Cybersecurity

Category Added in a WPeMatico Campaign

Cybersecurity

US Senator Quizzes 23andMe Over Credential-Stuffing Hack

Cybercrime , Fraud Management & Cybercrime , Governance & Risk Management Congressional Scrutiny, Lawsuits Target Genetics Testing Firm’s Privacy Practices Marianne Kolbasuk McGee (HealthInfoSec) • October 26, 2023     Image: 23andMe Genetics testing firm 23andme is facing intensifying scrutiny in the wake of a credential-stuffing hacking incident that leaked genetic ancestry information of potentially […]

Cybersecurity

The Duck is Hiring in Italy: DUCKTAIL Spread via Compromised LinkedIn Profiles

By Cluster25 Threat Intel TeamOctober 25, 2023 Cluster25 observed a malicious campaign that employs LinkedIn messages as a vector for executing identity theft attacks. In this campaign, compromised LinkedIn accounts are utilized to send messages to users with the aim of compromising their accounts by illicitly procuring their cookies, session data, and browser credentials. The […]

Cybersecurity

The Cybersecurity Resilience Quotient: Measuring Security Effectiveness

In the ever-changing landscape of cybersecurity, where threats morph, adversaries grow increasingly sophisticated, and new technology is adopted at ever greater speed, organizations are continually challenged to evaluate the effectiveness of their defenses. Traditional metrics such as the raw number of security incidents, mean time to detect, mean time to respond, or mean time to […]

Cybersecurity

Hello Alfred app exposes user data

Hello Alfred app exposes user data Pierluigi Paganini October 27, 2023 Hello Alfred, an in-home hospitality app, left a database accessible without password protection, exposing almost 170,000 records containing private user data. Hello Alfred is a one-stop application allowing real estate developers and property managers to provide in-home services and maintenance to residents. It also enables […]