Avast Blog_Security News : Mega breach, Ring dinged, and other security news

[jasonX]

Avast shares us their news roundup on data breaches etc. Below are excerpts from the Avast Security Team. Read on below.

"This week’s news roundup features a data breach of over 770 million accounts, security doorbell Ring under fire, new ransomware, and more"

The mother of all breaches
A cybersecurity researcher has stumbled upon the largest cache of stolen or leaked data ever found in one public list. The now-infamous Collection #1 consists of 773 million unique email addresses and 21 million unique unhashed passwords, which seem to have been aggregated from 2,000 leaked databases. The trove was 87 gigabytes large and filled with 12,000 files. The wealth of credentials in Collection #1 does not go beyond email addresses and passwords — no credit card info, social security numbers, or other personal data, fortunately. The data is most likely being used for phishing scams, blackmail, and automatic credential-stuffing attempts.

However, the astronomical numbers only get more astronomical. When news of Collection #1 broke, other cybersecurity researchers began investigating, including one who communicated with the owner of Collection #1 and learned that Collections #2-5 also exist, and then some! This discovery should serve as a wakeup call for users to refresh and/or upgrade all their passwords. The only way to make sure your life is not impacted by a data breach is to make sure the data breach has none of your current data.

Amazon Ring shares customer
Ring has caught on with homeowners everywhere, and the doorbell camera is a common sight on doorsteps across the country, which is why Amazon purchased the company for one billion dollars. But Ring has been criticized for poor security practices and potential abuse of sensitive customer information. Sources claim that Ring granted its Ukraine-based R&D team full access to every customer Ring video ever created. In addition, the source claims engineers and executives had access to certain customer live feeds, despite the fact that there was no reason for them to have this permission. A Ring spokesperson denies that access was ever granted, though several sources assert it was....

Mega breach, Ring dinged, and other security news
https://blog.avast.com/ring-criticized-f...deos-avast

Related News
wired.com_HACK BRIEF: AN ASTONISHING 773 MILLION RECORDS EXPOSED IN MONSTER BREACH
https://www.wired.com/story/collection-o...passwords/