Welcome to This Week’s [in]Security. Twitter Hack Week 3 arrests. Covid-19: Spread, Curves, Spikes & Waves. Lockdown, Reopening, & The New Normal. Vaccine Progress. More of the Good, Bad, and Ugly. DSSv4. CPoC and SPoC updates. SSF Update. POS Malware Alert. Mag-stripes. New breaches: Zello, LG, Xerox, Source Code Gigaleak. Ransomware: Garmin, Pivot Tech. HIBP gets 50M+ accounts. Breach costs. Contact tracing. Facial Recognition. GDPR. Stingray Drones. War on Crypto Updates. CitizenLab. Fair use. Forensic Software. Multiple NIST Updates. Blackberry. Big-tech Scrutiny. Quantum. Black Hat. Supply Chain Attack Survey. 0-day Root Causes & detection. BootHole. Wordpress RCE. Magneto RCE. Zoom. More ICS risk. Cisco bugs. Halt and catch fire for real. Tor. Multiple FBI warnings. IoT. Deepfake scam. Malware auction. Events-based Controls. Toronto. Fake News & Disinformation. Espionage. And more.
Trending news and COVID-19 updates.
The COVID related articles here fit together. Other COVID articles will appear under our normal section headings like regulations, privacy, breaches, and other risks. We have been following coronavirus risks since https://controlgap.com/blog/this-weeks-insecurity-issue-147.
-
Twitter Hack Week 3:
-
Facebook Ad boycott:
-
The spread, curves, spikes, and waves:
-
Lockdown, reopening, and The New Normal:
-
Treatments, Testing, Triage, and Trials, and things we learned:
-
Behaviour - the good, the bad, and the ugly:
-
Masks, anti-maskers, and distancing:
PCI Compliance and Payments
News and announcements relating to Payment Security, PCI, Card Brands, Payments, Payment Malware and Fraud.
Breaches / Ransomware / Leaks
Covering breaches, leaks, data exposures, ransomware (as potential breach), and their fallout.
-
New breaches:
-
New Ransomware:
-
Follow-ups:
- List of Blackbaud breach victims tops 120 https://www.computerweekly.com/news/252486910/List-of-Blackbaud-breach-victims-tops-120
- Blackbaud's Bizarre Ransomware Attack Notification https://www.databreachtoday.com/blogs/blackbauds-bizarre-ransomware-attack-notification-p-2929
- Heart and Stroke Foundation Warns of Privacy Breach at Third Party Company https://vocm.com/2020/08/01/privacy-breach-heart-and-stroke-foundation/
- Questions Persist About Ransomware Attack on Blackbaud https://www.bankinfosecurity.com/ransomware-attack-questions-persist-over-blackbaud-hit-a-14734
- Some potential victims of PaperlessPay breach are first finding out about the breach now https://www.databreaches.net/some-potential-victims-of-paperlesspay-breach-are-first-finding-out-about-the-breach-now/
- OkCupid: Hackers want your data, not a relationship https://www.zdnet.com/article/okcupid-hackers-want-your-data-not-a-relationship
- NZ police terminate contract with Gravitas after breach https://www.databreaches.net/nz-police-terminate-contract-with-gravitas-after-breach/
- Health records found at Fort Simpson dump may have been stolen https://www.databreaches.net/ca-health-records-found-at-fort-simpson-dump-may-have-been-stolen-report/
- Appen - 5,888,405 breached accounts (June 2020) https://haveibeenpwned.com/PwnedWebsites#Appen
- Scentbird - 5,814,988 breached accounts (June 2020) https://haveibeenpwned.com/PwnedWebsites#Scentbird
- Vakinha - 4,775,203 breached accounts (June 2020) https://haveibeenpwned.com/PwnedWebsites#Vakinha
- Swvl - 4,195,918 breached accounts (June 2020) https://haveibeenpwned.com/PwnedWebsites#Swvl
- Drizly - 2,479,044 breached accounts (June 2020) https://haveibeenpwned.com/PwnedWebsites#Drizly
- Havenly - 1,369,180 breached accounts (June 2020) https://haveibeenpwned.com/PwnedWebsites#Havenly
- Kreditplus - 768,890 breached accounts (June 2020) https://haveibeenpwned.com/PwnedWebsites#Kreditplus
- Chatbooks - 2,520,441 breached accounts (March 2020) https://haveibeenpwned.com/PwnedWebsites#Chatbooks
- 집꾸미기 - 1,298,651 breached accounts (March 2020) https://haveibeenpwned.com/PwnedWebsites#DecoratingTheHouse
- TrueFire - 599,667 breached accounts (Feb 2020) https://haveibeenpwned.com/PwnedWebsites#TrueFire
- Dunzo - 3,465,259 breached accounts (June 2019) https://haveibeenpwned.com/PwnedWebsites#Dunzo
- Hurb - 20,727,771 breached accounts (March 2019) https://haveibeenpwned.com/PwnedWebsites#Hurb
- LifeLabs goes to court to block results of investigation into 2019 privacy breach https://www.cbc.ca/news/business/lifelabs-data-breach-1.5667618
- Morgan Stanley Hit with Class Lawsuit Over Alleged Data Breaches https://www.databreaches.net/morgan-stanley-hit-with-class-lawsuit-over-alleged-data-breaches/
- LifeSpan Health System Hit With $1 Million HIPAA Fine https://www.databreachtoday.com/lifespan-health-system-hit-1-million-hipaa-fine-a-14714
- Lifespan Pays $1,040,000 to OCR to Settle Unencrypted Stolen Laptop Breach https://www.databreaches.net/lifespan-pays-1040000-to-ocr-to-settle-unencrypted-stolen-laptop-breach/
- IBM Security 2020 Cost of Data Breach Report Shows 10% Annual Increase in Healthcare Data Breach Costs https://www.databreaches.net/ibm-security-2020-cost-of-data-breach-report-shows-10-annual-increase-in-healthcare-data-breach-costs/
- Today’s ‘mega’ data breaches now cost companies $392 million to recover from https://www.zdnet.com/article/todays-mega-data-breaches-now-cost-companies-392-million-in-damages-lawsuits
Privacy
Articles about privacy related news, risks, and trends.
Laws & Regulations / Standards
News about laws, regulations, and standards affecting security, privacy, technology, and public interest.
Defense / Techniques / Solutions
Covering developments and opportunities that may help improve security.
Bugs / Design Flaws / Vulnerabilities / Research
Articles about newly discovered vulnerabilities and research.
Hacking / Malware / Cybercrime / Exploitation
News covering active trends and events.
Other Security / Risk
Articles covering other types of risks.
Off-Topic / Science & Tech / Lighter Side
A variety of scientific, technical, historical, and more light-hearted news.