Tag

Security Breach

Browsing

By

A major security breach at online micro-blogging site Twitter has been blamed on owner Elon Musk’s mass firing of staff.

Over 200 million Twitter users woke up to find their email and log-in details had been posted online.

According to several reports, the data was stolen over a year ago but has only just been put up for sale on ‘Breached’, a dark web market place.

The data, contains emails and partial log-in details for over 200m users is available for sale for the crypto currency equivalent of $2 (£1.69) each.

Alon Gal, of Israeli cyber security firm Hudson Rock first reported the breach over LinkedIn, he said it was “one of the most significant leaks I’ve seen.”

Meanwhile, Bleeping Computer, a New York based tech and security firm. said they had confirmed the validity of a number of the leaked emails. They also said the data included not only email addresses and phone numbers but also names, screen names/user handles, follower count, and account creation date.

The security breach comes as experts question whether Twitter will be able to handle system vulnerabilities. Since taking over the social media platform, Elon Musk has fired over half of Twitter staff.

Last week, two UK politicians saw their Twitter accounts hacked, spelling trouble for public figures on the platform.

A senior threat researcher at Sophos has advised caution saying: “Now is the time to assume a brace position for a possible crash of Twitter. This is what many information security professionals are doing: it’s what everyone should be doing now.”

According to cybersecurity experts at Wedbush Securities, Musk’s mass firing means that no one is left to “fix things” that are broken.

“There’s skeleton staff right now left and I think that’s pretty scary, especially around the cybersecurity side. You start to lose some key engineers, developers, key people internally, I think that’s where this thing can really cascade,” technology analyst Daniel Ives was quoted saying.

Twitter has been approached for comment.

By

Sourced from CITY A.M.

By

Marking WhatsApp’s greatest security breach to date, the Facebook-owned messaging service just repaired what it’s calling a “serious security vulnerability.”

Although the timeline of the breach remains unclear, the vulnerability apparently allowed bad actors to install high-end spyware on the phones of WhatsApp users.

The spyware — NSO Group’s Pegasus — is popular among government spy agencies, according to a report in the Financial Times.

Partly due to the sophisticated nature of the operation, Facebook has referred the breach to the U.S. Department of Justice, along with a number of government regulars around the world.

Reached for comment, a WhatsApp spokesperson said user security is a top priority for the Facebook unit. “We are constantly working alongside industry partners to provide the latest security enhancements to help protect our users,” the spokesperson said.

WhatsApp is not ready to estimate how many of its roughly 1.5 billion users might have been impacted by the vulnerability.

Pegasus, NSO Group’s flagship spy software, has the power to activate a phone’s microphone and camera, search through emails and messages, and even track location data.

Security blunders have become a regular occurrence for Facebook and its network of platforms. Most recently, the tech titan admitted the passwords of millions of Instagram users might have been exposed to its own employees.

Yet, the idea that foreign governments might be using WhatsApp to spy on users makes Facebook’s other security breaches appear quaint by comparison.

Making matters worse for Facebook, Mark Zuckerberg just recently unveiled an ambitious plan to redefine private, encrypted messaging platforms.

Still in development, the new offering will “focus on the most fundamental and private use case — messaging — make it as secure as possible, and then build more ways for people to interact on top of that,” Facebook’s cofounder-CEO said at the time.

The announcement confirmed a recent story in The New York Times, which reported Facebook was integrating the infrastructures of Messenger, Instagram and WhatsApp in order to enable end-to-end encryption across its network of properties.

This latest security snafu doesn’t bode well for the future of such an integrated service.

By

Sourced from MediaPost