Duncan Riley
Latest from Duncan Riley
8.3M records of Freepik and Flaticon users stolen in SQL injection attack
Data relating to 8.3 million users of stock-image sites Freepik and Flaticon, both owned by Freepik Co. S.L., have been stolen through an SQL injection attack. The data stolen included the email addresses of users along with 3.77 million hashed passwords. Some 3.55 million of those passwords were encrypted with bcrypt, making them highly difficult ...
TikTok files lawsuit against Trump administration ban
Chinese-owned social video app provider TikTok has filed a lawsuit against the Trump administration’s ban of the service in the U.S. if it’s not sold off to a non-Chinese company. The lawsuit argues that the ban prevents the company from due process as guaranteed by the Fifth Amendment. TikTok further argues that the executive order signed by ...
Delivering strong earnings, Palo Alto Networks also snaps up Crypsis Group for $265M
Palo Alto Networks Inc.’s acquisition spree continued today as the company announced plans to acquire Crypsis Group for $265 million on a day it delivered a strong quarterly earnings report. Founded in 2015, Crypsis Group offers a range of cybersecurity products focused on fighting cybercrime. Pitched as being built on a shared vision of a ...
University of Utah paid $457,000 to those behind a ransomware attack
The University of Utah has become the latest victim of a ransomware attack to pay those behind the attack to resolve the matter, a decision that security researchers claim only encourages future attacks. The university’s College of Social and Behavioral Science was targeted by an unnamed form of ransomware July 19 that is described as ...
Epic Games gets Microsoft support as Apple alleges Fortnite maker asked for special deal
Epic Games Ltd.’s lawsuit against Apple Inc. following the removal of Fortnite from the App Store has taken several new twists, the most notable among them that Microsoft Corp. filed a declaration of support. The drama started Aug. 13 with Fortnite being banned from both Apple’s App Store and Google Play after Epic Games added support ...
Db2 shared memory vulnerability opened door to attackers, but IBM issued a patch
Users of IBM Db2 data management software are being warned of a shared-memory vulnerability that could allow an attacker to gain read and write access and perform unauthorized actions on a targeted system. Discovered by security researcher Martin Rakhmanov at Trustwave, who revealed the details today, the issue affects IBM Db2 versions for Linux, Unix ...
Cryptocurrency lending firm BlockFi raises $50M ahead of bitcoin rewards card release
Cryptocurrency lending firm BlockFi Lending LLC announced today it has raised $50 million in new funding to support its upcoming release of a bitcoin rewards credit card. The Series C round was led by Morgan Creek Digital and included Valar Ventures, CMT Digital, Castle Island Ventures, Winklevoss Capital, SCB 10X, Avon Ventures, Purple Arch Ventures, Kenetic Capital, HashKey and ...
Former Uber security chief Joe Sullivan charged in coverup of 2016 data breach
Former Uber Technologies Inc. Chief Security Officer Joe Sullivan has been charged in relation to covering up a security breach in 2016 that saw the theft of data relating to some 57 million Uber passengers and drivers. Sullivan (pictured) was charged Wednesday with obstruction of justice and “misprision” or concealment of a felony by the U.S. ...
Mark Zuckerberg testifies at FTC hearing for antitrust investigation
Facebook Inc. Chief Executive Officer Mark Zuckerberg has testified at a U.S. Federal Trade Commission hearing for an antitrust investigation that is looking at the company’s practices. First reported by Politico, the testimony is said to have been conducted under oath remotely over two days this week, according to people familiar with the case. FTC ...
Millions of IoT devices exposed to serious vulnerability in Cinterion connectivity modules
X-Force Red, International Business Machine Corp.’s team of hackers today revealed the details of a serious vulnerability in a series of “internet of things” connectivity chips that leaves millions of devices open to attackers. The vulnerability was initially found in Cinterion EHS8 M2M modules manufactured by Thales SA. They’re used to create secure communication channels for industrial ...









