Duncan Riley
Latest from Duncan Riley
Sophos customer data exposed following ‘access permission issue’
U.K. cybersecurity software company Sophos Group plc has suffered a security breach, exposing data relating to some of its customers. The company informed customers via email, describing the breach as involving an “access permission issue in a tool used to store customer information on customers who have contacted Sophos Support.” Although Sophos says only a small subset ...
Data stolen in hack targeting network solutions provider Belden
Networking solutions provider Belden Inc. has been hacked and employee and company data stolen. Described Tuesday by the company as a “data incident involving unauthorized access” and a “sophisticated attack by a party outside the company,” the data theft is said to involve the hackers gaining access to a limited number of company file services. According ...
Hacker publishes credentials stolen from Fortinet’s FortiGate VPNs
A hacker has published a list of credentials for nearly 50,000 Fortinet Inc. FortiGate virtual private networking systems connected to the internet that can be exploited using a known vulnerability. The 6.7-gigabyte uncompressed database is being offered on popular hacking forums and is claimed to be “the most complete achieve containing all exploit links and sslvpn ...
IBM reportedly cutting 10,000 employees from European services unit
International Business Machines Corp. is planning to eliminate about 10,000 jobs from its European services unit to cut costs ahead of a spinoff of the division next year, according to a report today from Bloomberg. The job cuts would affect about 20% of IBM staff in the region, with the biggest cuts coming to offices in the ...
Coinbase disables margin trading service following government guidance
Cryptocurrency exchange Coinbase Inc., the largest exchange in the U.S., today disabled its margin trading service following new guidance from the Commodity Future Trading Commission. Customers of Coinbase Pro that were using the service can no longer place new trades as of 2 p.m. PST today, and the product is set to be taken offline in ...
User data stolen from event organizing service Peatix offered for sale online
Event organizing service Peatix Inc. has suffered a data breach with the details of up to 6.77 million users offered for sale online. The data breach, reported to have occurred earlier this month, included full names, usernames, emails and hashed passwords. According to ZDNet today, the user data was being advertised for sale via Instagram Stories, Telegram channels ...
US government warns of online holiday shopping scams
With the end of the year nearing, two U.S. government agencies are warning shoppers to be cautious of online holiday shopping scams, fake emails and unencrypted financial transactions. The warnings today came from both the U.S. Federal Bureau of Investigation and the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency. Of the two, the FBI ...
Android apps from Chinese internet giant Baidu found to leak sensitive data
New research from Palo Alto Network Inc.’s Unit 42 has detailed how Android apps from Chinese internet giant Baidu Inc. listed on Google Play were leaking sensitive data. The apps, including Baidu Search Box and Baidu Maps that have been downloaded in the U.S. more than 6 million times were found to make users trackable ...
Spotify user credentials compiled by hackers found on unsecured database
A database of Spotify Technology SA account details believed to have been compiled by hackers has been found on an unsecured database in a tale that combines not only hacking but also one of the most common forms of data exposure. Detailed today by researchers Noam Rotem and Ran Locar at vpnMentor, the 72-gigabyte database of 380 million records relating ...
Tesla Model X entry system security flaw allows vehicles to be stolen in minutes
A security flaw in Tesla Inc.’s Model X keyless entry system has been found to allow a would-be hacker to steal the vehicle in minutes. Discovered by Lennert Wouters, a Ph.D. student at COSIC, a research group at the University of Leuven in Belgium, the hack involves exploiting a vulnerability in the way Tesla implements Bluetooth Low Energy in ...









