Duncan Riley
Latest from Duncan Riley
Hacker publishes credentials stolen from Fortinet’s FortiGate VPNs
A hacker has published a list of credentials for nearly 50,000 Fortinet Inc. FortiGate virtual private networking systems connected to the internet that can be exploited using a known vulnerability. The 6.7-gigabyte uncompressed database is being offered on popular hacking forums and is claimed to be “the most complete achieve containing all exploit links and sslvpn ...
IBM reportedly cutting 10,000 employees from European services unit
International Business Machines Corp. is planning to eliminate about 10,000 jobs from its European services unit to cut costs ahead of a spinoff of the division next year, according to a report today from Bloomberg. The job cuts would affect about 20% of IBM staff in the region, with the biggest cuts coming to offices in the ...
Coinbase disables margin trading service following government guidance
Cryptocurrency exchange Coinbase Inc., the largest exchange in the U.S., today disabled its margin trading service following new guidance from the Commodity Future Trading Commission. Customers of Coinbase Pro that were using the service can no longer place new trades as of 2 p.m. PST today, and the product is set to be taken offline in ...
User data stolen from event organizing service Peatix offered for sale online
Event organizing service Peatix Inc. has suffered a data breach with the details of up to 6.77 million users offered for sale online. The data breach, reported to have occurred earlier this month, included full names, usernames, emails and hashed passwords. According to ZDNet today, the user data was being advertised for sale via Instagram Stories, Telegram channels ...
US government warns of online holiday shopping scams
With the end of the year nearing, two U.S. government agencies are warning shoppers to be cautious of online holiday shopping scams, fake emails and unencrypted financial transactions. The warnings today came from both the U.S. Federal Bureau of Investigation and the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency. Of the two, the FBI ...
Android apps from Chinese internet giant Baidu found to leak sensitive data
New research from Palo Alto Network Inc.’s Unit 42 has detailed how Android apps from Chinese internet giant Baidu Inc. listed on Google Play were leaking sensitive data. The apps, including Baidu Search Box and Baidu Maps that have been downloaded in the U.S. more than 6 million times were found to make users trackable ...
Spotify user credentials compiled by hackers found on unsecured database
A database of Spotify Technology SA account details believed to have been compiled by hackers has been found on an unsecured database in a tale that combines not only hacking but also one of the most common forms of data exposure. Detailed today by researchers Noam Rotem and Ran Locar at vpnMentor, the 72-gigabyte database of 380 million records relating ...
Tesla Model X entry system security flaw allows vehicles to be stolen in minutes
A security flaw in Tesla Inc.’s Model X keyless entry system has been found to allow a would-be hacker to steal the vehicle in minutes. Discovered by Lennert Wouters, a Ph.D. student at COSIC, a research group at the University of Leuven in Belgium, the hack involves exploiting a vulnerability in the way Tesla implements Bluetooth Low Energy in ...
Apple security head indicted for allegedly offering iPads for concealed gun permits
A grand jury in Santa Clara, California, has indicted Thomas Moyer, Apple Inc.’s head of global security, and three other men concerning an alleged bribery scheme to obtain concealed gun carry permits. The other people charged, Undersheriff Rick Sung and Captain James Jensen, are said in the indictment to have been the government officials who requested the ...
Manchester United forced to take systems offline following cyberattack
U.K. soccer club Manchester United has been forced to take some systems offline following a cyberattack. The attack occurred Friday evening U.K. time Nov. 20. The club described the attack only as “a sophisticated operation by organized cybercriminals.” Manchester United said in a statement Nov. 20 that it had extensive protocols and procedures in place for ...









