Security News
![Documents about the NSA’s Banning of Furby Toys in the 1990s](/static/build/img/news/alt/cost-stats-small.jpg)
About Bruce Schneier I am a public-interest technologist, working at the intersection of security, technology, and people. I've been writing about security issues on my blog since 2004, and in my monthly newsletter since 1998.
![Securden Password Vault Review 2024: Security, Pricing, Pros & Cons](/static/build/img/news/securden-password-vault-review-2024-security-pricing-pros-cons-small.jpg)
Securden Password Vault is a password management solution geared towards supervising multiple accounts and sensitive login credentials. Aside from password storage, Securden Password Vault has key features to better manage your business' sensitive resources.
![Verizon insider data breach hits over 63,000 employees](/static/build/img/news/verizon-insider-data-breach-hits-over-63000-employees-small.jpg)
Verizon Communications is warning that an insider data breach impacts almost half its workforce, exposing sensitive employee information.A data breach notification shared with the Office of the Maine Attorney General reveals that a Verizon employee gained unauthorized access to a file containing sensitive employee information on September 21, 2023.
![EquiLend back in the saddle as ransom payment rumors swirl](/static/build/img/news/equilend-back-in-the-saddle-as-ransom-payment-rumors-swirl-small.jpg)
Global securities finance tech company EquiLend's systems are now back online after announcing a disruptive ransomware attack nearly two weeks ago. Providing regular updates via a dedicated web page, EquiLend almost completed its full restoration last week, waiting only for its data and analytics solutions to get back up and running.
![Criminal IP ASM: A new cybersecurity listing on Microsoft Azure](/static/build/img/news/criminal-ip-asm-a-new-cybersecurity-listing-on-microsoft-azure-small.jpg)
AI SPERA, a leader in Cyber Threat Intelligence-based solutions, today announced that Criminal IP ASM is now available on the Microsoft Azure Marketplace. Through this partnership, AI SPERA showcases Criminal IP ASM on the Microsoft Azure Marketplace in the security service listings.
![Spoutible API exposed encrypted password reset tokens, 2FA secrets of users](/static/build/img/news/spoutible-api-exposed-encrypted-password-reset-tokens-2fa-secrets-of-users-small.jpg)
A publicly exposed API of social media platform Spoutible may have allowed threat actors to scrape information that can be used to hijack user accounts. The problem with the Spoutible API. Security consultant Troy Hunt has been tipped off about the API by an individual who shared a file with 207,000 Spoutible user records - supposedly scraped via the API - and an URL that would allow Hunt to do the same with his own account.
![Beware: Fake Facebook Job Ads Spreading 'Ov3r_Stealer' to Steal Crypto and Credentials](/static/build/img/news/beware-fake-facebook-job-ads-spreading-ov3r-stealer-to-steal-crypto-and-credentials-small.jpg)
Threat actors are leveraging bogus Facebook job advertisements as a lure to trick prospective targets into installing a new Windows-based stealer malware codenamed Ov3r_Stealer. "This malware is...
![Experts Detail New Flaws in Azure HDInsight Spark, Kafka, and Hadoop Services](/static/build/img/news/experts-detail-new-flaws-in-azure-hdinsight-spark-kafka-and-hadoop-services-small.jpg)
Three new security vulnerabilities have been discovered in Azure HDInsight's Apache Hadoop, Kafka, and Spark services that could be exploited to achieve privilege escalation and a regular...
![Double trouble for Fortinet as it issues critical FortiSIEM vulns](/static/build/img/news/double-trouble-for-fortinet-as-it-issues-critical-fortisiem-vulns-small.jpg)
Fortinet's FortiSIEM product is vulnerable to two new maximum-severity security vulnerabilities that allow for remote code execution. In registering the CVE identities for the vulnerabilities, Fortinet linked to its own advisory to provide more information, but the link directs users to an older issue that was addressed in early October 2023.
![How a $10B Enterprise Customer Drastically Increased their SaaS Security Posture with 201% ROI by Using SSPM](/static/build/img/news/how-a-10b-enterprise-customer-drastically-increased-their-saas-security-posture-with-201-roi-by-using-sspm-small.jpg)
SaaS applications are the darlings of the software world. They enable work from anywhere, facilitate collaboration, and offer a cost-effective alternative to owning the software outright. At the...