While big companies have been known to offer “bounties” to white-hat hackers to test for weaknesses in their networks and websites to ensure they aren’t one day breached in a cyber attack, it’s too late for AshleyMadison.com, the dating site for cheaters. After the embarrassment of having its users’ private information made very public, the site is now dangling several hundred thousand dollars as a reward for information leading to the arrest of the group behind the massive hack. [More]
hack
Flaw In Android Device Sensor Leaves Users’ Fingerprints Vulnerable To Theft
Using your fingerprint to open your phone may be convenient but it could also pose a security risk. That’s according to security researchers who discovered a way to breach Android devices to steal the unique prints. [More]
Latest Auto Hack Target: Tesla’s Model S
For the third time in three weeks security researchers have taken control of a vehicle through flaws in its computer systems. The latest target? None other than Tesla’s Model S. [More]
Office Of Personnel Management Director Steps Down Following Massive Data Breach Affecting 21M People
Yesterday, the Office of Personnel Management – essentially the federal government’s giant human resources office – announced that 21 million current and former employees, as well as prospective employees, their families and others who applied for federal background investigations in the last 15 years were the latest victims of hackers. Today, the head of that agency announced she would no longer be leading the department. [More]
Risk Evaluation Report Finds Mobile Banking Leaves Some Banks More Vulnerable to Cyber Attacks
While mobile banking is no doubt convenient for customers – and banks – there’s a significant downside to the fact that more and more financial institutions are using the technology: an increased risk that your personal information will fall in the hands of a cyber criminal. [More]
Uber’s Petition Website Hacked To Redirect To Lyft Homepage
It’s no secret that ride-sharing companies Uber and Lyft have enjoyed a spirited rivalry in recent years. Over the weekend, a security researcher inserted himself into the crosshairs of the two ride-hailing services by exploiting a vulnerability in Uber’s petition website that allowed him to showcase and redirect visitors to Lyft’s homepage, while also changing the content of some petitions. Now he’s warning the company – and others like it – to take precautions when using petition and contest websites, as they might prove to be a welcome mat for malevolent hackers. [More]
Data Breaches Now Cost Companies An Average Of $3.8M
The aftermath of a now all-too-common data breach can be frustrating for consumers: canceling credit cards, monitoring credit reports for irregularities, and working with banks to recoup unauthorized purchases. But the hacks can also be expensive for the targeted company, with the average cost now sitting at a 10-year high of $3.8 million. [More]
Health Insurer CareFirst Latest Hack Victim
More than 1.1 million current and former members of CareFirst BlueCross BlueShield are among the latest victims of a cyberattack, the health insurer confirmed this week. [More]
The Other Danger Of Online Payday Loans: Identity Theft
Many people who seek online payday loans are already in a very vulnerable position when they take on the added risk of the excessive interest rates and often exorbitant fees associated with these short-term loans. But there’s another danger possibly lurking in the payday shadows: Having all their personal and financial data end up in the hands of cyber criminals. [More]
Business Messaging Site Slack Reports Hack Lasting Four Days
A startup messaging system used by more than 60,000 businesses including Google, Apple and Amazon became the latest victim of a data breach. [More]
Amazon’s Streaming Gaming Service Twitch Says It Might Be The Latest Victim Of A Data Breach
The long list of data breaches got a bit longer on Monday after Amazon-owned game streaming company Twitch determined hackers may have gained unauthorized access to some users’ account information. [More]
Target Poised To Settle Class-Action Suit Related To Massive 2013 Hack For $10M
More than a year after Target announced that it had been victim to a massive data breach during the 2013 holiday season, the company is poised to pay $10 million to settle a class-action suit stemming from the incident. [More]
Lawsuit Claims Toyota, GM & Ford Deceived Consumers About Hackability Of Connected Cars
A recently filed class action lawsuit claims that Toyota, Ford and General Motors knowingly put consumers at risk by selling connected cars that can be susceptible to hackers looking to remotely control vehicle functionality. [More]
High-End Mandarin Oriental Hotels Confirm Data Breach
Mandarin Oriental Hotel Group – operators of more than two dozen upscale hotels from Atlanta to Jakarta – confirmed late Wednesday that its properties are the latest victims of a credit card breach. [More]
Anthem Hack Included Personal Information For 78.8 Million Customers & Employees
Nearly three weeks removed from the detection of a massive data breach, health insurer Anthem Inc. is releasing more details about the scope of the hack, including the fact that personal information for about 78.8 million was compromised. [More]
Yet Another Reason To Hate Paying For Parking: Parking Garage Payment Systems Hacked
The holiday shopping season is now well and truly upon us. This being 2014 and all, that also means the holiday hacking season is upon us. Last year Target was infamously the, er, target of Black Friday bad guys. This year, though, it’s not just stores losing your information to criminals. Now you have to worry about the parking lots outside of them, too. [More]
Sony Pictures Hacked, Films Released Online; North Korea On List Of Suspects
Sony Pictures Entertainment, the film studio division of international entertainment giant Sony, was the victim of a major hack last week. Not only did the attack majorly disrupt work at the studio nationwide, but also it appears that the bad guys got their hands on some goodies while they were there: at least four Sony films that haven’t even been released yet are already zipping their way around the internet. [More]
Hacker Claims 7M Dropbox Accounts Were Compromised, Company Says It Wasn’t Actually Hacked
It’s almost as if reports of new data breaches are popping up as often as vehicle recalls these days. The latest compromise comes after a hacker claims to have gained access to nearly 7 million Dropbox account credentials, something the cloud storage service says simply isn’t the case. [More]