Security News

Last week, application security company ImmuniWeb released a new free tool to monitor and measure an organization's exposure on the Dark Web. To improve the decision-making process for cybersecurity professionals, the free tool crawls Dark Web marketplaces, hacking forums, and Surface Web resources such as Pastebin or GitHub to provide you with a classified schema of your data being offered for sale or leaked.

A database containing credentials from more than 26 million LiveJournal accounts has been leaked online and is being sold on the Dark Web and hacker forums. A now-defunct data-leak tracking service, We Leak Info, tweeted in July 2019 about a 2014 leak of 33 million LiveJournal accounts.

Sometimes the term is used in the literal sense of dark to describe a part of the web where the network traffic going to and from it is effectively invisible or untrackable, so that it is dark in the sense of being unilluminated. There you have it: dark as in evil, and dark as in unilluminated.

Web security company ImmuniWeb this week announced a free tool that allows businesses and government organizations to check their dark web exposure. Integrated into ImmuniWeb's Domain Security Test, the new feature provides organizations of all types with the option to check their current exposure by simply entering their main website URL. ImmuniWeb, which says it is serving an average of 50,000 free tests daily, is keeping an eye on hacking forums and underground marketplaces, as well as dedicated IRC channels and Telegram chats, paste websites and other locations on the deep, dark, and surface web where stolen data is offered, traded, or advertised.

There is a flood of interest in accessing corporate networks on the dark web, according to Positive Technologies. Criminals mostly sell access to industrial companies, professional services companies, finance, science and education, and IT. Criminals targeting major companies.

Researchers have trawled the dark web to see how the underground is responding to the COVID-19 pandemic. Researchers from Trustwave have found that the underground mirrors the overground - some people seek to make money from the crisis, others ignore it, and still others offer genuine help, information and advice to forum members.

These postings provide cybercriminals with the information needed to hack into networks where they can infect critical machines with malware, according to Positive Technologies. Such access allows attackers to directly target business networks or hire skilled "Professionals" to hack into networks to infect machines with malware.

We think of the dark web as an underground marketplace where cybercriminals buy and sell malicious tools and stolen information to scam innocent victims. Since the arrival of the coronavirus, people on the dark web have been sharing news, information, and concerns via underground communities.

Many organizations are steadfast in their belief that dark web monitoring is a critical part of their security operations and the security industry is happy to fuel that belief. While in some cases and industries it is indeed important to monitor the dark web, where the intelligence can help shape threat mitigation strategies, what most organizations do not realize is that it is often not the case.

A new report details major vulnerabilities among the executive suite at some of the largest pharmaceutical companies.