720-891-1663

News Bites for Friday June 22, 2018

Latest Cost Estimates For Equifax Breach is $439 Million According to recent (March) tax filings, costs related to their breach are now $439 million, making the Equifax breach the costliest in US history.  Assuming insurance does pay, it would cover, at most, $125 million, leaving Equifax to write a check for $300  million plus.  Given […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Developers Using Unprotected Databases Exposing Millions of Passwords

Thousands of Android and iPhone mobile apps use the Firebase database.  The database runs in the cloud and, apparently, by default has no security. The net effect of this is that 100 million records, or more, are exposed for anyone to capture. Firebase, a database run by Google, is very popular with Apple and Android […]

Continue reading → [DISPLAY_ACURAX_ICONS]

The Risk of the Insider Threat

Elon Musk, CEO of Tesla, sent an email to all employees over the weekend telling them that the company was hacked by an employee who changed code on an internal product and sent company data outside without permission. The software, the Tesla Manufacturing Operating System, is likely used internally in the manufacturing process. The employee […]

Continue reading → [DISPLAY_ACURAX_ICONS]

IoT is Going to Set Security Back a Decade, at Least

Axis Communications, the Swedish maker of high end security cameras (up to $1,000 each), announced patches to seven vulnerabilities that affect almost 400 camera models. Axis is not some cheap Chinese knockoff;  these are well respected cameras used in businesses the world over. The vulnerabilities, discovered by the security firm VDOO, comes with in depth […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Friday News Bites – June 15, 2018

Details Emerge on TicketFly Hack More details are coming out about the TicketFly attack.  First thing is that the web site was based on WordPress.  While WordPress is a very popular site for individuals and small businesses; using it for something as complex as a concert ticketing site is likely a mistake.  Hackers were able […]

Continue reading → [DISPLAY_ACURAX_ICONS]

DoD Moving Forward on Cybersecurity After Breach

In the wake of the cybersecurity disaster at the Naval Undersea Warfare Center, where a contractor lost control of over 600 gigabytes of extremely sensitive weapons system data for the Sea Dragon program, the DoD is reacting.  Sea Dragon, based on the few details we have, is a disruptive offensive weapon targeting Chinese submarines. Among […]

Continue reading → [DISPLAY_ACURAX_ICONS]