Tuesday, December 30, 2014

Top data breaches of 2014 and lessons

May - eBay [1, 2]
  • 145 million
  • The problem has been exploited at least from February
  • Information compromised - encrypted passwords, usernames, emails, DoBs, phone numbers, postal addresses
  • How - eBay allows sellers to use active content such as Javscript and Flash. Hackers have embedded password harvesting scripts in listings and used XSS attack to gather information from logged in users
  • Lessons  - If you allow active content in your web site, you need to have preventive (such as limiting what is allowed) as well as risk mitigation techniques (detection, monitoring, etc.) in place. If not, it is better to block active content.

September - Home Depot [1]
  • 56 million
  • Information compromised - credit and debit card numbers
  • How - resulted from the compromise of a third-party vendor
  • Lessons - Organizations should evaluate the security measures taken by third-party vendors and also have intrusion detection in place.

September - JPMorgan Chase [1, 2]
  • Attack discovered in July and disclosed in September
  • 76 million households (83 million accounts)
  • Information compromised - names, addresses, phone numbers and email addresses
  • How - Hackers got access via a neglected server which is not upgraded to two factor authentication
  • Potentially took 2 months to notice unusual activities after the initial attack
  • Lessons - Security is only as strong as the weakest link in your system. Make sure you do not leave any unguarded holes in your network. Cannot emphasize more of the need for better and faster detection techniques in place.

December - Sony Pictures [1]
  • Number of people affected is still not known
  • Attack initially detected in November
  • Information compromised - unreleased movies, company emails, executive salaries, personal information, internal strategy information
  • How - wiper malware (still it is not known how it got into the system). It is likely that lapses in internal security measures may resulted in this attack.
  • Lessons - Never take security lightly. Internal security measures and auditing should always be a top priority.

39 comments:

Anonymous said...

I wish to show thanks to you just for bailing me out of this particular trouble.As a result of checking through the net and meeting techniques that were not productive, I thought my life was done.Digital Marketing Training in Chennai

Digital Marketing Training in Bangalore
Digital Marketing Training in Pune

Mounika said...

Very good brief and this post helped me alot. Say thank you I searching for your facts. Thanks for sharing with us!
AWS Training in chennai

AWS Training in bangalore

ragul ragul said...

I appreciate your efforts because it conveys the message of what you are trying to say. It's a great skill to make even the person who doesn't know about the subject could able to understand the subject . Your blogs are understandable and also elaborately described. I hope to read more and more interesting articles from your blog. All the best.
Blueprism training in annanagar

Blueprism training in velachery

Blueprism training in marathahalli


AWS Training in chennai

Unknown said...

I simply wanted to write down a quick word to say thanks to you for those wonderful tips and hints you are showing on this site.

Data Science Training in Chennai
Data science training in bangalore
Data science online training
Data science training in pune

simbu said...

I really enjoy simply reading all of your weblogs. Simply wanted to inform you that you have people like me who appreciate your work. Definitely a great post I would like to read this

java training in jayanagar | java training in electronic city

java training in chennai | java training in USA

Anoushka Sakthi said...

Your article increases the curiosity to learn more about this topic. Keep sharing your information regularly for future reference.



Selenium Training in Chennai
selenium Classes in chennai
ios developer course in chennai
ios classes in chennai
JAVA Training Institutes in Chennai
Java Courses in Chennai

Anbarasan14 said...

Thanks for sharing this useful information. Keep doing regularly.

Best TOEFL Coaching Institute in Tambaram
TOEFL Course in Tambaram East
TOEFL Centres in Pallavaram
TOEFL Centres in Shollinganallur
TOEFL Training at Padur
TOEFL Classes in OMR
TOEFL Classes in Navalur

priya rajesh said...

This is exceedingly helpful information, very good work. Thanks for sharing and let me wait for further updates.
Data Science Course in Chennai
Data Science Training in Chennai
DevOps certification in Chennai
DevOps Training in Chennai
AWS Training in Chennai
AWS course in Chennai
Data Science Training in Velachery
Data Science Training in Tambaram

priya said...

Impressive. Your story always bring hope and new energy. Keep up the good work.
Microsoft Azure online training
Selenium online training
Java online training
Java Script online training
Share Point online training

sasitamil said...

The site was so nice, I found out about a lot of great things. I like the way you make your blog posts. Keep up the good work and may you gain success in the long run.
devops online training

aws online training

data science with python online training

data science online training

rpa online training

Anonymous said...

redbox tv apk

whatsapp plus themes said...

sports whatsapp groups

parvina said...

Thanks for this article.You can visit my website:sky force reloaded game

Lily said...

