The Capital One breach is more complicated than it looks

Opinion | Facebook’s Surveillance Machine (Published 2018)

It’s true that the Cambridge Analytica incident wasn’t a security breach. It was something far worse.

Mercor Data Breach | What You Need to Know

A massive data breach at AI startup Mercor exposes risks in AI supply chains, third-party tools, and data governance. Here’s what security teams need to know.

How a 40-Minute Window Brought Down a $10 Billion AI Startup: The Mercor Data Breach, Explained

A poisoned open-source package, a credential-stealing payload, and 4 terabytes of stolen data here’s what every AI company needs to learn…

Data Leeks: Made with love, leaked by hackers | The Mozilla Blog

Data breaches are on the rise. According to web security experts, the frequency of data breaches almost doubled from 2016 to 2017, and 73% of all U.S. comp

The hacker crackdown: law and disorder on the electronic frontier

A journalist investigates the past, present, and future…

Over 16% of Japanese companies experience data breaches

According to the survey, 30.2% of large companies suffered or potentially suffered breaches, significantly higher than 14.3% among small businesses.

Learnings from 5 years of tech startup code audits - Ken Kantzer's Blog

While I was leading PKC’s security practice, we did probably 20-30 code security audits, almost of all of them for startups that were just around their Series A or B (that was usually when they had cash and realized that it’d be good to take a deeper look at their security, after the do-or-die focus on product market fit).

Tracers in the dark: the global hunt for the crime lords of cryptocurrency

"A propulsive story of a new breed of investigators who have cracked the Bitcoin blockchain, taking once-anonymous realms of money, drugs, and violence and holding them up to the light Black markets have always thrived in the shadows of society. Increasingly, these enterprises-drug dealing, money laundering, human trafficking, terrorist funding-have found their shadows online. Digital crime lords inhabiting lawless corners of the internet have operated more freely than their analog counterparts could have ever dreamed of. At the heart of their massive conspiracies: cryptocurrency. By transacting not in dollars or pounds but in Bitcoin-a currency with anonymous ledgers, overseen by no government, beholden to no bankers-black marketeers robbed law enforcement for years of their chief method of cracking down on criminal markets, namely, following the money. But what if the centerpiece of this dark economy held a secret, fatal flaw? What if their currency wasn't so cryptic after all? An investigator using the right mixture of technical wizardry, financial forensics, and old-fashioned persistence could crack open an entire world of crime. Men with No Names is a story of crime and consequences unlike any other. With unprecedented access to the major players in federal law enforcement and private industry, veteran cybersecurity reporter Andy Greenberg tells an astonishing saga of criminal empires built and destroyed. He introduces an IRS agent with a defiant streak; a Bitcoin-tracing Danish entrepreneur; and a colorful ensemble of hardboiled agents and prosecutors as they delve deep into the crypto-underworld. The result is a thrilling, globe-spanning story of dirty cops, drug bazaars, sex-abuse rings, and the biggest takedown of an online narcotics market in the history of the internet. This is a cat-and-mouse story and a tale of a technological one-upmanship that's utterly of our time. Filled with canny maneuvering and shocking twists, it answers a provocative question: How would some of the world's most brazen criminals behave if they were sure they could never get caught?"--

The Hacker and the State: Cyber Attacks and the New Nor…

Packed with insider information based on interviews, de…

A CISO's Guide to Avoiding Jail After a Breach

Yahoo, Uber, SolarWinds — increasingly, the government is incentivizing better corporate security by punishing the individuals leading it. Is that a good idea? And how can security pros avoid ending up on the butt end of a lawsuit?

Maybe we have the cybersecurity we deserve

Companies have focused more on making the consumer recovery process from fraud and data breaches easier than on better security. Most people seem OK with that.

Facebook-Cambridge Analytica: A timeline of the data hijacking scandal

Facebook is desperately trying to mend its damaged reputation following the continued fallout of a massive data scandal.

The Breach (@breachmedia.ca)

Journalism to map a just future. Award-winning outlet launched in May, 2021. Sign up to our free newsletter to get our journalism delivered to you: http://breachmedia.ca/subscribe/

Microsoft Director Privately Admitted AI Was the “Largest Theft of Labor in Human History,” Unsealed Court Documents Show

Newly unredacted court documents reveal damning statements by two AI executives in a landmark case about intellectual property.

Microsoft exec called AI scraping ‘the largest theft of labor in human history,' new unredacted filings reveal | TechCrunch

Newly unsealed court filings show Microsoft privately called OpenAI's data practices "theft" while both companies scraped paywalled Times content, built datasets from it, and warned internally it would gut publishers.

Bleeding edge

New York City, 2001. Fraud investigator Maxine Tarnow starts looking into the finances of a computer-security firm and its billionaire geek CEO and discovers there's no shortage of swindlers looking to grab a piece of what's left of the tech bubble