data breach

Passwords

Four More Collections, 700 Million Stolen Passwords Discovered

Researchers say that four more collections of stolen passwords contain more than 2 billion records and hundreds of millions of unique passwords, according to reports.

Marissa Mayer, Yahoo

Podcast Episode 131: suing Yahoo! Executives…and winning

In this week’s episode (#131): a shareholder lawsuit targeting Yahoo! executives was settled quietly. But it could have big implications for the C-Suite at breached firms. Also: as the US pursues criminal charges against Huawei for corporate espionage, we look at one of the federal government’s most potent tools to stop the transfer of sensitive IP: the Committee on Foreign Investment in the US. The C-Suite’s Bitter Pill This week, U.S. District Court judge Lucy Koh slapped down a proposed settlement of a class action lawsuit filed against Yahoo! (now part of Verizon Media) over a 2013 hack that exposed data on billions of its users. It’s just the latest twist in the saga of the once great search giant, who fell victim to hackers and then – astoundingly – conspired to keep the breach a secret for years. But another Yahoo! lawsuit that was quietly settled late last year […]

Podcast Episode 130: Troy Hunt on Collection 1 and Tailit’s Tale of IoT Security Redemption

In this week’s episode (#130): we speak with security researcher Troy Hunt, founder of HaveIBeenPwned.com about his latest disclosure: a trove of more than 700 million online account credentials he’s calling “Collection #1.” Also we speak to Martin Hagen of the Norwegian device firm Tailit about how failing a security audit of the company’s GPS watch sparked a security make-over at the company. 

Two Moscows

That Other Moscow: Sketchy LinkedIn Job Posts Mix US, Russian Locales

Bogus LinkedIn job postings for leading US organizations, including the US Army, the State of Florida and defense contractor General Dynamics, are popping up for Russian locales like St. Petersburg and Moscow, the firm Evolver has found. Is it AI-Gone-Wild, or is something more nefarious afoot? 

Abine says Blur Password Manager User Information Exposed

Customers who use the Blur secure password manager by Abine may have had sensitive information leaked, according to a statement by Abine, the company that makes the product.