Schneier on Security

JANUARY 21, 2022

MY2022 is fairly straightforward about the types of data it collects from users in its public-facing documents. However, as the app collects a range of highly sensitive medical information, it is unclear with whom or which organization(s) it shares this information.

Surveillance 363

Surveillance Encryption Wireless Government 363

Schneier on Security

SEPTEMBER 26, 2019

While it's unlikely that China would bother spying on commuters using subway cars, it would be much less surprising if a tech company offered free Internet on subways in exchange for surveillance and data collection. That's an easier, and more fruitful, attack path.

Surveillance 259

Surveillance Wireless Government Internet 259

Schneier on Security

SEPTEMBER 8, 2022

The special master at times seemed in disbelief, as when he questioned the engineers over whether any documentation existed for a particular Facebook subsystem. “Someone must have a diagram that says this is where this data is stored,” he said, according to the transcript. ” […].

Engineering 256

Engineering Data collection Software 256

Krebs on Security

DECEMBER 20, 2022

Those who received higher amounts likely spent more time documenting actual losses and/or explaining how the breach affected them personally. Americans currently have no legal right to opt out of this data collection and trade.

Identity Theft 288

Identity Theft Data breaches Data collection Hacking 288

Krebs on Security

OCTOBER 31, 2022

Authorities soon tracked Sokolvsky’s phone through Germany and eventually to The Netherlands, with his female companion helpfully documenting every step of the trip on her Instagram account. gov — that allows visitors to check whether their email address shows up in the data collected by the Raccoon Stealer service.

Malware 343

Malware Identity Theft Cybercrime Accountability 343

Krebs on Security

SEPTEMBER 25, 2024

These document exchanges went on for almost a year, during which time the real estate brokers made additional financial demands, such as tax payments on the sale, and various administrative fees. But the documents sent by their contact there referenced a few other still-active domains, including realestateassetsllc[.]com

Scams 312

Scams DNS Consumer Protection Data collection 312

Krebs on Security

AUGUST 26, 2020

This game of cat and mouse continued until Ngo found a much more reliable and stable source of consumer data: A U.S. based company called Court Ventures , which aggregated public records from court documents. “At first [when] I sign up they asked for some documents to verify,” Ngo said.

Identity Theft 358

Identity Theft Computers and Electronics Hacking Accountability 358

Security Affairs

SEPTEMBER 20, 2024

Research conducted by ARD’s Panorama and STRG_F revealed that data collected during surveillance is processed using statistical methods, effectively breaking Tor’s anonymity. “Reporters from Panorama and STRG_F were able to view documents that show four successful measures in just one investigation.

Surveillance 141

Surveillance Data collection Media Hacking 141

CyberSecurity Insiders

AUGUST 20, 2021

China has made some amendments to the existing laws and passed a new document that discloses several provisions on how automobile companies need to collect their user data as per the stated stipulations.

Manufacturing 142

Manufacturing Data collection Media Risk 142

Security Affairs

DECEMBER 2, 2023

According to our team, WeMystic left an open and passwordless MongoDB database containing 34 gigabytes of data related to the service as part of the MongoDB infrastructure. Businesses employ MongoDB to organize and store large swaths of document-oriented information. million records.

Data collection 141

Data collection Risk Hacking Information Security 141

Krebs on Security

SEPTEMBER 4, 2018

Less than a week ago, security researcher Nitish Shah directed KrebsOnSecurity to an open database on the Web that allowed anyone to query up-to-the-minute mSpy records for both customer transactions at mSpy’s site and for mobile phone data collected by mSpy’s software. Court documents (PDF) obtained from the U.S.

Spyware 234

Spyware Mobile Advertising Software 234

Security Affairs

MARCH 1, 2020

The documents also revealed the existence of other spy bases located in secret places identified with codes “TIMPANI”, “GUITAR” and “CLARINET”. The documents mention a clandestine program, coded as RAMPART-A , which was conducted with secret arrangements of other intelligence agencies.

Wireless 145

Wireless Surveillance Telecommunications Advertising 145

Centraleyes

DECEMBER 11, 2024

Regional and National Regulations and Documents: This part details regulations and guidelines specific to certain regions or countries, addressing local legislative requirements that may impact your operations.

