fosec

@fosec@infosec.exchange
3 Followers
107 Following
90 Posts
Blue team, Midwest

Coinbase confirmed that over 69,000 customers had personal and financial information stolen in its recent data breach.

https://techcrunch.com/2025/05/21/coinbase-says-its-data-breach-affects-at-least-69000-customers/

Coinbase says its data breach affects at least 69,000 customers | TechCrunch

The crypto giant said the unauthorized access to customer data dates back to late December 2024.

TechCrunch
Under Trump, the FDA may no longer approve seasonal COVID shots
FDA was supposed to decide on Novavax vaccine by April 1, but it now wants more data.
https://arstechnica.com/health/2025/04/under-trump-the-fda-may-no-longer-approve-seasonal-covid-shots/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social
Seasonal COVID shots may no longer be possible under Trump admin

FDA was supposed to decide on Novavax vaccine by April 1, but it now wants more data.

Ars Technica

With weeks to go before the bill expires at the end of Congress, this is the last chance for U.S. senators to vote on the PRESS Act, a bipartisan federal "shield" law that protects journalists from giving up their sources, and more.

It's the bill that the House *unanimously* passed in January, but yet it's been collecting dust in the Senate for a vote ever since.

More: https://techcrunch.com/2024/11/10/its-the-senates-last-chance-to-pass-the-press-act/

It's the Senate's last chance to pass the PRESS Act | TechCrunch

The PRESS Act would protect a journalist's sources, and gained unanimous bipartisan support when passed by the House in January.

TechCrunch

“4 cities across the US are seeking more than $700,000 from #Trump's campaign team as reimbursement for rallies they helped stage between 2016 and 2019, according to a Newsweek investigation.

The cities—El Paso, Texas; Spokane, Washington; Mesa, Arizona; and Green Bay, Wisconsin—all said they had outstanding invoices with Trump's team.”
https://www.newsweek.com/unpaid-debts-are-catching-donald-trump-campaign-trail-1950283

Unpaid debts follow Donald Trump on campaign trail

Four cities have requested more than $700,000 from Trump's campaign to pay for events they helped organize between 2016 and 2019.

Newsweek

Looks like Azure is on the struggle bus right now. 😕

Can't push to DevOps, some SQL Servers are inaccessible, Portal won't load. Anyone else? #azure

(We're in the US)

Breaking: AT&T has reset millions of customer account passcodes after a huge cache of data containing AT&T customer records was dumped online earlier this month, TechCrunch has exclusively learned.

A security researcher who analyzed the leaked data told TechCrunch that the encrypted account passcodes are easy to decipher. TechCrunch held the publication of this story until AT&T could reset customer account passcodes.

More: https://techcrunch.com/2024/03/30/att-reset-account-passcodes-customer-data/

AT&T resets account passcodes after millions of customer records leak online | TechCrunch

Security researcher told TechCrunch that leaked AT&T customer data contained encrypted account passcodes that can be easily unscrambled.

TechCrunch

I was doing some micro-benchmarking at the time, needed to quiesce the system to reduce noise. Saw sshd processes were using a surprising amount of CPU, despite immediately failing because of wrong usernames etc. Profiled sshd, showing lots of cpu time in liblzma, with perf unable to attribute it to a symbol. Got suspicious. Recalled that I had seen an odd valgrind complaint in automated testing of postgres, a few weeks earlier, after package updates.

Really required a lot of coincidences.

The FBI's Operation 'Duck Hunt' tricked thousands of Qakbot-infected computers into downloading an FBI-made uninstaller.

Here's how the operation went down.

By me and @carlypage: https://techcrunch.com/2023/09/01/fbi-qakbot-takedown-operation-duck-hunt/

TechCrunch is part of the Yahoo family of brands

This is such a good but frustrating story:

Data brokers raise privacy concerns — but still get millions from the U.S. government.

Why? Because if you sign up for healthcare, or try to log in to pay your taxes, or access your Social Security benefits, you need... a credit card. Yep, that's how the U.S. government authenticates who you are.... by checking your records against a credit agency.

@alng explains this dumbassery extremely well.

https://www.politico.com/news/2022/12/21/data-brokers-privacy-federal-government-00072600

Data brokers raise privacy concerns — but get millions from the federal government

How an old privacy law and new security demands force Washington to rely on an industry in the crosshairs.

POLITICO