credential replay attacks

23andMe: It’s YOUR Fault We Lost Your Data
Richi Jennings | | 23andMe, Compromised Credential, compromised credentials, compromised credentials monitoring, Credential Compromise, credential replay attacks, credential reuse, credential stuffing, credential stuffing attack, Credential Stuffing Attacks, DEVOPS, DevSecOps, DNA, GDPR, iam, password reuse, pii, PII Leakage, SB Blogwatch
Am I my brother's keeper? DNA testing firm doubles down on blaming victims and sics lawyer on them ...
Security Boulevard

23andMe Finally Admits: 6.9 MILLION Users’ PII Breached
Richi Jennings | | 23andMe, Compromised Credential, compromised credentials, compromised credentials monitoring, Credential Compromise, credential replay attacks, credential reuse, credential stuffing, credential stuffing attack, Credential Stuffing Attacks, DEVOPS, DevSecOps, DNA, GDPR, iam, password reuse, pii, PII Leakage, SB Blogwatch, SEC, Securities and Exchange Commission, Securities Exchange Commission (SEC), U.S. Securities and Exchange Commission
Not nice: Hacker claimed 20 million, 23andMe said it was only 14,000—but now admits to 6.9 million ...
Security Boulevard

Huge DNA PII Leak: 23andMe Must Share the Blame
Richi Jennings | | 23andMe, Compromised Credential, compromised credentials, compromised credentials monitoring, Credential Compromise, Credential Management and Enforcement for ICS/SCADA environments, credential replay attacks, credential reuse, credential stuffing, credential stuffing attack, Credential Stuffing Attacks, DEVOPS, DevSecOps, DNA, GDPR, iam, password reuse, pii, PII Leakage, SB Blogwatch
DNA: Do Not Agree. 23andMe says it’s not a breach—just credential stuffing. I’m not so sure ...
Security Boulevard

Sourcegraph’s Shocking Screwup: Private Secrets in Public Repo
Richi Jennings | | AI, authentication token, compromised credentials, credential replay attacks, large language models, Large Language Models (LLM), Large language models (LLMs), LLM, pii, PII Leakage, Run-time Secrets Protection, SB Blogwatch, secret, secret key, secret keys, secret management, secrets scanning, Sourcegraph
Credentials create crisis: AI source code navigation LLM leaks PII after DevOps SNAFU ...
Security Boulevard

NCR Barred Mint, QuickBooks from Banking Platform During Account Takeover Storm
BrianKrebs | | A Little Sunshine, credential replay attacks, Digital Insight, Intuit, Mint, NCR Corp, Quickbooks Online, The Coming Storm, Web Fraud 2.0
Banking industry giant NCR Corp. [NYSE: NCR] late last month took the unusual step of temporarily blocking third-party financial data aggregators Mint and QuicBooks Online from accessing Digital Insight, an online banking ...