BankInfoSecurity
May 5, 2021
DougOlenick) • April 5, 2021 Get Permission
The revelation that 533 million previously stolen Facebook account records have been made public on a darknet forum should inspire organizations to take aggressive action to further protect customer data security, some security experts say.
Although the data posted on the forum is several years old, it still poses risks because so much of it, including telephone numbers, is likely still valid, says Lorrie Cranor, director of the Cylab Security and Privacy Institute at Carnegie Mellon University. This breach did not leak passwords or financial account information, but it leaked information that can certainly be of use to identity thieves and make it easier for them to impersonate people and compromise their accounts, Cranor says. Organizations should check their password reset processes and make sure that the breached
Facebook Data Exposure: Lessons to Learn
govinfosecurity.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from govinfosecurity.com Daily Mail and Mail on Sunday newspapers.
By Ionut Arghire on March 15, 2021
Most security agencies fail to properly sanitize Portable Document Format (PDF) files before publishing them, thus exposing potentially sensitive information and opening the door for attacks, researchers have discovered.
An analysis of roughly 40,000 PDFs published by 75 security agencies in 47 countries has revealed that these files can be used to identify employees who use outdated software, according to Supriya Adhatarao and Cédric Lauradoux, two researchers with the University Grenoble Alpes and France’s National Institute for Research in Computer Science and Automation (Inria).
The analysis also revealed that the adoption of sanitization within security agencies is rather low, as only 7 of them used it to remove hidden sensitive information from some of their published PDF files. What’s more, 65% of the sanitized files still contained hidden data.
A cloud misconfig by SocialArks exposed 318 million records gleaned from Facebook, Instagram and LinkedIn.
More than 400GB of public and private profile data for 214 million social-media users from around the world has been exposed to the internet – including details for celebrities and social-media influencers in the U.S. and elsewhere.
The leak stems from a misconfigured ElasticSearch database owned by Chinese social-media management company SocialArks, which contained personally identifiable information (PII) from users of Facebook, Instagram, LinkedIn and other platforms, according to researchers at Safety Detectives.
The server was found to be publicly exposed without password protection or encryption during routine IP-address checks on potentially unsecured databases, researchers said. It contained more than 318 million records in total.
access, you can go in there and delete it and you can adjust your privacy settings. these quote, unquote privacy checkups where you opt in or out of various services. so there are tools for consumers to use. they are not entirely clear. you have to dig around through some links. and while it is important that, yeah, we don t just sit here and say we re victims, the companies they re monitoring us, at the same time we have to recognize these are the settings that a select few will bother to go in there and change around. so we really have to think about what are these companies doing by default? what are they opting us into that you want to play that game and crush those candies and you put that button without thinking about it and you are opening up to a lot of data exposure. what does google say about safety. we re talking about the cambridge analytica scandal and facebook up in arms about where this data is now. it was supposed to be deleted. how about google overseeing this as
vimarsana © 2020. All Rights Reserved.