Let’s Encrypt Accidentally Spills 7,600 User Emails
Certificate authority Let’s Encrypt blamed a bug for accidentally disclosing the email addresses of a couple thousand of its users this weekend.
Chris Brook
About
"Distrust and caution are the parents of security" - Benjamin Franklin
One Year After Hack, IRS Debuts Updated Get Transcript Service
More than a year after hackers managed to manipulate the system the Internal Revenue Service has reinstated its Get Transcript service.
Threatpost News Wrap, June 10, 2016
The news from the week is discussed, including how recent data breaches have fed off password reuse and how a university paid $20K after a ransomware attack.
Officials at the University of Calgary admitted they paid $20,000 CDN this week to rid its system of ransomware.
Mozilla fixed 13 security issues, including two critical vulnerabilities that could have led to spoofing and clickjacking, among other issues, when it updated Firefox to the latest build, Firefox 47, this week.
Uber patched a bug in its site recently that could have allowed an attacker to log into some of its sites without a password and further compromise its internal network.
Hackers infiltrated the European social network VK.com at some point over the last several years and made off with credentials for 100 million of its users.
Deep in the code of the BlackShades ransomware there exist a handful of strings that once decoded, taunts security researchers.
Mike Mimoso and Chris Brook discuss the news of the week, including the back and forth around whether or not TeamViewer was hacked, the fallout around the years-old MySpace and Tumblr breaches, and a 90K Windows zero day.
TeamViewer continues to refute claims this week it was hacked and instead claims that password reuse and careless user actions may have led to a scourge of hacks.