Risk 52

Risk Cybersecurity Penetration Testing Digital transformation 52

Security Affairs

DECEMBER 10, 2020

The threat actors used lures consisted of documents about Sinopharm International Corporation, a pharmaceutical company involved in the development of a COVID-19 vaccine and that is currently going through phase three clinical trials. Zebrocy is mainly used against governments and commercial organizations engaged in foreign affairs.

Malware 122

Malware Phishing Government Data collection 122

Krebs on Security

AUGUST 15, 2024

ANALYSIS Data brokers like National Public Data typically get their information by scouring federal, state and local government records. Americans may believe they have the right to opt out of having these records collected and sold to anyone. The breach at National Public Data may not be the worst data breach ever.

Hacking 352

Hacking Data breaches Identity Theft Accountability 352

CyberSecurity Insiders

NOVEMBER 2, 2021

From now on, the Mark Zuckerberg’s led company faced a lawsuit against its facial recognition related data collection early this year. FB made a step forward by offering a settlement of $650 million to a data advocacy group that filed a legal suit against the use of FacioMetrics technology acquired by FB in 2016.

Artificial Intelligence 123

Artificial Intelligence Data collection Media Technology 123

SecureWorld News

OCTOBER 8, 2020

In addition to a meticulous evaluation of individual work performance, the data collected in this way were used, among other things, to obtain a profile of the employees for measures and decisions in the employment relationship. The company followed suit and submitted a data set of around 60 gigabytes for analysis.

Data collection 112

Data collection Data privacy Retail Education 112

Security Affairs

AUGUST 14, 2020

The Threat Report Portugal: Q2 2020 compiles data collected on the malicious campaigns that occurred from April to Jun, Q2, of 2020. The Portuguese Abuse Open Feed 0xSI_f33d is an open sharing database with the ability to collect indicators from multiple sources, developed and maintained by Segurança-Informática.

Threat Reports 145

Threat Reports Phishing Banking Malware 145

Security Affairs

JULY 22, 2021

The Threat Report Portugal: Q1 2021 compiles data collected on the malicious campaigns that occurred from April to June, Q2, of 2021. The Portuguese Abuse Open Feed 0xSI_f33d is an open sharing database with the ability to collect indicators from multiple sources, developed and maintained by Segurança-Informática.

Threat Reports 125

Threat Reports Phishing Malware Banking 125

Security Affairs

DECEMBER 19, 2018

Researchers noticed that in all the attacks threat actors used decoy documents that have the same author name Joohn. The delivery documents used in the October and November waves shared a large number of similarities, which allowed us to cluster the activity together. reads the analysis published by Palo Alto Networks.

Malware 111

Malware Advertising Data collection Phishing 111

Security Affairs

SEPTEMBER 17, 2024

The report provides insights into factors influencing user consent for data collection and usage and reasons for consumer disengagement. A Statista survey of US consumers showed that two-thirds (66%) of respondents said they would gain trust in a company if it were transparent about how it uses their personal data.

Data collection 116

Data collection Data privacy B2B Digital transformation 116

Security Affairs

JULY 30, 2020

The attackers sent out spear-phishing emails using boobytrapped documents leveraging the fake job offer as bait. “The data collected from the target machine could be useful in classifying the value of the target. ” states the report published by the experts.

Advertising 135

Advertising Data collection Malware Phishing 135

CyberSecurity Insiders

AUGUST 27, 2022

Nisos analysts actively remove PII through legally protected opt-out procedures on public and private data broker sites, add relevant addresses and phone numbers to do-not-call lists, and remove contact details from mailing lists. Nisos also documents any remaining PII that couldn’t be removed. their needs.

Risk 136

Risk Media Data collection Security Intelligence 136

Security Affairs

MAY 2, 2021

The Threat Report Portugal: Q1 2021 compiles data collected on the malicious campaigns that occurred from January to March, Q1, of 2021. The Portuguese Abuse Open Feed 0xSI_f33d is an open sharing database with the ability to collect indicators from multiple sources, developed and maintained by Segurança-Informática.

Threat Reports 107

Threat Reports Phishing Malware Data collection 107

Security Affairs

JULY 12, 2021

For the third time in the past four months, LinkedIn seems to have experienced another massive data scrape conducted by a malicious actor. Once again, an archive of data collected from hundreds of millions of LinkedIn user profiles surfaced on a hacker forum, where it’s currently being sold for an undisclosed sum.

