The seven most colossal data breaches of 2017

Credit to Author: Malwarebytes Labs| Date: Thu, 21 Dec 2017 16:00:00 +0000

This year saw a handful of spectacularly bad security fails that resulted in massive sets of compromised data. Here are the most colossal data breaches of 2017.

Categories:

Tags:

(Read more…)

The post The seven most colossal data breaches of 2017 appeared first on Malwarebytes Labs.

Read more

Please don’t buy this: identity theft protection services

Credit to Author: William Tsing| Date: Tue, 28 Nov 2017 17:31:58 +0000

Identity theft protection services promise to have your back against cybercriminals looking to steal your data. But they don’t actually stop them from taking your identity. Are they worth it, then? We say no.

Categories:

Tags:

(Read more…)

The post Please don’t buy this: identity theft protection services appeared first on Malwarebytes Labs.

Read more

How to Opt Out of Equifax Revealing Your Salary History

Credit to Author: BrianKrebs| Date: Mon, 13 Nov 2017 16:55:19 +0000

A KrebsOnSecurity series on how easy big-three credit bureau Equifax makes it to get detailed salary history data on tens of millions of Americans apparently inspired a deeper dive on the subject by Fast Company, which examined how this Equifax division has been one of the company’s best investments. In this post, I’ll show you how to opt out of yet another Equifax service that makes money at the expense of your privacy.

Read more

Equifax Reopens Salary Lookup Service

Credit to Author: BrianKrebs| Date: Thu, 02 Nov 2017 14:04:20 +0000

Equifax has re-opened a Web site that lets anyone look up the salary history of a large portion of the American workforce using little more than a person’s Social Security number and their date of birth. The big-three credit bureau took the site down just hours after I wrote about it on Oct. 8, and began restoring the site eight days later saying it had added unspecified “security enhancements.”

Read more

Dell Lost Control of Key Customer Support Domain for a Month in 2017

Credit to Author: BrianKrebs| Date: Wed, 25 Oct 2017 03:22:34 +0000

A Web site set up by PC maker Dell Inc. to help customers recover from malicious software and other computer maladies may have been hijacked for a few weeks this summer by people who specialize in deploying said malware, KrebsOnSecurity has learned. There is a program installed on virtually all Dell computers called “Dell Backup and Recovery Application.” It’s designed to help customers restore their data and computers to their pristine, factory default state should a problem occur with the device. That backup and recovery program periodically checks a rather catchy domain name — DellBackupandRecoveryCloudStorage.com — which until recently was central to PC maker Dell’s customer data backup, recovery and cloud storage solutions. Sometime this summer, DellBackupandRecoveryCloudStorage.com was suddenly snatched away from a longtime Dell contractor for a month and exposed to some questionable content. More worryingly, there are signs the domain may have been pushing malware before Dell’s contractor regained control over it.

Read more

A week in security (October 9 – October 15)

Credit to Author: Malwarebytes Labs| Date: Mon, 16 Oct 2017 19:00:56 +0000

A compilation of notable security news and blog posts from Monday, October 9 to Sunday, October 15. We presented our quarterly report, won security awards, and lots more.

Categories:

Tags:

(Read more…)

The post A week in security (October 9 – October 15) appeared first on Malwarebytes Labs.

Read more

Malvertising on Equifax, TransUnion tied to third party script (updated)

Credit to Author: Jérôme Segura| Date: Thu, 12 Oct 2017 21:42:28 +0000

We take a look at the the recent malvertising incident that happened on Equifax’s site and show how it also affected TransUnion.

Categories:

Tags:

(Read more…)

The post Malvertising on Equifax, TransUnion tied to third party script (updated) appeared first on Malwarebytes Labs.

Read more