanding GDPR and Its Challenges The GDPR sets stringent standards for automating data privacy compliance. It applies to any organization that processes the personal data of EU citizens.

Data collection 52

Data collection Data breaches Data privacy Risk 52

Malwarebytes

JANUARY 16, 2024

Together, CWRU and the FBI were able to identify that an IP address with which the malware was communicating had also been used to access the alumni email account of a man called Phillip Durachinsky. The IP address was linked to the malware using data collected by CWRU, Malwarebytes, and AT&T.)

Malware 112

Malware Passwords Identity Theft Data collection 112

The Security Ledger

JANUARY 22, 2019

In this week’s episode (#130): we speak with security researcher Troy Hunt, founder of HaveIBeenPwned.com about his latest disclosure: a trove of more than 700 million online account credentials he’s calling “Collection #1.” Even more worrying: Collection #1 isn’t the only repository of stolen credential out there.

IoT 45

IoT Passwords Accountability Data collection 45