The headline says it all. About 142 million customer records were stolen from MGM Resorts, the data included names, addresses, email addresses, phone numbers, and dates of birth. Rich pickings for any threat actor. MGM’s data breach was over two years ago and the data has been on sale since …
Clearview facial recognition company fined
The ICO has taken action against Clearview AI Inc for using the images of UK residents to create a global face recognition database and has prohibited them from collecting images of UK residents from the internet. This was a joint investigation between the Office of the Australian Information Commissioner (OAIC) …
Continue reading “Clearview facial recognition company fined”
A brutal lesson in why longer complex passwords are better
To learn this lesson you do not have to pay anything – the New South Wales tax payers, thanks to experts hired by their politicians and government will pay for you. As part of the cybersecurity Master’s course, we had to set up an experiment to test brute forcing of …
Continue reading “A brutal lesson in why longer complex passwords are better”
Chatbot phishing
Phishing campaigns usually depend on social engineering and threat actors are always looking for new ways to exploit your trust: Phishing scam adds a ‘chatbot-like’ twist to steal credit card information and more – The Record by Recorded Future
I wrote some simple malware to steal credit card data and how that connects to a Texas data breach
OK it was part of my Master course, and it was an attack against a sand-boxed compromised server, and the malware, to be honest, would not last a moment in the real world with the current state of the art when it comes to protecting customer payment information. However the …