I Love your article. You can visit my website : my ten minute email

dras said...

very nice post..
inplant training in chennai
inplant training in chennai
inplant training in chennai for it
Australia hosting
mexico web hosting
moldova web hosting
albania web hosting
andorra hosting
australia web hosting
denmark web hosting

shri said...

very good post...!
internship in chennai for ece students
internships in chennai for cse students 2019
Inplant training in chennai
internship for eee students
free internship in chennai
eee internship in chennai
internship for ece students in chennai
inplant training in bangalore for cse
inplant training in bangalore
ccna training in chennai


Anonymous said...

It is very helpfull for everyone.. thanks foe sharing this information Kalyx transcanding connections

imexpert said...

Great post i must say and thanks for the information. Education is definitely a sticky subject. However, is still among the leading topics of our time. I appreciate your post and look forward to more.

digital marketing courses mumbai

lionelmessi said...

Hi, Thanks for sharing nice articles...

Data Science Training In Hyderabad

Anebellyliza said...
This comment has been removed by the author.
nikhil reddy said...

Hi, Thanks for sharing wonderful articles...

AI Training In Hyderabad

nisha said...

Nice Blog. The Blog have a Creativity and the contents are useful every piece of information should be unique and neat concept.

Data Science Training Course In Chennai | Data Science Training Course In Anna Nagar | Data Science Training Course In OMR | Data Science Training Course In Porur | Data Science Training Course In Tambaram | Data Science Training Course In Velachery

lionelmessi said...

Thanks For Sharing The Information With Us.
Best AWS Course Training Institute in Hyderabad

aarthi said...

Thank you nabeel sharing the great resource.Keep updating us.
Java training in Chennai

Java training in Bangalore

Java training in Hyderabad

Java Training in Coimbatore

Java Online Training

devi said...

And indeed, I’m just always astounded concerning the remarkable things served by you. Some four facts on this page are undeniably the most effective I’ve had.Thanks for sharing this great article. It made me understand few things about this concept which I never knew before. Keep posting such great articles so that I gain from itData Science Training In Chennai

Data Science Online Training In Chennai

Data Science Training In Bangalore

Data Science Training In Hyderabad

Data Science Training In Coimbatore

Data Science Training

Data Science Online Training


jony blaze said...

This is a great inspiring article. I am pretty much pleased with your good work. You put really very helpful information.
Great post! Thanks for sharing this amazing post
Artificial Intelligence Training in Hyderabad
Artificial Intelligence Course in Hyderabad

Nawazz said...

Try This Amazing app Teach Your Monster to Read Apk

Nawazz said...

wow fantastic app you can try The Voice Official Apk

IICT Technologies said...

Nice blog post AWS Training

Charlie Oscar said...

Cloud computing

CLOUD LEARN MORE What is CLOUD Computing? Cloud computing Cloud computing is a general term for anything that involves delivering hosted services over the internet.

These services are divided into three main categories: infrastructure as a service (IaaS), platform as a service (PaaS) and software as a service (SaaS).A cloud…

Visit to- sunoltech.com for more details

Free CSEET Online Classes said...

There is a great announcement with a great offer only for you guys . We are here to tell you that our institution is offering CS executive classes and a free of cost CSEET classes. Hope you all wil enjoy it. So for availing this offer contact us or visit our website at https://uniqueacademyforcommerce.com/

kishor said...

nices information thanku so much this information
thanku so much
nices

APTRON Gurgaon said...


Cloud Computing Course in Gurgaon

Anonymous said...

Very informative article. But learning about cyber security is not that easy for a person who does not belong to this field but want to learn more about cyber security course. I also heard there is few online E-learning platform like Techourse.com that offers Cyber Security Course along with certifications.

Digital Trilesh Poojary said...

Thank you for sharing this information
Digital Marketing Courses in Mumbai

Digital Lokesha Patankar said...

Thanks for sharing such an informative blog!
Digital Marketing Courses in Surat

Digiuprise said...


Digi Uprise offers an excellent online course that can take three months to complete and will cover everything from marketing basics to the strategy of content. It's perfect for anyone looking to establish an foundation in Digital Marketing Course in Delhi and start getting an internship quickly. This takes a more mentor-led approach to learning full-stack digital marketing expertise by working on real-world projects. It is a good choice for those wanting to step up their learning an notch and get to know professionals in the industry on a monthly basis through regular video sessions. It's more practical rather than the standard video tutorials which could lead to greater confidence and more success.

SwarnApp said...

Thanks for sharing such an informative blog!
jewellery erp software
Jewellery erp software

SwarnApp said...

Thanks for sharing such an informative blog!
Jewellery ERP Software UAE
Jewellery ERP Software UAE