Tag: security
Rallyhood exposed a decade of users’ private data
Rallyhood says it’s “private and secure.” But for some time, it wasn’t. The social network designed to help groups communicate and coordinate left one of its cloud storage buckets open and exposed. The bucket, hosted on Amazon Web Services (AWS), was not protected with a password, allowing anyone who knew…
Read More
How much should a startup spend on security?
One of the questions I frequently ask startup founders is how much they’re spending on security. Unsurprisingly, everyone has a different answer. Startups and small companies are invariably faced with the prospect that they’re either not spending enough or are spending too much on something that’s hard to quantify in…
Read More
How to identify and remove KidsGuard ‘stalkerware’ from your phone
We reported today on KidsGuard, a powerful mobile spyware. Not only is the app secretly installed on thousands of Android phones without the owners’ consent, it also left a server open and unprotected, exposing the data it siphoned off from victims’ infected devices to the internet. This consumer-grade spyware also…
Read More
A ‘stalkerware’ app leaked phone data from thousands of victims
A spyware app designed to “monitor everything” on a victim’s phone has been secretly installed on thousands of phones. The app, KidsGuard, claims it can “access all the information” on a target device, including its real-time location, text messages, browser history, access to its photos, videos and app activities, and…
Read More
US defense agency says personal data ‘compromised’ in 2019 data breach
A U.S. defense agency charged with providing information technology and communications support to the U.S. government, including the president and other senior officials, says its network may have been “compromised.” The Defense Information Systems Agency sent letters to possible victims earlier this month to warn of a “data breach” involving…
Read More
A group of ex-NSA and Amazon engineers are building a ‘GitHub for data’
Six months ago or thereabouts, a group of engineers and developers with backgrounds from the National Security Agency, Google and Amazon Web Services had an idea. Data is valuable for helping developers and engineers to build new features and better innovate. But that data is often highly sensitive and out…
Read More