Important: BreachAware does not operate under any other brand name and will never provide unauthorised access to compromised credentials. We ask our users to beware of illegitimate websites imitating BreachAware.

Global News Feed

POPULAR CYBERSECURITY PUBLICATIONS
2019-11-27 14:00:00 UTC
ThreatPost
ThreatPost
Dexphot Malware Hijacked 80K+ Devices to Mine Cryptocurrency

A cryptomining malware has infected at least 80k devices and uses various tactics to evade detection.

Hacks Malware 80K Infections Apt Code Crypto Cryptomining Detection Evasion Dexphot Malware Microsoft
2019-11-27 12:49:00 UTC
Naked Security | Sophos
Naked Security | Sophos
Facebook, Twitter profiles slurped by mobile apps using malicious SDKs

Hundreds of users gave permission to these third-party apps to access their social media accounts, but the apps got more handsy than that.

Android Data Loss Facebook IOS Mobile Privacy Security Threats Social Networks Twitter Advertising Data Slurping Marketing MobiBurn Mobile Marketing One Audience OneAudience Profile Slurping Profiles Rogue SDKs SDK SDKs Third Party Apps
2019-11-27 12:37:00 UTC
Naked Security | Sophos
Naked Security | Sophos
Splunk customers should update now to dodge Y2K-style bug

Splunk has issued a critical warning regarding a showstopping Y2K-style date bug in one of the platform’s configuration files.

Data Loss Security Threats Vulnerability Bug Configuration Files Splunk Timestamp Y2k
2019-11-27 12:26:00 UTC
Naked Security | Sophos
Naked Security | Sophos
EU raises eyebrows at possible US encryption ban

EU officials have warned that they may not take kindly to a US encryption ban or insertion of crypto backdoor technology.

Cryptography Government Security Privacy Encryption EU EU-US Privacy Shield European Commission GDPR US Encryption Ban Usa
2019-11-27 12:20:00 UTC
The Daily Swig
The Daily Swig
Finland launches cybersecurity label for IoT devices

‘Buy smart, not blind’

2019-11-27 11:58:00 UTC
Naked Security | Sophos
Naked Security | Sophos
Police arrest alleged Chuckling Squad member who hijacked @Jack Dorsey

Debug, another Chuckling Squadder, told Motherboard that the kid was weird, "Swatting celebrities for a follow back."

2-factor Authentication Celebrities Hacked Law & Order Security Threats Twitter 2-Factor Authentication 2FA @jack Account Hijack Account Hijacking Celebrities Chuckling Squad Debug Hack Hacked Jack Dorsey MFA REACT Santa Clara Security Threats SIM Swaps SMS Social Networks
2019-11-27 11:25:00 UTC
Naked Security | Sophos
Naked Security | Sophos
Firefox gets tough on tracking tricks that sneakily sap your privacy

Firefox is getting ready to turn on its automatic anti-snooping tools to stop web 'fingerprinting" tricks.

Firefox Mozilla Browser Fingerprint Cookie Supercookie Tracking
2019-11-27 02:08:00 UTC
Krebs on Security
Krebs on Security
It’s Way Too Easy to Get a .gov Domain Name

Many readers probably believe they can trust links and emails coming from U.S. federal government domain names, or else assume there are at least more stringent verification requirements involved in obtaining a .gov domain versus a commercial one ending in .com or .org. But a recent experience suggests this trust may be severely misplaced, and that it is relatively straightforward for anyone to obtain their very own .gov domain.

The Coming Storm Web Fraud 2.0 CISA Cybersecurity And Infrastructure Security Agency DOTGOV Bill Dotgov.gov Exeterri.gov John Levine Town.exeter.ri.us U.S. Department Of Homeland Security U.S. General Services Administration
2019-11-26 20:34:00 UTC
ThreatPost
ThreatPost
Austin Man Indicted for Stealing Unreleased Music from Artists

He and co-conspirators stole 50 gigs of music and leaked some of it onto the internet.

Breach Cloud Security Hacks Austin Christian Erazo Hacking Impersonation Indictment Music Producer Stolen Music Unreleased Music
2019-11-26 19:55:00 UTC
Dark Reading
Dark Reading
On the Border Warns of Data Breach

Malware on a payment system could have stolen credit card info from customers in 28 states, according to the company.

BreachAware Insight

THE LATEST CURATED INTEL FROM OUR RESEARCH CENTRE
BreachAware Podcast

Listen to our podcast, where Andrew, the visionary CEO of BreachAware, sits down with unsung heroes of the cyber security industry. Get ready to uncover the stories and insights of industry trailblazers you might not have heard of before, as they share their experiences, opinions, and insider intel. But beware, it's not all serious talk—expect a healthy dose of humour (and the odd cussing) sprinkled throughout the conversation.

Amazon Music Apple Podcasts Spotify Podcast BreachAware YouTube Channel

Point of View

OUR TAKE ON TRENDING STORIES

Weekly Summary

SPOTLIGHT, VULNERABILITY CHAT & PRIVACY HEADLINES