Tagg: datalekkasje 59

https://www.buzzfeednews.com/article/craigsilverman/cheap-chinese-smartphones-malware

Preinstalled malware on low-cost Chinese phones has stolen data and money from some of the world’s poorest people.

Current security concerns about Chinese apps and hardware have largely focused on potential back doors in Huawei’s 5G equipment. More recently, people have focused on how user data collected by TikTok could be abused by the company and the Chinese government. But an overlooked and ongoing threat is the consistent presence of malware on cheap smartphones from Chinese manufacturers and how it exacts a digital tax on people with low incomes.

https://nrkbeta.no/2020/08/06/nhh-utsatt-for-datainnbrudd-over-300-studenter-og-ansatte-rammet/

NRKs gjennomgang av datalekkasjen tilsier at over 300 studenter og ansatte er kompromittert.

Det skal ha skjedd etter et større internasjonal datainnbrudd som har påvirket flere hundre organisasjoner.
Ifølge teknologinettstedet ZDNet skal 900 VPN-servere være rammet.

https://www.zdnet.com/article/after-a-breach-users-rarely-change-their-passwords-study-finds/

Only a third of users changed their password following a data breach.

Most users who changed passwords chose a weak one

https://www.amnesty.org/en/latest/news/2020/05/qatar-covid19-contact-tracing-app-security-flaw/

If technology is to play an effective role in tackling the virus, people need to have confidence that contact tracing apps will protect their privacy and other human rights

https://techcrunch.com/2020/05/24/thai-billions-internet-records-leak/

real-time internet records on millions of Thai internet users.

“All of the data related to Internet usage patterns and did not contain personal information that could be used to identify any customer,” said the spokesperson.

But that isn’t true

https://www.bbc.com/news/technology-52722626

It said email addresses and travel details had been stolen and that 2,208 customers had also had their credit card details “accessed”.

https://arstechnica.com/information-technology/2020/02/why-you-cant-bank-on-backups-to-fight-ransomware-anymore/

https://www.vice.com/en_us/article/qjdkq7/avast-antivirus-sells-user-browsing-data-investigation

An antivirus program used by hundreds of millions of people around the world is selling highly sensitive web browsing data to many of the world’s biggest companies, a joint investigation by Motherboard and PCMag has found.

Avast

https://www.wsj.com/articles/thousands-of-chinese-students-data-exposed-on-internet-11579283410

https://www.nrk.no/finnmark/filmet-pasientene_-la-apent-ute-pa-sykehusets-interne-nettsider-i-10-maneder-1.14864408

Finnmarkssykehuset vurderer feilen som alvorlig, men har ikke varslet pasientene som ble overvåket ulovlig.

https://www.zdnet.com/article/lifelabs-pays-hackers-to-recover-data-of-15-million-customers/

Data breach took place in early November, and hackers also gained access to 85,000 laboratory test results.

https://www.propublica.org/article/millions-of-americans-medical-images-and-data-are-available-on-the-internet

One expert warned about it for years.

https://nrkbeta.no/2019/06/11/nar-statens-sikkerhetstiltak-truer-oss/

Et ondsinnet cyberangrep har ført til at en database fra den amerikanske Tolletaten kom på avveie. Hendelsen får meg til å lure: Hva skjer når informasjon myndighetene lagrer om oss kommer i hendene på ukjente?

https://www.theverge.com/2019/5/21/18634842/google-passwords-plain-text-g-suite-fourteen-years

Only affects some G Suite customers

it can’t find any evidence that anybody’s password was improperly accessed. It’s resetting any passwords that might be affected

https://techcrunch.com/2019/05/08/samsung-source-code-leak/

A development lab used by Samsung engineers was leaking highly sensitive source code, credentials and secret keys for several internal projects — including its SmartThings platform

https://nrkbeta.no/2019/05/02/disse-knappene-kan-avslore-om-du-soker-psykisk-helsehjelp/

At du besøker disse informasjonssidene deler Kristiansand kommune med det amerikanske IT-selskapet Oracle, noe de ikke opplyser om på sine personvernsider.

https://www.zdnet.com/article/docker-hub-hack-exposed-data-of-190000-users/

Docker Hub usernames, hashed passwords, GitHub and Bitbucket access tokens exposed in the hack.

https://www.recode.net/2019/4/18/18485528/facebook-instagram-passwords-stored-unencrypted-security-issue

This number is much, much bigger than Facebook originally shared.

https://nakedsecurity.sophos.com/2019/04/02/possible-toyota-data-breach-affecting-3-1-million-customers/

Several Toyota companies have announced that they might have suffered data breach attempts

https://www.cnbc.com/2019/03/29/tesla-model-3-keeps-data-like-crash-videos-location-phone-contacts.html

Crashed Tesla vehicles, sold at junk yards and auctions, contain deeply personal and unencrypted data including info from drivers’ paired mobile devices