Category: data security
Hack takes: A CISO and a hacker detail how they’d respond to the Exchange breach
Aaron Fosdick Contributor Aaron Fosdick is CISO at Randori, a cybersecurity firm that provides offensive security services. David Wolpoff Contributor A career hacker, David “Moose” Wolpoff is CTO and co-founder of Randori, a company building a continuous red-teaming platform. The cyber world has entered a new era in which attacks…
Read More
Indian state government website exposed COVID-19 lab test results
A security flaw in a website run by the government of West Bengal in India exposed the lab results of at least hundreds of thousands of residents, though likely millions, who took a COVID-19 test. The website is part of the West Bengal government’s mass coronavirus testing program. Once a…
Read More
MetroMile says a website bug let a hacker obtain driver’s license numbers
Car insurance startup MetroMile said it has fixed a security flaw on its website that allowed a hacker to obtain driver’s license numbers. The San Francisco-based insurance startup disclosed the security breach in its latest 8-K filing with the U.S. Securities and Exchange Commission. MetroMile said a bug in the…
Read More
Cybersecurity startup SpiderSilk raises $2.25M to help prevent data breaches
Dubai-based cybersecurity startup SpiderSilk has raised $2.25 million in a pre-Series A round, led by venture firms Global Ventures and STV. In the past two years, SpiderSilk has discovered some of the biggest data breaches: Blind, the allegedly anonymous social network that exposed private complaints by Silicon Valley employees; a…
Read More
Chris Krebs and Alex Stamos have started a cyber consulting firm
Former U.S. cybersecurity official Chris Krebs and former Facebook chief security officer Alex Stamos have founded a new cybersecurity consultancy firm, which already has its first client: SolarWinds . The two have been hired as consultants to help the Texas-based software maker recover from a devastating breach by suspected Russian…
Read More
TaskRabbit is resetting customer passwords after finding ‘suspicious activity’ on its network
TaskRabbit has reset an unknown number of customer passwords after confirming it detected “suspicious activity” on its network. The IKEA -owned online marketplace for on-demand labor said it reset user passwords out of an abundance of caution and that it “took steps to prevent access to any user accounts,” a…
Read More