Aggregator

Experts Explain Complexity of Company's Massive Data Breach Analysis Endeavor
UnitedHealth Group says its previously eye-popping estimate of 100 million people affected by last year's attack on its Change Healthcare unit nearly doubled in recent months to a staggering 190 million victims. Why did it take so long for the company to figure out the extent of the compromise?

Europe Targets Officers of Unit 29155 of the Russian Main Intelligence Directorate
The European Union sanctioned on Monday three officers of a Russian military intelligence unit for their role in cyberattacks targeting Estonia in 2020. The sanctions are tied to the unit's 2020 hack of the Estonian government departments and the exfiltration of sensitive documents.

China's DeepSeek AI Model Sparks US Policy Debate Amid Growing Industry Concerns
The global artificial intelligence race saw a historic "Sputnik moment" this week when the Chinese startup DeepSeek claimed to develop a competitive model with $6 million and a stockpile of old Nvidia semiconductors - defying export restrictions and raising alarms about China's ability to innovate.

Identity Theft Resource Center's Lee on Lessons Learned From 2024 Mega-Breaches
Six mega cybersecurity incidents led to a record 1.7 billion data breach notices going out to victims in 2024 - a dramatic 312% increase over the previous year. Identity Theft Resource Center President James E. Lee says the increase exposes industry-wide failures in basic cybersecurity practices.

Google highlighted significant abuse of its Gemini LLM tool by nation state actors to support malicious activities, including research and malware development

The Codefinger ransomware represents a new frontier in cyber threats, specifically targeting AWS S3 buckets. By exploiting Server-Side Encryption with Customer-Provided Keys (SSE-C), attackers gain control over the encryption process, rendering recovery impossible without their AES-256 keys.

The post Codefinger Ransomware: Detection and Mitigation Using MixMode appeared first on Security Boulevard.

Old accounts are often unmaintained and forgotten - which can be problematic when you want to "clean up" some of your digital footprint by deleting them or go back to secure them with stronger passwords/MFA.

How do you find these old accounts when your recollection isn't enough? Fortunately, we all have some tricks up our sleeves for doing so. Some methods may be more effective for some users.

TABLE OF CONTENTS

• Old accounts are a part of your digital footprint
• Finding old accounts
• • Check your password manager
  • • Check stored credentials in the browser
    • iOS and macOS users: Review accounts in the "Keychain"
    • Android (and Google account users): Check the Google password manager
  • Search inboxes of old email accounts
  • Search data breach databases
  • • Leverage CTI platforms
  • Search for old, but frequently used usernames
• Final thoughts

Old accounts are a part of your digital footprint

Everything you do on the internet leaves a trace, which is commonly collectively referred to as your digital footprint. Creating accounts - whether you use them or not - is a part of this digital footprint.

I probably don't really need to explain it to you if you're reading this, as you likely understand that there's an account for just about everything on the internet. According to a survey conducted by NordPass in 2024, the average user has around 168 passwords to manage (which for the most part translate into accounts). Their survey also indicated this is an upward trend.

A proliferation of accounts and their subsequent management contributes to users' "attack surface" as well, as the more accounts increases the the possible points an unauthorized user can gain access to the information connected to/stored in the account. In this use case, this is typically by breaking into the account itself, a data leak, or a data breach.

The term "attack surface" is typically used for organizations to describe the avenues for attacks, but on the topic of accounts and users, its principles apply here as well. The short story is the less accounts you have, the less "attack surface" you have as a user; though this is primarily a cybersecurity topic, it actually extends to privacy as well.

Of course, you can minimize this attack surface by following and maintaining good cybersecurity hygiene, which includes having good password management and using MFA to secure your accounts. However, note that even following these practices can't mitigate data breaches where the service itself is compromised by a threat actor.

On the privacy front, the less accounts you create, then the less avenues for data breaches (which can leak your personal information) and the less trust you must have in third parties not to disclose personal information - including usage data, device and connection info connected to the account - to potential "adversaries."

Unmaintained "old" accounts can be problematic, especially if you've forgotten about them. They can use weak/leaked passwords and any data contained in the account can be weak to credential stuffing attacks from threat actors... or the account data leaked in a data breach of the service itself. If the account is no longer desired or needed, deletion is the best course of action.

Finding old accounts

There are many ways to find accounts to delete. You probably know of the accounts you currently use - but here are some tips to find old accounts so you can delete them, hopefully reducing your digital footprint and "attack surface."

Check your password manager

Using a password manager is a great way to improve password management - primarily by generating and securely storing strong passwords. Regardless of your password manager - whether it is cloud-based or note, open source (which is preferable) or not, a great place to look for accounts to delete could easily begin in your current password manager vault.

