Remember the suspected payment data breach at Wendy’s restaurants from earlier this year, which resulted in a class action lawsuit almost right away? It took a few months, but Wendy’s has confirmed that they did experience a breach dating back to fall 2015, and they’ve now fixed the underlying problem, which affected an estimated 5% of their restaurants. [More]
Last fall, we learned that payment systems in Trump Hotel Collection properties had been compromised with malware, compromising customers’ payment card numbers for more than a year. Now reports from the banking industry indicate that there might be another breach in one or more Trump hotels –– the second in less than a year. [More]
For decades, many Apple users have bragged about their computers not being targeted by viruses and malware in the way that Windows-based computers were. But over the weekend, hackers launched what is believed to be the first widespread ransomware campaign against Mac computers. [More]
It’s tax season, which means it’s the prime time for scammers to crawl out from underneath their scammy rocks and try to nab taxpayers’ personal info. So far, this year’s electronic tax scams are even more prevalent than before, the Internal Revenue Service says, surging 400%. [More]
This is the year. It’s the year you’ll wake up on Feb. 15 without the stinging sensation of intense regret that inevitably follows after mourning Valentine’s Day at the bottom of a booze bottle, covered in bits of melted chocolate stuck to you in your sleep, because your beloved turned out to be a scammer. Because this year, you’re going to be prepared for any romance scams that may come your way. [More]
Hyatt Confirms 250 Hotels Were Infected With Malware Last Year, Possibly Exposing Customer Payment Data
After announcing late last year that a slew of its hotels had been infected by malware, Hyatt has now identified the 250 properties that were affected — roughly 40% of its businesses in operation. Customers staying at those hotels who paid with a debit or credit card may have had their payment data and other information exposed to hackers, the chain said.
In yet another example of why unofficial apps aren’t always to be trusted, Apple and Google have yanked an app from their app stores that was supposed to let users know who was viewing their profiles. That’s not a thing, and a developer says that the app instead acted as malware, secretly collecting usernames and passwords and using them to post spam to users’ accounts.
Hackers have finally taken a bite out of Apple’s App Store: the company confirmed that attackers were able to infect some of the apps it offers with malware, by copying and modifying a tool used by software developers. Apple says it has now removed the affected apps from the App Store.
Jailbreaking your Apple device, or using illicitly obtained software to customize it in ways that Apple never intended and install unauthorized apps, is something that most users thought was against the rules but innocent, even if it does void your Apple warranty. Now Apple is facing a good news/bad news situation: a hack involving jailbroken iPhones validates their policies, but also means that the phrase “iPhone hack” is all over the news. [More]
Amazon sells ad space on its e-commerce site and on other sites that the company owns, accounting for a huge number of pageviews. At the beginning of September, they’ll no longer accept Flash ads on those sites, following a general trend online of distrust of Flash, especially after Yahoo’s ad network was used to potentially deliver malware to users in a Flash ad. [More]
If you use Firefox on a PC, you should make sure you update your browser right now: Mozilla says a Firefox user notified the company after spotting a bug that has the potential to search and download local files.
For six days last week, malware known as “malvertising” was reportedly lurking in Yahoo’s advertising network, with the potential for attackers to infect internet users’ computers and hold them for ransom. Security researchers say they notified Yahoo of the malware upon discovering it on Sunday, and the company removed the malicious code immediately.
Sally Beauty: Investigation Confirms Customer Payment Info May Have Been Put At Risk, But Not Debit PINs
Three weeks after Sally Beauty first said it was looking into whether it’d been the victim of a hack attack, the company says it’s confirmed that criminals used malware on some of its point-of-sale systems, possibly exposing payment information for customers who used cards at some of its U.S. stores.
In much of the country, this is the first truly warm week of the year. The change of seasons has us turning to shorts, dresses, sandals, and chilled fruity drinks served in rooftop bars. But data breaches, alas, are always in style, and buying that beverage may land you with a stolen credit card number.
Though we often think of all the stress in a hiring process as being on the side of the job seeker, businesses have a new potential part of the process to worry about: Researchers say hackers are infecting companies by slipping malware in along with resumes submitted through job posting website CareerBuilder.com.
First of all, we’d like to offer a belated Happy Birthday to the World Wide Web, which turned 26 yesterday. You’re closer to 30 than 20 now, so your hangovers will only get worse. Second, to honor that milestone, Google announced updates to its Safe Browsing technology, including a warning when users are about to visit a site chockfull of unwanted software.