Notices by BrianKrebs (briankrebs@infosec.exchange)

I'm sick to death of people telling me I should be on this or that social network that's controlled by some billionaire wingnuts. I'm perfectly happy where I am. And I have a strong feeling that we're going to see something of a great migration here soon (fingers crossed).

Meantime, go ahead..say Bluesky one more time.

Developing scoop:

Fintech Giant Finastra Investigating Data Breach

The financial technology firm Finastra is investigating the alleged large-scale theft of information from its internal file transfer platform, KrebsOnSecurity has learned. Finastra, which provides software and services to 45 of the world's top 50 banks, notified customers of the security incident after a cybercriminal began selling more than 400 gigabytes of data purportedly stolen from the company.

https://krebsonsecurity.com/2024/11/fintech-giant-finastra-investigating-data-breach/

#finastra #databreach

In March 2019, I broke a story about how Facebook had been storing unencrypted password data for hundreds of millions of Facebook users.

https://krebsonsecurity.com/2019/03/facebook-stored-hundreds-of-millions-of-user-passwords-in-plain-text-for-years/

Today, the lead European Union privacy regulator fined Meta ~$100 million for that security/privacy failure, which Facebook said could have allowed any one of its 200,000 employees to see the plaintext passwords for up to 600M accounts.

https://www.reuters.com/technology/eu-privacy-regulator-fines-meta-91-million-euros-over-password-storage-2024-09-27/

Google continues to struggle with cybercriminals running malicious ads on its search platform to trick people into downloading booby-trapped copies of popular free software applications. The malicious ads, which appear above organic search results and often precede links to legitimate sources of the same software, can make searching for software on Google a dicey affair.

h/t @th3_protoCOL for the image

https://krebsonsecurity.com/2024/01/using-google-search-to-find-software-can-be-risky/

Today marks one year since I walked away from 360,000 followers on that other site and joined this incredible community here!

That was easily one of the most positive moves I've ever made, and I frankly haven't looked back. Thank you to @jerry and everyone else who keeps this place humming. Come to think of it, it's time to renew our annual support!

https://joinmastodon.org/sponsors

Like Microsoft, Google really needs to get a handle on criminals paying them to spread malware disguised as legit software. These paid results are so dangerous because they show up before any organic search results. e.g., woe to those who recently searched for KeePass.

Google-hosted malvertising leads to fake Keepass site that looks genuine

https://arstechnica.com/security/2023/10/google-hosted-malvertising-leads-to-fake-keepass-site-that-looks-genuine/

Breaking, new: German police raid DDoS-friendly host "FlyHosting." Actually, the German police wouldn't say who they raided. But news of the raid on FlyHosting broke Thursday on a Telegram chat channel dedicated to people in the DDoS-for-hire industry.

The German police did say the defendants ran an internet service that was responsible for an awful lot of DDoS attacks.

FlyHosting first advertised on cybercrime forums in November 2022, saying it was a Germany-based hosting firm that was open for business to anyone looking for a reliable place to host malware, botnet controllers, or DDoS-for-hire infrastructure.

https://krebsonsecurity.com/2023/03/german-police-raid-ddos-friendly-host-flyhosting/

I'm pretty sure Mastodon is the first social network I've been on that didn't immediately ask me to betray all of the people in my address book.

I mean, think about this for just a sec: LinkedIn, Twitter, SnapChat, Instagram, the list goes on and on. The VERY first thing these platforms will do after you've installed the app and logged in is to ask you to share all of the information in your address book. Ever wonder how these social networks got so big so fast? It's remarkable how much of their growth is based on convincing everyone it's totally fine and normal to give away all of the contact information given to them by friends, family and acquaintances.

It's time for the test: A head of lettuce vs. Tesla stock price staying above $100. Any takers?