Duncan Riley
Latest from Duncan Riley
Educational publishing company McGraw-Hill Education Inc. has exposed the details of hundreds of thousands of students in another case of a company failing to secure its Amazon Web Services Inc. storage. Discovered by researchers at vpnMentor, McGraw Hill was found to have …
Personal information of 68,000 DraftKings users exposed in credential-stuffing attack
Nasdaq-listed sports betting company DraftKings Inc. has revealed that nearly 68,000 customers had their personal information exposed in a credential-stuffing attack in November. A credential-stuffing attack is a type of cyberattack where an attacker uses stolen account credentials from other hacks to …
API vulnerabilities in Wordle exposed answers, opened the door to potential hacking
A security researcher has uncovered vulnerabilities in the New York Times-owned online game Wordle that not only reveal the solution to the daily word puzzle but also expose its application programming interface to potential hacking. Detailed today by David Thompson, a security …
Updated: Twitter bans promotion links to rival services as Musk polls users on his position as CEO
Updated: Twitter appears to have backtracked on its ban. It deleted tweets announcing the new policy that banned users from posting links and handles to other social networks and also removed the page detailing the rules. Twitter Inc. has banned promotional links to rival …
FuboTV struck by ‘criminal cyber attack’ during World Cup game
Viewers watching the World Cup game between France and Morocco on the streaming video service FuboTV had their viewing interrupted following what the company described as a “criminal cyber attack.” The exact form of attack was not disclosed. FuboTV said the incident …
Joint Ransomware Task Force assesses efforts to combat ransomware
The second meeting of the U.S. Joint Ransomware Task Force held on Wednesday assessed measures and efforts to address the impact and prevalence of ransomware attacks. Jointly chaired by the Cybersecurity and Infrastructure Agency and Federal Bureau of Investigation, the JRTF was …
FBI InfraGard database stolen and offered for sale on cybercrime forum
A database belonging to InfraGard, a partnership between the U.S. Federal Bureau of Investigation and the private sector to promote the protection of critical infrastructure, has been stolen and was offered for sale on a cybercrime forum. First reported Dec. 13 by Brian …
Microsoft bans cryptocurrency mining on Azure without pre-approval
Microsoft Corp. has banned customers from using Azure services for cryptocurrency mining unless pre-approval is granted. The change in the Universal License Terms for Online policy came into effect on Dec. 1 but was unnoticed at the time until it was highlighted …
Cybersecurity startup Protect AI launches with $13.5 million in funding
Artificial intelligence and machine learning systems cybersecurity startup Protect AI has today emerged from stealth mode with $13.5 million in new funding and its first product, NB Defense. NB Defense is a free product that’s claimed to be the industry’s first security …
‘Meta-Phish’ campaign leverages Facebook for phishing attacks
Researchers at Trustwave Holdings Inc.’s SpiderLabs today detailed a new campaign that leverages Facebook infrastructure for phishing attacks and the theft of personally identifiable information. Dubbed “Meta-Phish,” the campaign starts with phishing emails that point to actual Facebook posts instead of the …