InfoSec News Nuggets 12/12/2024

Top Mexican fintech firm leaks details on 1.6 million customers A Mexican fintech startup has been found holding a large database full of sensitive customer data wide open on the internet, available for anyone who knows where to look. Security researchers from Cybernews found the database in early September 2024 after a routine investigation of publicly available indexes. The database, belonging to a company called Kapital, contained sensitive data on 1.6 million Mexicans, including voter IDs and…
Read More

InfoSec News Nuggets 5/13/2024

Malicious Android Apps Pose as Google, Instagram, WhatsApp to Steal Credentials  Malicious Android apps masquerading as Google, Instagram, Snapchat, WhatsApp, and X (formerly Twitter) have been observed to steal users' credentials from compromised devices. "This malware uses famous Android app icons to mislead users and trick victims into installing the malicious app on their devices," the SonicWall Capture Labs threat research team said in a recent report. The distribution vector for the campaign is currently unclear. However,…
Read More

InfoSec News Nuggets 12/02/2019

1 - Top Senate Democrats unveil new online privacy bill, promising tough penalties for data abuse Senate Democrats on Tuesday proposed tough new punishments for Facebook, Google and other Silicon Valley tech giants that mishandle their users’ personal data, unveiling a sweeping new online privacy bill that aims to provide people their “Miranda rights” for the digital age. The effort, led by Sen. Maria Cantwell, a Washington state Democrat who previously worked in the tech…
Read More