15 casos · pág. 1/1
In Weekly Update 516, Troy Hunt comments on the Brinks Home incident, in which the company is the target of criminal extortion. He criticizes the company's FAQ as so heavily lawyered that it fails to answer basic incident response questions. Hunt describes a common breach pattern: attackers obtain data by vishing a target and abusing OAut…
Troy Hunt's Weekly Update 515, titled "Seeking Caffeine Utopia", is a personal post about Australian coffee culture and his purchase of a new espresso machine. The excerpt contains no reporting on breaches, vulnerabilities, threat actors, malware or other security incidents. It has no operational relevance for defenders and carries no ind…
Have I Been Pwned (HIBP) has onboarded Nepal as the 47th government to use its free government monitoring service. Nepal's National Cyber Security Centre (NCSC) can now monitor Nepalese government domains against the breach data held in HIBP. This lets the NCSC identify exposed government email addresses and respond quickly when those acc…
Troy Hunt's Weekly Update 518 covers his home door lock design built on Ubiquiti UniFi hardware. The design rests on four principles: mains power with no reliance on batteries, fail-secure behaviour so doors stay locked in a power outage, local control with no cloud latency, and a manual override for emergencies such as a fire. He plans t…
Troy Hunt announced that Sri Lanka is the 48th government onboarded to the free government service of Have I Been Pwned (HIBP). Sri Lanka CERT can now monitor Sri Lankan government domains against data held in HIBP. This helps identify exposed government accounts and respond when they appear in new data breaches. The announcement is about…
In his Weekly Update 517, Troy Hunt offers commentary on the current ransomware situation. He argues that much of what is called ransomware often involves no malware at all and is simply extortion, frequently carried out by young offenders. These actors earn large sums but struggle to spend them without being caught. He adds that breached…
This Troy Hunt weekly update is a personal, non-security post. He describes using YouTube's automatic thumbnail generator and installing his first full Ubiquiti Access door lock with a Lockwood ES2100 electric strike. He notes the built-in door position sensor simplifies the setup and hopes Ubiquiti will add hub support for latch position…
In Weekly Update 519, Troy Hunt describes a busy week of conference talks in Oslo and Copenhagen, including a 3D printing talk, an NDC infosec talk and a talk on cyber-related topics. He also notes that "ratbag hackers" keep dumping more data, but the excerpt names no victims, threat actors, datasets or dates. The rest covers his IoT door…
Troy Hunt of Have I Been Pwned (HIBP) analysed the leak that ShinyHunters attributed to Carhartt. The leak was claimed to hold more than 50 GB of customer and employee records. The initial extraction showed 24,876,077 unique email addresses. Closer review showed that a large share came from the TPC-DS benchmark dataset (tpcdssf1000) store…
Troy Hunt's Weekly Update 522, recorded live in Oslo with Scott Helme, discusses how Report URI uses Content Security Policy (CSP) reporting to identify malware-infected machines within organizations. Helme also describes a high rate of malicious browser extensions being detected with help from "Rory", his local OpenClaw instance. The art…
In his weekly update, Troy Hunt notes that the ShinyHunters group appears to be on an escalating trajectory, reportedly targeting both the Cl0p ransomware group and the FBI. Hunt describes this as feeling like a crescendo in the group's activities and says that provoking US federal law enforcement is unlikely to help the group's longevity…
Troy Hunt's Weekly Update 521 argues that media narratives about AI as a powerful hacking tool diverge from the facts. He cites a statistic that AI has had effectively 0% impact on insurance payouts, and a Dutch individual who is reportedly being tracked down from his voice. He also points to Scott's teardown of the MAG breach, which ulti…
This is a Troy Hunt weekly update post titled "Building HIBP AI/SI First". Hunt argues that "vibe coding" has lost its derogatory connotation and that developers cannot remain competitive without AI tools. He cites Linus Torvalds, who reportedly called rules against AI coding tools "UTTERLY STUPID" on the Linux kernel mailing list. The ex…
Troy Hunt's weekly update reports two arrests linked to the ShinyHunters cybercrime group: an individual named Pepijn in the Netherlands and another named Saif in Jordan. Hunt calls the arrests an inevitable and likely outcome. He expects more members to follow, and anticipates substantial custodial sentences given the seriousness of the …
In Weekly Update 525, Troy Hunt argues that hype portraying AI as a data breach driver is not supported by current evidence. He cites a run of recent breaches carried out by young attackers using voice phishing (vishing) over the telephone, and says he has not seen a single breach orchestrated by AI. The post is opinion and commentary, wi…
