Bjarteblogg Ymse
https://www.zdnet.com/article/fortnite-security-issue-would-have-granted-hackers-access-to-accounts/
Check Point recommends that Fortnite players enable two-factor authentication (2FA) for their accounts.
https://www.zdnet.com/article/popular-wordpress-plugin-hacked-by-angry-former-employee/
Hacker defaced the company’s website and sent a mass email to all its customers, alleging unpatched security holes.
https://www.zdnet.com/article/west-african-banks-hit-by-multiple-hacking-waves-last-year/
Banks and financial institutions in West Africa have been hit by four different hacking campaigns last year, according to a report published today by US cyber-security giant Symantec.
https://www.bbc.co.uk/news/world-asia-46698646
a computer at a South Korean resettlement centre was hacked
Analysts say there are some concerns that the leak could endanger the families of the defectors that still remain in North Korea.
https://techcrunch.com/2018/12/17/twitter-country-code-leak/
The concern here is that malicious actors could have used the security flaw to figure out in which countries accounts were based, which could have ramifications for whistleblowers or political dissidents.
For all four Android phones, the spoof face was able to open the phone, though with differing degrees of ease. The iPhone X was the only one to never be fooled.
Spammers are sending a wave of threats to businesses, schools, and other locations in English-speaking countries across the world, demanding bitcoin in exchange for not detonating a supposed bomb.
An intelligence official said that subcontractors across the entire military were lagging behind in cybersecurity and frequently suffered breaches that affected other branches.
https://techcrunch.com/2018/12/11/microsoft-login-bug-hijack-office-accounts/
A string of bugs when chained together created the perfect attack to gain access to someone’s Microsoft account — simply by tricking a user into clicking a link.
https://www.theverge.com/2018/12/10/18134541/google-plus-privacy-api-data-leak-developers
the new vulnerability impacted 52.5 million users, who could have had profile information like their name, email address, occupation, and age exposed […] even if their account was set to private.
https://blog.quora.com/Quora-Security-Update
We recently discovered that some user data was compromised as a result of unauthorized access to one of our systems by a malicious third party.
contained a guest’s name, postal address, phone number, date of birth, gender, email address, passport number, […] arrival and departure information, reservation date […]
anyone could have monitored a near-real-time data stream to find the relevant two-factor authentication code sent after trying to log into someone else’s account.
https://techcrunch.com/2018/11/13/facebook-bug-website-leak-likes-interests-profile/
The vulnerability exposed the user and their friends’ interests, even if their privacy settings were set so that interests were only visible to the user’s friends
It took about six months for popular consumer drone maker DJI to fix a security vulnerability across its website and apps