Data Breach Costs Hilton $700,000 In Settlement

November 10th, 2017

Hilton Hotels is in hot water, having recently been fined a hefty $700,000 in an agreement with the states of New York and Vermont over the company's mishandling of a pair of recent data breaches.

According to official statements released by investigators, the company was found to have made two glaring errors: failing to maintain reasonable data security, and failing to notify victims of the data breach in a timely manner.

Android Bug Found In Adaptive Icons

November 9th, 2017

Do you use apps that employ the new "Adaptive Icons" feature introduced in Android Oreo? If so, be aware that there's a serious flaw in the code that could send your device into an infinite bootloop, leaving you no alternative but to restore the device to factory default settings, which will almost certainly result in at least some lost data.

Yet Another Credit Card Breach For Hyatt

November 8th, 2017

Hotel giant Hyatt is in the crosshairs again, having suffered its second data breach in two years. Hyatt's security team recently confirmed the breach as having occurred between March 18 and July 2 of 2017.

While the company has yet to release any information detailing the number of impacted users, simply stating that it was a "small percentage of guests," we do know that the following information was stolen:

• Credit card numbers
• Cardholder names
• Expiration dates
• And internal verification codes

Of note, no other personal information was obtained, so your name, address, birthdate, etc.

Watch Out For New Facebook “Trusted Friend” Scam

November 7th, 2017

If you can't trust your friends, who can you trust?

No one, apparently.

There's a new scam on Facebook that's making waves, and it's one you should be mindful of. You may get an "urgent message" from someone you know, asking for your help in recovering their Facebook account.

Top Subject People Fall Victim To Is – Data Breach Notification

November 6th, 2017

For hackers around the world, success breeds more success, it seems.

A company called KnowBe4 has released a report entitled "Top Ten Global Phishing Email Subject Lines For Q3 2017." To prepare it, they analyzed email subject lines from simulated phishing tests to determine what the most effective approach was.

Ransomware Continues To Evolve On Android Devices

November 4th, 2017

Hackers around the world are continuing to innovate at a terrifying, relentless pace, and that truth is reflected in the latest form of ransomware to be found in the wild.

Dubbed "DoubleLocker," this new strain targets Android devices. It uses and abuses the platform's Accessibility Service, reactivating itself every time the user presses the phone's "Home" button.

Hard Drives Susceptible To Sound Waves, Can Double As Microphones

November 3rd, 2017

File this one away under “obscure and terrifying.”

Recently, a security researcher named Alfredo Ortega, speaking at a security conference in Buenos Aires, unveiled research revealing that the hard drive in your computer can be, with a bit of work, turned into a rudimentary microphone and used to spy on you.

After Yet Another Equifax Hack, IRS Suspends Contract Worth $7.5M

November 2nd, 2017

Equifax just can’t seem to get out of its own way.

Not long ago, the company suffered a massive data breach which saw the sensitive information of more than 145 million consumers exposed.

As a result, congressional hearings were convened, and the CEO resigned in disgrace.

Popular Chrome Ad Blocker Faked, 30k Users Infected With Malware

November 1st, 2017

“Fool me once, shame on you. Fool me twice, shame on me,” as the saying goes. Unfortunately, Google has now been fooled by the same trick twice.

For the second time in recent years, Google has allowed a malicious variant of the popular extension “AdBlock Plus” onto its Chrome Web Store.

New Hack Attempts To Access Office 365 Passwords

October 31st, 2017

Companies are getting better at detecting and fending off brute force attacks. Depending on how big, and how hard-hitting the attack is, it can still get through, of course, but the main problem with such an attack is that it’s impossible to miss. The moment it starts, security professionals know what’s going on, and can immediately spring into action.