Important: BreachAware does not operate under any other brand name and will never provide unauthorised access to compromised credentials. We ask our users to beware of illegitimate websites imitating BreachAware.

Global News Feed

POPULAR CYBERSECURITY PUBLICATIONS
2020-03-04 12:00:00 UTC
Dark Reading
Dark Reading
7 Loyalty Program and Rewards App Attacks

The number of attacks targeting loyalty and rewards programs is growing. Here are some of the lowlights.

2020-03-04 11:57:00 UTC
Naked Security | Sophos
Naked Security | Sophos
NCSC: Secure your webcams now

We don't want to see what you do behind closed doors, but lots of hackers would be happy to pull up a chair to view that video stream.

IoT Privacy Security Threats "smart" Cameras Baby Monitors Default Passwords GCHQ National Cyber Security Centre National Cyber Security Strategy NCSC Safety Security Tips Spycams Tips Webcams Which?
2020-03-04 11:40:00 UTC
Naked Security | Sophos
Naked Security | Sophos
Google fixes MediaTek bug in Android March patches

There are patches for over 70 bugs, and they finally fixed a months-old exploit for MediaTek chipsets, said to affect millions of devices.

Android Google Mobile Operating Systems Security Threats Vulnerability CVEs Elevation Of Privilege Flaws MediaTek Patches Patching Remote Code Execution Vulnerability XDA-Developers
2020-03-04 11:08:00 UTC
Naked Security | Sophos
Naked Security | Sophos
Tech support scammers hacked back by vigilante

A cybercrime vigilante was so incensed by tech support scammers, he reverse-hacked the Indian call centre to spy on his would-be attackers.

Law & Order Security Threats BBC Call Scams Hack Back India Call Centers Microsoft Microsoft Support Scams Tech Support Scam Vigilante
2020-03-04 10:53:00 UTC
Naked Security | Sophos
Naked Security | Sophos
Facebook purges hundreds of fake accounts from state actors, marketers

It removed 5 networks engaged in foreign or government interference in Egypt, India, Russia, Iran, and Myanmar/Vietnam. Some targeted the US.

Facebook Fake News Government Security Law & Order Social Networks 2016 US Presidential Election 2020 US Election ARep Global Coordinated Behavior Coordinated Inauthentic Behavior Deceptive Content DFRLab Egypt Election Tampering Elections Fake Accounts FGI Foreign Interference Inauthentic Behavior India Influence Ops Marketing Russian Trolls State Actors
2020-03-03 22:29:00 UTC
HackRead
HackRead
Hackers are using Word documents to drop NetSupport Manager RAT

By Sudais Asif

Before dropping NetSupport Manager RAT, attackers trick users into opening a malicious MS Word document by entering a password.

This is a post from HackRead.com Read the original post: Hackers are using Word documents to drop NetSupport Manager RAT

News Cyber Attack Cyber Crime Fraud Malware Phishing Privacy RAT Security TROJAN
2020-03-03 21:50:00 UTC
ThreatPost
ThreatPost
Cobalt Ulster Strikes Again With New ForeLord Malware

Threatpost talks to Alex Tilley, senior security researcher with Dell SecureWorks' Counter Threat Unit Research Team, about a recently discovered campaign linked to an Iranian APT.

Malware RSAC Videos Advanced Persistent Threat Actor Cobalt Ulster Credential Theft Forelord Irán Iran APT Malware Muddywater APT
2020-03-03 21:30:00 UTC
Dark Reading
Dark Reading
Gotta Patch 'Em All? Not Necessarily, Experts Say

When it's impossible to remediate all vulnerabilities in an organization, data can indicate which bugs should be prioritized.

2020-03-03 20:13:00 UTC
ThreatPost
ThreatPost
Let’s Encrypt to Revoke Millions of TLS Certs

On Wednesday millions of Transport Layer Security certificates will be revoked because of a Certificate Authority Authorization bug.

Cryptography Web Security Bug Caa Certificate Authority Authorization Certificates Let's Encrypt Revoke TLC Transport Layer Security Vulnerability
2020-03-03 19:02:00 UTC
ThreatPost
ThreatPost
MediaTek Bug Actively Exploited, Affects Millions of Android Devices

An exploit published by a developer is easy to use and has already been used to build malicious apps that gain root access on Android devices.

Mobile Security Vulnerabilities Android Critical Flaw CVE-2020-0032 CVE-2020-0069 March 2020 Android Update MediaTek Root Access Security Vulnerability Xda-developer

BreachAware Insight

THE LATEST CURATED INTEL FROM OUR RESEARCH CENTRE

Listen to our podcast, where Andrew, the visionary CEO of BreachAware, sits down with unsung heroes of the cyber security industry. Get ready to uncover the stories and insights of industry trailblazers you might not have heard of before, as they share their experiences, opinions, and insider intel. But beware, it's not all serious talk—expect a healthy dose of humour (and the odd cussing) sprinkled throughout the conversation.

Point of View

OUR TAKE ON TRENDING STORIES
March 2024
By SUE DENIM
TikTok Ban, Discord Bot Community Attack, and Telecom Company's Breach Resurgence.
Ah, the dramatic saga of TikTok in the United States! Picture this: a ban looming over TikTok, akin to a dark cloud threatening to rain on our digital parade. Congress is all up in arms, waving their "think of the children" banners while TikTok nervously checks its watch, wondering if it should start packing its bags for a forced sale. Meanwhile, nobody bats an eye at the plethora of Chinese gadge...

Weekly Summary

SPOTLIGHT, VULNERABILITY CHAT & PRIVACY HEADLINES
22 April 2024
BREACHAWARE HQ

A total of 11 breaches were found and analysed resulting in 8,670,369 leaked accounts containing a total of 26 different data types. The breaches found publicly and freely available included A MONEY, Raychat, Bin Weevils, ZOON and Stealer Log 0450