Canadian Tire says customer info caught in data breach on e-commerce platform

Canadian Tire Corp. Ltd. says it has identified a data breach involving personal information belonging to customers, which was stored in an e-commerce database.

The retailer says the breached information belongs to shoppers who had an e-commerce account with Canadian Tire or its other banners, SportChek, Mark’s/L’Equipeur and Party City.

The breached data included names, addresses, emails and birth years, as well as encrypted passwords and in some cases incomplete credit card numbers.

Share

Cache of Devices Capable of Crashing Cell Network Is Found Near U.N.

The Secret Service discovered more than 100,000 SIM cards and 300 servers, which could disable cellular towers or be used to conduct surveillance.

The Secret Service found and seized an illicit network of sophisticated equipment in the New York region that was capable of shutting down the cellular network as foreign leaders prepared to gather nearby for the annual U.N. General Assembly, the agency announced on Tuesday.

Officials said the anonymous communications network, which included more than 100,000 SIM cards and 300 servers, could interfere with emergency response services and could be used to conduct encrypted communication. One official said the network was capable of sending 30 million text messages per minute, anonymously. The official said the agency had never before seen such an extensive operation.

More … Secret Service foils massive plot to cripple NYC cell network and threaten UN General Assembly

h/t Neocon

Share

House of Commons hit by cyberattack from ‘threat actor’: internal email

The House of Commons and Canada’s cybersecurity agency are investigating a significant data breach caused by an unknown “threat actor” targeting employee information.

According to an internal email obtained by CBC News, the House of Commons alerted staff on Monday that there was an information breach. It said a malicious actor was able to exploit a recent Microsoft vulnerability to gain unauthorized access to a database containing information used to manage computers and mobile devices.

Oh sure BCF has been under a months long DDOS attack but all CBC cares about is Stupid Parliament.

Share

Largest Data Breach in History: *16 Billion* Login Credentials Exposed in Databases

Security researchers have uncovered potentially the largest data breach in history, comprising an astounding 16 billion login credentials, which include Apple accounts.

9to5Mac reports that a team of security researchers has stumbled upon a massive trove of stolen login credentials, exposing an unprecedented 16 billion records, including Apple accounts. The discovery, which researchers describe as “one of the largest data breaches in history,” has sent shockwaves through the cybersecurity community and raised serious concerns about the potential for widespread account takeovers, identity theft, and highly targeted phishing attacks.

Share

China’s digital strategy: Cyber espionage!

China’s infiltration into agricultural IoT (Internet of Things) networks represents a critical yet underexplored dimension of its global technological strategy. Through key players such as Huawei and Alibaba Cloud, Beijing has embedded IoT technologies into agricultural systems in Latin America, Africa, and Asia. These initiatives, often framed as development partnerships aimed at improving food production and supply chain resilience, concurrently enable the collection of extensive agricultural and environmental data with profound strategic and geopolitical implications.

Share

Planes Hit by Mystery GPS Jamming Across Europe

Persistent interference with navigational signals in eastern Europe impacted more than 1,600 airplanes—including civilian aircraft—in less than two days, according to open-source analysis, as jamming plagues the airspace around the Baltic Sea.

Jamming lasting just under 48 hours affected 1,614 airplanes, many of which were civilian aircraft flying around the Baltic region in eastern Europe, according to an open-source intelligence account that regularly tracks GPS interference.

Share

Huge cybersecurity leak lifts lid on world of China’s hackers for hire

A big leak of data from a Chinese cybersecurity firm has revealed state security agents paying tens of thousands of pounds to harvest data on targets, including foreign governments, while hackers hoover up huge amounts of information on any person or institution who might be of interest to their prospective clients.

The cache of more than 500 leaked files from the Chinese firm I-Soon was posted on the developer website Github and is thought by cybersecurity experts to be genuine. Some of the targets discussed include Nato and the UK Foreign Office.

Share

What is the dark web and what can you find on there?

During the trial of Brianna Ghey’s killers, the court heard an illuminating text exchange between the teenage murderers Scarlett Jenkinson and Eddie Ratcliffe.

Jenkinson had been fuelling her fantasies by accessing murder and torture videos on the dark web. “I love watching torture vids. Real ones on the dark web,” she told her friend. But she wanted more and asked Ratcliffe how to get hold of live videos of people being tortured, for which you had to pay. “Why would I know?,” Ratcliffe said.

Share

Notorious Russia gang claims it stole ‘classified and top secret documents’ from US intelligence agencies – as FBI warns China hackers are preparing to ‘wreak havoc’ in America

A Russian ransomware gang allegedly infiltrated a technology company responsible for handling top-secret documents from US intelligence agencies, like the FBI.

The notorious group Blackcat, also known as ALPHV, is threatening to release the classified documents if the company, Technica, does not contact them soon.

Technica is a veteran-owned company that provides technology solutions to support the Federal Government’s mission to defend and protect America.

Share

Authorities investigating massive security breach at Global Affairs Canada

Canadian authorities are investigating a prolonged data security breach following the “detection of malicious cyber activity” affecting the internal network used by Global Affairs Canada staff, according to internal department emails viewed by CBC News.

The breach affects at least two internal drives, as well as emails, calendars and contacts of many staff members.

CBC News spoke to multiple sources with knowledge of the situation, including employees who have received instructions on how the breach affects their ability to work. Some were told to stop working remotely as of last Wednesday.

h/t Mauser

Share

Huge data leak dubbed the ‘Mother of all Breaches’ sees 26 BILLION records leaked from sites including Twitter, Linkedin, and Dropbox

Your personal information may have been leaked in the ‘Mother of all Breaches’ (MOAB), cybersecurity researchers have warned.

Over 26 billion personal records have been exposed, in what researchers believe to be the biggest-ever data leak.

Sensitive information from several sites including Twitter, Dropbox, and Linkedin was discovered on an unsecured page.

Share

MGM Resorts: Slot machines go down in cyber-attack on firm

Customers have reported problems with slot machines and online room booking systems following a cyber-attack on casino and hotel giant MGM Resorts.

Certain systems were shut down due to a “cyber-security issue”, the firm said.

But it added that its facilities remained “operational”.

One customer at the MGM Grand in Las Vegas said she had walked into the wrong room because the hotel’s digital keys were malfunctioning, and said staff had to distribute physical keys.

Share

Cybercrime set to threaten Canada’s security, prosperity, claims spy agency

Organized cybercrime is set to pose a threat to Canada’s national security and economic prosperity over the next two years, the national signal intelligence agency said on Monday.

The Communications Security Establishment (CSE) in a report identified Russia and Iran as cybercrime safe havens where criminals can operate against Western targets.

Share

Our cyberspace invaders: Why nobody can seem to solve Canada’s massive hacking problem

On a drab Wednesday in early February, malicious software from Russia quietly infiltrated the internal systems of Canada’s largest bookstore chain.

At the time, Indigo Books & Music Inc. IDG-T had recently promoted a new chief executive, and a major upgrade of the company’s decades-old website was just wrapping up. The retailer was implementing grand plans to expand its offerings, looking beyond books and launching into a wide array of markets around the world.

Share

Twitter admits to ‘security incident’ involving Circles tweets

A privacy breach at Twitter published tweets that were never supposed to be seen by anyone but the poster’s closest friends to the site at large, the company has admitted after weeks of stonewalling reports.

The site’s Circles feature allows users to set an exclusive list of friends and post tweets that only they can read. Similar to Instagram’s Close Friends setting, it allows users to share private thoughts, explicit images or unprofessional statements without risking sharing them with their wider network.

Share