Social Engineering 144

Social Engineering Data collection Media Passwords 144

Security Affairs

NOVEMBER 14, 2021

The Threat Report Portugal: Q3 2021 compiles data collected on the malicious campaigns that occurred from July to September, Q3, of 2021. The Portuguese Abuse Open Feed 0xSI_f33d is an open sharing database with the ability to collect indicators from multiple sources, developed and maintained by Segurança-Informática.

Threat Reports 109

Threat Reports Phishing Malware Banking 109

Security Affairs

OCTOBER 11, 2020

Data collected by the agency is used by the federal government to allocate over $675 billion in federal funds to tribal, local, and state governments every year. The document warns of destructive attacks against U.S. critical infrastructure.

Government 145

Government Advertising Hacking Data collection 145

Centraleyes

NOVEMBER 9, 2024

Data Minimization : The Act encourages businesses to collect only the data necessary for specific purposes and limit data retention. Accountability : Companies must regularly assess and document their data privacy practices and ensure timely responses to consumer requests.

Data privacy 52

Data privacy Data collection Risk Accountability 52

Security Affairs

FEBRUARY 20, 2022

The Threat Report Portugal: Q4 2021 compiles data collected on the malicious campaigns that occurred from July to September, Q4, of 2021. The Portuguese Abuse Open Feed 0xSI_f33d is an open sharing database with the ability to collect indicators from multiple sources, developed and maintained by Segurança-Informática.

Threat Reports 98

Threat Reports Phishing Malware Banking 98

Security Affairs

NOVEMBER 15, 2018

The documents in question were supposedly contained in the zipped files attached, however by uncompressing these files users downloaded Silence.Downloader – the tool used by Silence hackers. As such, they are very familiar with documentation in the financial sector and the structure of banking systems. October attack: MoneyTaker .

Banking 111

Banking Computers and Electronics Phishing Cybercrime 111

Krebs on Security

AUGUST 14, 2019

Data collected in the course of the investigation also reveals some fascinating details that may help explain why these pump skimmers are so lucrative and ubiquitous.

Banking 259

Banking Computers and Electronics Marketing Mobile 259

Troy Hunt

NOVEMBER 25, 2020

Back to the bit about risks impacting data collected by IoT devices and back again to CloudPets, Context Security's piece aligned with my own story about kids' CloudPets messages being left exposed to the internet. Probably “no”, but in a perfect world they’d document local connections by other apps and not break that.

IoT 362

IoT Firmware Risk Manufacturing 362

Security Affairs

MAY 23, 2020

Data collected by the malware are then transferred to the operator’s command-and-control (C2) server. The spreading intensified over time, in March 2020, it was delivered in a COVID-19-themed spam campaign using weaponized Word documents. The malware is able to infect all operating systems.

Banking 143

Banking Advertising Malware Cybercrime 143

Security Affairs

JULY 4, 2022

The Threat Report Portugal: Q2 2022 compiles data collected on the malicious campaigns that occurred from March to June, Q2, 2022. The Portuguese Abuse Open Feed 0xSI_f33d is an open sharing database with the ability to collect indicators from multiple sources, developed and maintained by Segurança-Informática.

Threat Reports 98

Threat Reports Phishing Malware Banking 98

IT Security Guru

AUGUST 7, 2024

Robust CIAM platforms incorporate effective ID verification mechanisms, such as document verification and biometric authentication, to ensure the authenticity of customer identities while eliminating friction and fraud risks. In addition, the burden on IT is reduced through centralised and automated user management processes.

Insurance 125

Insurance Data collection Authentication Technology 125

Security Affairs

JANUARY 26, 2021

The Threat Report Portugal: Q4 2020 compiles data collected on the malicious campaigns that occurred from October to December, Q4, of 2020. This makes it a reliable and trustworthy and continuously updated source, focused on the threats targeting Portuguese citizens. The submissions were classified as either phishing or malware.

Threat Reports 137

Threat Reports Phishing Malware Banking 137

Security Affairs

APRIL 20, 2020

The Threat Report Portugal: Q1 2020 compiles data collected on the malicious campaigns that occurred from January to March, Q1, of 2020. investigations are being documented and published on Segurança-Informatica. The campaigns were classified as either phishing or malware. EDP Group ransomware attack via RagnarLocker ).

Threat Reports 136

Threat Reports Phishing Malware Banking 136