This past week, a hacker by the name of ChinaDan allegedly breached the Shanghai National Police (SHGA) database and has put the nearly 23 TB of data up for sale for 10 bitcoin (BTC), or a little over $200k USD as of this writing. ChinaDan claims the data contains “information on 1 Billion Chinese national residents and several billion case records” including names, addresses, … [Read more...]
Verizon Pin Leak – Daily Security Byte
Another company has leaked millions of customer records. This time, however, hackers weren't to blame. Rather, a company partnering with Verizon placed these records in a publicly available Amazon AWS S3 bucket, where anyone with the right URL could access them. Sometimes, simply misconfigurations create huge security problems. Watch the video below for a few more details about … [Read more...]
CloudPets Pwned – Daily Security Byte
I've always imagined a lot of cool, futuristic, technology scenarios, but I never imagined a day where attackers would hold the data from our Smart teddy bears ransom. According to researchers, the company that makes CloudPets stored data from its 800 thousand customers in a wide-open MongoDB database, which both attackers and researchers have gotten their hands on. Besides … [Read more...]
Yahoo Breaks Breach Record – Daily Security Byte
Remember the Yahoo data breach in September, where the well-known search and Internet company lost 500 million user accounts? That was pretty bad, right? Well it just got worse. Yahoo has now learned (from law enforcement) that they actually lost over 1 billion user accounts, in what may be a different breach. Other than the pure scale of affected accounts, the types of lost … [Read more...]
Endless Password Leaks – Daily Security Byte
This is really getting out of hand. Every week we seem to learn of a new organization that has had its user accounts stolen and sold on the criminal underground. This week, we've already learned of three new password leaks, and some of the victims even stored your credentials in clear text. Watch the Daily Byte below for more information, but you probably know my password and … [Read more...]