Important: BreachAware does not operate under any other brand name and will never provide unauthorised access to compromised credentials. We ask our users to beware of illegitimate websites imitating BreachAware.

Global News Feed

POPULAR CYBERSECURITY PUBLICATIONS
2019-11-04 11:58:00 UTC
Naked Security | Sophos
Naked Security | Sophos
Undercover reporter tells all after working for a Polish troll farm

Together with her troll colleagues, she managed 200 fake social profiles, promoted clients’ products, and trolled their competitors.

Facebook Fake News Instagram Social Networks Twitter Cat@Net Disinformation Disinformation Campaigns EPR Fake Accounts Fake Discussions Fundacja Reporterow Internet Research Agency Investigate Europe IRA Katarzyna Pruszkiewicz Kulawa Rebelia Macedonia Media Monitoring Operation Lame Rebellion Poland Rebellion On Crutches Russia Smear Campaigns Support Campaigns Troll Farm Trollery Trolls Undercover Reporter Veles
2019-11-04 11:24:00 UTC
ThreatPost
ThreatPost
BlueKeep Attacks Have Arrived, Are Initially Underwhelming

The first attacks that exploit the zero-day Windows vulnerability install cryptominers and scan for targets rather than a worm with WannaCry potential.

Hacks Vulnerabilities Bluekeep Cryptocurrency Cryptojacking Cryptomining Cyberattacks Department Of Homeland Security IoT Microsoft Remote Desktop Protocol WannaCry Windows Worm
2019-11-04 11:14:00 UTC
Naked Security | Sophos
Naked Security | Sophos
US grounds Chinese-made drones as part of security review

The exception: drones being used in emergencies, such as fighting wildfires, search and rescue, and dealing with natural disasters.

Government Security Law & Order Privacy American Security Drone Act Of 2019 China DOI Drones Grounded Drone Interior Department Spying UAS UAV UAVs Unmanned Aircraft Systems
2019-11-03 21:41:00 UTC
Krebs on Security
Krebs on Security
NCR Barred Mint, QuickBooks from Banking Platform During Account Takeover Storm

Banking industry giant NCR Corp. [NYSE: NCR] late last month took the unusual step of temporarily blocking third-party financial data aggregators Mint and QuicBooks Online from accessing Digital Insight, an online banking platform used by hundreds of financial institutions. That ban, which came in response to a series of bank account takeovers in which cybercriminals used aggregation sites to surveil and drain consumer accounts, has since been rescinded. But the incident raises fresh questions about the proper role of digital banking platforms in fighting password abuse.

A Little Sunshine The Coming Storm Web Fraud 2.0 Credential Replay Attacks Digital Insight Intuit Mint NCR Corp Quickbooks Online
2019-11-01 21:59:00 UTC
ThreatPost
ThreatPost
Office for Mac Users Warned of Malicious SYLK Files

Researchers warn XML macros embedded in SYLK files can sidestep Microsoft Office for Mac protections.

Hacks Vulnerabilities Email Attack Office For Mac Protected View SYLK Symbolic Link United States Computer Emergency Readiness Team Vulnerability World Wide Web Consortium Xml
2019-11-01 20:51:00 UTC
ThreatPost
ThreatPost
Solar, Wind Power Utility Disrupted in Rare Cyberattack

A simple attack on an unpatched server could have been catastrophic for the Utah-based utility.

Critical Infrastructure Hacks IoT Vulnerabilities Web Security Cyberattack Denial Of Service Disruption ICS Loss Of View Ot It Convergence Power Generation Solar Spower Utah Utility Wind
2019-11-01 19:32:00 UTC
ThreatPost
ThreatPost
News Wrap: APTs, Office 365 Voicemail Phish and Bed Bath & Beyond Breach

Threatpost editors discuss this week's biggest news - from a data breach of Bed Bath & Beyond, a tricky phishing attack and widespread APT activity. 

Breach Podcasts Privacy APT28 APT41 Bed Bath And Beyond Data Breach Breach Fancy Bear Olympics Podcast
2019-11-01 17:25:00 UTC
Dark Reading
Dark Reading
Details of Attack on Electric Utility Emerge

The March 5 DDoS attack interrupted communications between generating facilities and the electrical grid in three western states.

2019-11-01 17:14:00 UTC
ThreatPost
ThreatPost
Global Crime Ring Bilks U.S. Military Members, Vets Out of Millions

An elaborate fraudster ring stole PII then allegedly used DoD and VA benefits portals to steal payments and funds from bank accounts.

Government Hacks Privacy Web Security Bank Accounts Benefits Portals Department Of Justice Fraud Global Crime Ring ID Theft Money Laundering Theft U.S. Military Veterans Veterans Affairs
2019-11-01 17:10:00 UTC
ThreatPost
ThreatPost
Stubborn Malware Targets QNAP NAS Hardware Specifically

QNAP Systems says there is no known way to remove the Qsnatch malware infecting its NAS devices besides a full factory reset.

Cloud Security Hacks Malware Malware NAS Network Attached Storage QNAP QNAP NAS Devices QSnatch QTS 4.3.6 Build 20181228

BreachAware Insight

THE LATEST CURATED INTEL FROM OUR RESEARCH CENTRE
BreachAware Podcast

Listen to our podcast, where Andrew, the visionary CEO of BreachAware, sits down with unsung heroes of the cyber security industry. Get ready to uncover the stories and insights of industry trailblazers you might not have heard of before, as they share their experiences, opinions, and insider intel. But beware, it's not all serious talk—expect a healthy dose of humour (and the odd cussing) sprinkled throughout the conversation.

Amazon Music Apple Podcasts Spotify Podcast BreachAware YouTube Channel

Point of View

OUR TAKE ON TRENDING STORIES

Weekly Summary

SPOTLIGHT, VULNERABILITY CHAT & PRIVACY HEADLINES