TASCET

Exclusive: For the 2nd time in three years, mobile spyware maker mSpy leaks millions of records online, including payment details and chat/text messages, location data, phone records etc. uploading from devices secretly running mSpy krebsonsecurity.com/2018/09/…

Exclusive: Misconfiguration by banking technology giant Fiserv exposed the personal and financial data on countless customers of hundreds of small to mid-sized banks krebsonsecurity.com/2018/08/…

Reddit breach highlights limits of SMS-based 2-factor authentication. If SMS 2FA is all that's available, so be it. But many sites now support more secure forms of authentication. Why you should up your game. krebsonsecurity.com/2018/08/…

Reddit just disclosed a breach, says it's still investigating severity. Of particular note was that the intruders managed to bypass SMS-based two-factor authentication in the compromise. reddit.com/r/announcements/c… This is why physical 2-factor or at least app-based 2FA is superior.

Exclusive: LifeLock just took its site offline to fix a bug that exposed millions of customer email addresses, data that could be very useful to scammers interested in conducting mass phishing expeditions. krebsonsecurity.com/2018/07/…

Human resources and tax prep firm ComplyRight was breached. Some 76,000 organizations use the company's services to prepare tax forms like W2s and 1099s. krebsonsecurity.com/2018/07/…