Blog – Page 5 of 5 – Cloudentity

AT&T Call Center Employees Bribed to Unlock Phones and Install Malware

Published August 6, 2019

Breaches

The DOJ unsealed an indictment against Muhammad Fahd and his co-conspirator Ghulam Jiwan who bribed AT&T call center employees to unlock over 2 million iPhones -- Fahd eventually moved on from bribing employees to do the unlocking by having them install malware inside the AT&T network so that he could gain employee passwords and do...

Breach: 1 Million South Korean Credit Cards on the Dark Web

Published August 6, 2019

Breaches

Gemini Advisory Group reported today that there has been a sharp uptick in the number of South Korean for sale on the dark web; they have seen a 2,019% increase in July based on baseline data with over 1 million compromised South Korea-issued CP records posted for sale in the dark web since May 29,...

Poshmark Breach

Published August 2, 2019

Breaches

In today's breach news, Poshmark disclosed "data from some Poshmark users was acquired by an unauthorized third party." Poshmark is a social commerce marketplace where people in the United States can buy and sell new or used clothing, shoes, and accessories. It's unclear exactly According the the official disclosure release on Poshmark's website (see https://blog.poshmark.com/2019/08/01/important-security-notice-from-poshmark/)...

Pearson Exposes Student Data

Published August 1, 2019

Breaches

Education software company Pearson, exposed data on at least 100,000 students across more than 13,000 schools and universities. The breach itself was in November of 2018, and discovered in March, but only announced in August, underscoring the challenges companies have with identifying, remedying and communicating breaches. First and last names, email addresses, and dates of...

Capital One AWS Breach

Published July 30, 2019

Breaches

The story of the hacker who got hold of 100 million Capital One credit applications and accounts keeps getting bigger. First there's the breach itself -- the woman who hacked her way into the AWS S3 buckets openly talked about her exploits on Twitter and Slack with enough details to make it pretty clear what...

Facebook will pay $5 BILLION for Cambridge Analytica Breach

Published July 24, 2019

Breaches

The FTC announced that it will fine Facebook $5 Billion (yes that's with a "B") and subject the company to new regulations based on the Cambridge Analytica breach where millions of users data was harvested and targeted for political campaigning. To date, this is the most expensive fine levied against a company for breaching personal...

Facebook Kids App let's Kids talk to Strangers

Published July 22, 2019

Breaches

Facebook's Messenger Kids App was designed so "Kids can only connect with parent-approved contacts" only it wasn't true. Due to a flaw in privacy settings, kids were able to end up in group chats with unapproved people. While this is obviously a massive #COPPA issue, it's also just a plain old trust issue... When it...

The Monster Road to Zero Trust

Published July 19, 2019

Videos

https://www.youtube.com/watch?v=Ta91xfGshoc Your applications are not secure! You need a zero trust roadmap, but where are you on your road to zero trust? You start off with...