LinkedIn and the Breach Timeline
What happened? In 2012, LinkedIn suffered a data breach of users’ encrypted passwords. At the time, they understood this to be about 6.5 million passwords. They forced a...
Engineering
Account Takeover & You – Social Media Edition
For most people, social media accounts are either the highlight or the lowlight of the internet. Regardless of how you feel about Facebook, Twitter, Instagram, TikTok, etc, if...
Profile Pics and How Trends Can Bite You
What happened? A new app generating eye-catching illustrated profile pics spiked in popularity at the beginning of May. The app, NewProfilePic, uses the user’s photo to create an...
The 411 on Credential Stuffing
Credential stuffing is easily the most common technique of account takeover AND the primary use of breached usernames and passwords. With billions of stolen credentials for sale on...
Puma and the Risk of Third-Party Software
What happened? The data of Puma employees was compromised in a ransomware attack. The targeted attack was part of a larger invasion of the third-party software, Kronos, used...