HackDig : Dig high-quality web security articles

IRS Will Soon Require Selfies for Online Access

If you created an online account to manage your tax records with the U.S. Internal Revenue Service (IRS), those login credentials will cease to work later this year. The agency says that by the summer of 2022, the only way to log in to irs.gov will be through ID.me, an online identity verification service that requires applicants to submit copies of bills an
Publish At:2022-01-19 16:12 | Read:1595 | Comments:0 | Tags:A Little Sunshine Tax Refund Fraud Blake Hall Equifax id.me

FTC threatens “legal action” over unpatched Log4j and other vulns

byPaul DucklinThe Federal Trade Commission (FTC) is the US consumer rights body, and it has sailed into 2022 with a bang, not a whimper.Using the infamous Log4Shell vulnerability as what you might call its Exhibit A, the FTC has fired a shot across the bows of companies in US jurisdictions, telling them to get their patching in order, or face the consequence
Publish At:2022-01-05 15:00 | Read:1596 | Comments:0 | Tags:Data loss Law & order Privacy Vulnerability Equifax ftc Log4

Intuit to Share Payroll Data from 1.4M Small Businesses With Equifax

Financial services giant Intuit this week informed 1.4 million small businesses using its QuickBooks Online Payroll and Intuit Online Payroll products that their payroll information will be shared with big-three consumer credit bureau Equifax starting later this year unless customers opt out by the end of this month. Intuit says the change is tied to an R
Publish At:2021-07-01 16:00 | Read:1198 | Comments:0 | Tags:A Little Sunshine The Coming Storm Acquicent ADP Anthony Cit

Fintech Startup Offers $500 for Payroll Passwords

How much is your payroll data worth? Probably a lot more than you think. One financial startup that’s targeting the gig worker market is offering up to $500 to anyone willing to hand over the payroll account username and password given to them by their employer, plus a regular payment for each month afterwards in which those credentials still work. Thi
Publish At:2021-05-10 14:24 | Read:1598 | Comments:0 | Tags:A Little Sunshine Argyle argyle.com Bain Capital Billy Mards

Experian’s Credit Freeze Security is Still a Joke

In 2017, KrebsOnSecurity showed how easy it is for identity thieves to undo a consumer’s request to freeze their credit file at Experian, one of the big three consumer credit bureaus in the United States.  Last week, KrebsOnSecurity heard from a reader who had his freeze thawed without authorization through Experian’s website, and it reminded me
Publish At:2021-04-26 21:24 | Read:1497 | Comments:0 | Tags:A Little Sunshine Latest Warnings CreditLock Dune Thomas Equ

Why & Where You Should You Plant Your Flag

Several stories here have highlighted the importance of creating accounts online tied to your various identity, financial and communications services before identity thieves do it for you. This post examines some of the key places where everyone should plant their virtual flags. As KrebsOnSecurity observed back in 2018, many people — particularly olde
Publish At:2020-08-12 12:02 | Read:1722 | Comments:0 | Tags:Security Tools ChexSystems credit freeze Equifax Experian In

A week in security (February 10 – 16)

Last week on Malwarebytes Labs, we explained how to battle online coronavirus scams with facts, discussed the persistent re-infection techniques of Android/Trojan.xHelper and how to remove it, provided cyber tips for safe online dating, and showed how Hollywood teaches us misleading cybersecurity lessons. We also released the 2020 State of Malware Report
Publish At:2020-02-18 15:49 | Read:3583 | Comments:0 | Tags:A week in security accusoft CISO coronavirus Dell emotet Equ

Chinese Military personnel charged with hacking into credit reporting agency Equifax

The United States Department of Justice charged 4 Chinese military hackers with hacking into credit reporting agency Equifax. The United States Department of Justice officially charged 4 members of the China’s PLA’s 54th Research Institute, a division of the Chinese military, with hacking into credit reporting agency Equifax. The four members of
Publish At:2020-02-10 21:59 | Read:3137 | Comments:0 | Tags:Breaking News Cyber warfare Hacking Chinese PLA Cyberespiona

Stalkerware developer dealt new blow by FTC

Last week, the US Federal Trade Commission (FTC) interpreted its broad consumer protection mandate to file a first-of-its-kind enforcement action against the developer of three mobile stalkerware applications. The developer was banned from further selling the apps unless significant changes were made in design and functionality. The FTC’s required change
Publish At:2019-11-11 23:20 | Read:3376 | Comments:0 | Tags:Stalkerware Capital One consent agreement consent order data

Ayuda! (Help!) Equifax Has My Data!

Equifax last week disclosed a historic breach involving Social Security numbers and other sensitive data on as many as 143 million Americans. The company said the breach also impacted an undisclosed number of people in Canada and the United Kingdom. But the official list of victim countries may not yet be complete: According to information obtained by KrebsO
Publish At:2017-09-30 15:56 | Read:5955 | Comments:0 | Tags:Other alex holden Ayuda Equifax Hold Security LLC Jorge Sper

Experian Site Can Give Anyone Your Credit Freeze PIN

An alert reader recently pointed my attention to a free online service offered by big-three credit bureau Experian that allows anyone to request the personal identification number (PIN) needed to unlock a consumer credit file that was previously frozen at Experian. Experian’s page for retrieving someone’s credit freeze PIN requires little more in
Publish At:2017-09-30 15:56 | Read:7229 | Comments:0 | Tags:Other credit freeze Equifax Experian

Equifax or Equiphish?

More than a week after it said most people would be eligible to enroll in a free year of its TrustedID identity theft monitoring service, big three consumer credit bureau Equifax has begun sending out email notifications to people who were able to take the company up on its offer. But in yet another security stumble, the company appears to be training recipi
Publish At:2017-09-30 15:56 | Read:6440 | Comments:0 | Tags:Other credit lock credit monitoring Equifax equiphish Experi

Equifax data breach could impact 143 million US consumers

Equifax, one of the three major US consumer credit reporting agencies is the last victim of a data breach that may have affected upwards to 143 million Americans. According to a statement published by the Equifax, crooks exploited an unnamed U.S. website application vulnerability from mid-May to July to access sensitive data in its systems. “Equifax I
Publish At:2017-09-08 11:05 | Read:4214 | Comments:0 | Tags:Breaking News Cyber Crime Data Breach Cybercrime Equifax Equ

Fraudsters Exploited Lax Security at Equifax’s TALX Payroll Division

Identity thieves who specialize in tax refund fraud had big help this past tax year from Equifax, one of the nation’s largest consumer data brokers and credit bureaus. The trouble stems from TALX, an Equifax subsidiary that provides online payroll, HR and tax services. Equifax says crooks were able to reset the 4-digit PIN given to customer employees a
Publish At:2017-05-19 01:10 | Read:9185 | Comments:0 | Tags:Other avivah litan Equifax Gartner Inc. ICSI identity theft

Nearly Half of UK Users Concerned about Identity Fraud, Reveal Studies

Nothing says the holidays like spending time with friends and family. To celebrate this special time of year, many of us purchase gifts for our loved ones. Doing so can become quite expensive, especially if we have large social circles. For that reason, we go through the holidays looking for sales on items we think our dear ones will love.But don’t be
Publish At:2016-12-12 05:05 | Read:6666 | Comments:0 | Tags:Featured Articles Security Awareness Cifas Equifax identity

Announce

Share high-quality web security related articles with you:)
Tell me why you support me <3