Portpass vaccine passport app may have exposed hundreds of thousands of users’ personal data

Private proof-of-vaccination app Portpass exposed personal information, including the driver’s licences, of what could be as many as hundreds of thousands of users by leaving its website unsecured.

On Monday evening, CBC News received a tip that the user profiles on the app’s website could be accessed by members of the public.

The information was not encrypted and could be viewed in plain text.

Earlier in the day, the Calgary-based company’s CEO Zakir Hussein had denied the app had verification or security issues and accused those who raised concerns about it of breaking the law.

h/t Sweetpea

Share

Colonial paid nearly $5 million ransom & Biden won’t be doing anything

Colonial Pipeline had to pay almost $5 million crypto-ransom after they were hacked. Colonial provides fuel to much of the East. Crypto-criminals can hack our infrastructure and seriously harm us, but Joe Biden doesn’t see the need for interfering in a private company’s problems.

The cost will undoubtedly be passed down to consumers.

Share

Why will it take a WEEK to fix the Colonial Pipeline?

Colonial Pipeline says it is still days away from resuming full operations after falling victim to a cyberattack as questions being to mount over why it is taking an entire week to get the nation’s biggest fuel pipeline back in action.

Gas prices have already spiked to a seven-year high and reports of gas shortages and panic buying are emerging up and down the East Coast with motorists lining up from Florida to Virginia for fuel.

Share

Here’s how the FBI managed to get into the San Bernardino shooter’s iPhone

The phone at the center of the fight was seized after its owner, Syed Rizwan Farook, perpetrated an attack that killed 14 people. The FBI attempted to get into the phone but was unable to due to the iOS 9 feature that would erase the phone after a certain number of failed password attempts. Apple attempted to help the FBI in other ways but refused to build a passcode bypass system for the bureau, saying that such a backdoor would permanently decrease the security of its phones.

Share

‘Active threat’: Chinese hackers target 30,000 US entities

At least 30,000 US organisations including local governments have been hacked in recent days by an “unusually aggressive” Chinese cyber-espionage campaign, according to a computer security specialist.

The campaign has exploited recently discovered flaws in Microsoft Exchange software, stealing email and infecting computer servers with tools that let attackers take control remotely, Brian Krebs said in a post at his cybersecurity news website.

Share

‘Spy pixels in emails have become endemic’

The use of “invisible” tracking tech in emails is now “endemic”, according to a messaging service that analysed its traffic at the BBC’s request.

Hey’s review indicated that two-thirds of emails sent to its users’ personal accounts contained a “spy pixel”, even after excluding for spam.

Its makers said that many of the largest brands used email pixels, with the exception of the “big tech” firms.

Defenders of the trackers say they are a commonplace marketing tactic.

Share