Government Payment Service Inc. — a company used by thousands of U.S. state and local governments to accept online payments for everything from traffic citations and licensing fees to bail payments and court-ordered fines — has leaked more than 14 million customer records dating back at least six years, including names, addresses, phone numbers and the last four digits of the payer's credit card.

The new malware tool targeting Windows and Linux systems combines cryptomining, ransomware, botnet, and self-propagation capabilities.

By Waqas

Apple has been trying hard to improve the security mechanisms of its hardware and software products.  The addition of new privacy features in Safari browser is yet another attempt to toughen security measures for preventing breaches and tracking by websites like Facebook. It is a well-known fact that companies use cookies to keep track of […]

This is a post from HackRead.com Read the original post: Safari & Firefox browser to block user data tracking with new security add-ons

Victims and well-wishers vulnerable to ‘disaster fraud’ cybercrime campaigns, says US government.

By Carolina

Another day, another trove of medical records leaked online, thanks to a misconfigured AWS S3 bucket. Medical records are considered to be sensitive documents and when a malicious third party has access to them it is a bad news as these records can be used for fraud, blackmailing and marketing purposes against patients’ will. However, […]

This is a post from HackRead.com Read the original post: Medical records & patient-doctor recordings of thousands of people exposed

Top infosec trends in the media spotlight this week.

The defenses put in place to thwart the 2008 attack turn out to be very weak.

The Daily Swig examines how the credit broker has recovered from its massive 2017 data breach.

Payment processing should be isolated from unnecessary code, says expert.

The four major U.S. wireless carriers today detailed a new initiative that may soon let Web sites eschew passwords and instead authenticate visitors by leveraging data elements unique to each customer's phone and mobile subscriber account, such as location, customer reputation, and physical attributes of the device. Here's a look at what's coming, and the potential security and privacy trade-offs of trusting the carriers to handle online authentication on your behalf.