Check stored credentials in the browser

Most modern browsers have a built-in "password manager" able to store website credentials. Users can search these saved logins, which may contain old/abandoned accounts, though doing so varies slightly depending on the browser. Review your browser's help pages to access/search saved logins.

Note: Using a browser "password manager" is not recommended. Dedicated password managers provide more features, usability, and security.

iOS and macOS users: Review accounts in the "Keychain"

Apple devices (iOS and macOS) have a built-in credential manager, "Keychain." On iOS this is the new default "Passwords" app.

If you've had or currently have an Apple device, there's a high likelihood you've used Keychain - and it may have old accounts you no longer use stored. If you've ever transitioned from iOS/macOS or have transitioned to using another password manager, then this is a great place to look.

Android (and Google account users): Check the Google password manager

When users are signed into their Google accounts - especially when using Google Android or Google Chrome - the Google password manager may automatically capture and store login information for websites and apps.

As such, it may contain old accounts - especially if users have multiple Google accounts, have used Google Android, or have signed into their Google account when using Google Chrome.

Search inboxes of old email accounts

If you still have access to your old(er) email accounts, searching these inboxes can provide clues to accounts you may have forgotten about - especially if you created them before using a password manager. Many of us don't delete emails; so upon creating an account, it's highly likely you could still have the welcome email for long forgotten accounts.

Some helpful search terms ideas include:

• "Account information"
• "Welcome to"
• "Thanks for creating"
• "Email confirmation"
• "Finish registration"

Similarly, even if the original welcome email is not in your inbox, you may also find old accounts from password reset messages, one-time passwords (OTP), or account information changes. With account information changes, many services will send "confirmation" of key account changes, such as address changes, payment changes, or email address changes.

Some helpful search strings could include:

• "Email address change"
• "Information change"
• "Notice of account change"
• "Change confirmation"
• "Reset link"
• "New password"
• "Password reset"

Search data breach databases

Data breach databases often house information exposed in data breaches and data leaks, which can include email addresses and password hashes/plaintext equivalents. Most breach databases can be easily searched - typically, users will be required to input an email address, username, or phone number to check against the database records.

Common (and reputable) breach databases include:

• Have I Been Pwned
• Dehashed
• Breach Directory
• Mozilla Monitor

Searching breach databases can be useful for uncovering old, long abandoned or “dead” accounts that may have been involved...

The post How to Find Old Accounts for Deletion appeared first on Security Boulevard.

Defensie versterkt de capaciteiten om drones te bestrijden. De organisatie schaft hiervoor 22 mobiele anti-drone kanonsystemen aan. Defensie hoopt de contracten snel te ondertekenen. Als dat lukt zijn de eerste nieuwe systemen mogelijk in 2028 binnen. Dat meldt staatssecretaris Gijs Tuinman vandaag.

今日暂未更新资讯~
更多最新文章，请访问SecWiki

2025-01-22期刊征文-暗网抑制前沿进展  ourren || discuss

A vulnerability classified as problematic has been found in Twig up to 3.18.x. This affects an unknown part of the component ?? Operator Handler. The manipulation leads to injection. This vulnerability is uniquely identified as CVE-2025-24374. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in snowflakedb pdo_snowflake up to 3.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to signed to unsigned conversion error. This vulnerability is handled as CVE-2025-24792. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in needyamin Library Card System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file signup.php of the component Registration Page. The manipulation of the argument firstname/lastname/email/borrow/user_address leads to cross site scripting. This vulnerability is known as CVE-2025-0844. The attack can be launched remotely. Furthermore, there is an exploit available. Other parameters might be affected as well.

A vulnerability was found in needyamin Library Card System 1.0. It has been classified as critical. Affected is an unknown function of the file admindashboard.php of the component Admin Panel. The manipulation of the argument email/password leads to sql injection. This vulnerability is traded as CVE-2025-0843. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in needyamin Library Card System 1.0 and classified as critical. This issue affects some unknown processing of the file admin.php of the component Login. The manipulation of the argument email/password leads to sql injection. The identification of this vulnerability is CVE-2025-0842. The attack may be initiated remotely. Furthermore, there is an exploit available.

Submit #485558 / VDB-294001

Submit #485553 / VDB-294000

Submit #485540 / VDB-293999

A vulnerability has been found in Aridius XYZ up to 20240927 on OpenCart and classified as critical. This vulnerability affects the function loadMore of the component News. The manipulation leads to deserialization. This vulnerability was named CVE-2025-0841. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.