SecurityBash

A central place to see all the Security news, tutorials and information specifically for devs.

[SecurityBash @Securitybash]

🚨 New #databreach alert
In March 2020, the Irish gym management software company Glofox suffered a data breach.
Accounts affected: 2.3m
Data exposed: email addresses, names, phone numbers, genders, dates of birth and passwords stored as unsalted MD5 hashes.

[SecurityBash @Securitybash]

🚨 New #databreach alert
In November 2020, a collection of data breaches were made public including the "Entrepreneur Success Platform", GeniusU.
Accounts affected: 1.3m
Data exposed: names, emails, IP addresses, genders, social media profiles and passwords (bycrypt hashes)

[SecurityBash @Securitybash]

🚨 New #databreach report
In June 2020, the hardware crypto wallet manufacturer Ledger suffered a data breach. The data was initially sold before being dumped publicly in December 2020
Accounts affected: 1m+
Data exposed: names, physical addresses and phone numbers.

[SecurityBash @Securitybash]

In January 2019, the event organising platform Peatix suffered a data breach.
Accounts affected: 4.2m
Data exposed: email addresses, names and salted password hashes.

[SecurityBash @Securitybash]

🚨New #databreach report
In 2018, internet television service #PlutoTV suffered a breach. PlutoTV decided not to proactively inform users of the breach
Accounts affected: 3.2M
Data exposed: unique email and IP addresses, names, usernames, genders, DOB, passwords (bcrypt hashes).

[SecurityBash @Securitybash]

🚨 New #databreach report
In November 2020, a collection of more than 23,000 allegedly breached websites known as #Cit0day were made available for download on several hacking forums.
Data Exposed: 226m unique email addresses with plain text passwords pairs!!!

[SecurityBash @Securitybash]

🚨 New #databreach report
In March 2020, the stock photo site #123RF suffered a data breach.
Accounts Affected: 8 million
Data exposed: email addresses, IP addresses, physical addresses, names, phone numbers, passwords (MD5 hashes)

[SecurityBash @Securitybash]

🚨 New #databreach report
In early 2020, the food delivery service Home Chef suffered a data breach which was subsequently sold online.
Accounts affected: 9 million
Data exposed: customer names, IP addresses, postcodes, partial credit card number, passwords (bycrypt hashes)

[SecurityBash @Securitybash]

New #databreach report
October 2020, the online game for kids #AnimalJam suffered a data breach. Exposed November 2020.
Accounts affected: 46 million
Exposed data: Email addresses (7m unique), IP addresses, DOB, physical addresses, parent names, passwords (PBKDf2 hashes)

[SecurityBash @Securitybash]

🚨 New #databreach reported
In approximately mid-2020, #Mashable suffered a data breach that subsequently turned up publicly in November 2020.
Accounts affected: 1.4 million
Data exposed: email, names, gender, AuthTokens, physical locations, social media accounts.

[TechTarget News @TechTargetNews]

Establishing a #cybersecurity operations center? Here's advice on whether to do so in house or to outsource. #SOC https://t.co/upcAAanEl8

[NCSC UK @NCSC]

In this week's Threat Report: Leading cyber security firm reports attacks https://t.co/JKW87k0RhD

[Infosecurity Magazine @InfosecurityMag]

Our #IntoSecurity #Christmas Special podcast is out now! Tune in as @InfosecEditor put @MichaelInfosec, @DanRaywood & newcomer @ReporterCoker to the test in our Christmas quiz! Who will be crowned champion? Listen and play along here>>https://t.co/E8ZkaAtfqc

[GigaOm @gigaom]

In this CISO Series episode, co-host @dspark challenges that it's time for a #CISO do-over, while listing features from our Key Criteria report for evaluating #Phishing solutions. Listen in for the criteria that CISOs at @fastly and @Guidewire_PandC use. https://t.co/yXUDFwZBVv

[Darknet Diaries @DarknetDiaries]

Ep 80: The Whistleblower

In this episode we hear a story from a social engineer who's job it is to get people to do things they don't want to do. Why? For profit.

https://t.co/8WM5v6UsOA

[AWS Security @AWSSecurityInfo]

Here's how to get started with fine-grained access control in Amazon Elasticsearch Service: https://t.co/a3RQbN9Q2J

[Sqreen @SqreenIO]

The framework level is an ideal place to implement plenty of Security Paved Road best practices. 🛣

Here's @JbAviat summary of @AppSecBuilders Ep 2 with @KseniaDmitrieva on securing your #frameworks with a #pavedroadfoundation today!

https://t.co/VfSm4qVbA3

[Snyk @snyksec]

Looking to apply for a conference speaker position? Here are 10 tips for getting that conference CFP accepted: https://t.co/NbaWzDEYST

#conference #publicspeaking

[HackerNoon | Learn Any Technology @hackernoon]

"Answering the 12 Most Common Questions About Python" by @truemarkDev https://t.co/X8X2wzsTUg #python #pythonprogramming

[Cyber Protection Magazine @cybersec_mag]

2020 is a year that nobody could have predicted, and one that few will forget. Looking ahead to 2021, we will undoubtedly be presented... - https://t.co/cMIdc4ZnaN #cybersecurity