Giveaway of the Day Forums

1. 

   Anonymous
   Unregistered

   http://blog.sucuri.net/

   LastPass hacked? Forcing users to change their master passwords

   http://blog.lastpass.com/2011/05/lastpass-security-notification.html

   LastPass Security Notification

   Joe's interview with PCWorld covers more details on what happened, what our thought process has been, and what this means for our users

   http://www.pcworld.com/article/227268/exclusive_lastpass_ceo_explains_possible_hack.html.

   We continue to work as quickly as possible to address user support.

   Record traffic, plus a rush of people to make password changes is more than we can currently handle.

   We noticed an issue yesterday and wanted to alert you to it. As a precaution, we're also forcing you to change your master password.

   We take a close look at our logs and try to explain every anomaly we see. Tuesday morning we saw a network traffic anomaly for a few minutes from one of our non-critical machines. These happen occasionally, and we typically identify them as an employee or an automated script.

   In this case, we couldn't find that root cause.

   http://www.pcworld.com/article/227268/exclusive_lastpass_ceo_explains_possible_hack.html

   LastPass CEO Explains Possible Hack

   Posted 13 years ago #
2. 

   Anonymous
   Unregistered

   http://www.informationweek.com/news/government/security/229402048

   Phishing Attack Hits Oak Ridge National Laboratory
   The government lab expects to restore Internet access and external email service next week after losing nearly 1 gigabyte of unclassified data.
   The Department of Energy's Oak Ridge National Laboratory is investigating a sophisticated phishing attack that forced it to shut down email and Internet access last week.
   "We ended up with an excess of 570 of those emails coming in to different people and we had some folks who clicked on the email," she said. "One or two of them managed to get through into the system."
   The lab's IT team tracked and observed the virus for about a week before deciding that shutting down access to the Internet and external email last Friday was the best way to stop it

   http://www.scmagazineus.com/department-of-energy-funded-lab-silenced-by-apt-attack/article/201144/8/

   Internet and email service remains offline at the Oak Ridge National Laboratory after spear phishing attacks led to the theft of sensitive data.
   The Tennessee-based lab, which receives funds from the U.S. Department of Energy to conduct research in nuclear energy for national security purposes, was breached after nearly 60 employees clicked on a malicious link contained in emails promising information about their benefits package.
   As a result, malware exploiting an Internet Explorer (IE) zero-day vulnerability made its way onto two machines. Microsoft has since patched the flaw.
   As much as one gigabyte of data was siphoned, but it was encrypted, she said.
   In that attack, phishing emails were used to dupe employees into downloading data-stealing malware. In that case, though, the bait was an Excel spreadsheet attachment disguising an Adobe Flash zero-day vulnerability.

   http://www.v3.co.uk/v3-uk/news/2049512/barnet-nhs-responsible-187-breaches-past

   The information, requested of 30 trusts in the capital, found that Chelsea and Westminster Hospital was the second worst organisation with 123 losses, followed by Camden and Islington Foundation Trust with 72.

   http://www.guardian.co.uk/healthcare-network/2011/may/04/personal-data-breaches-london-nhs-trusts-data

   Posted 13 years ago #

RSS feed for this topic

Reply

You must log in to post.