Krebs on Security

March 9, 2016

eero: A Mesh WiFi Router Built for Security

This post was originally published on this site User-friendly and secure. Hardly anyone would pick either word to describe the vast majority of wireless routers in use today. So naturally I was intrigued a year ago when I had the chance to pre-order a eero, a new WiFi system billed as easy-to-use, designed with security in mind, and able to dramatically extend the range of a wireless network without compromising speed. Here’s a brief review of the eero system I received and installed a week ago. Three eero devices designed to create an extended range “mesh” wireless network without compromising […]
March 11, 2016

Hackers Target Anti-DDoS Firm Staminus

This post was originally published on this site Staminus Communications Inc., a California-based Internet hosting provider that specializes in protecting customers from massive “distributed denial of service” (DDoS) attacks aimed at knocking sites offline, has itself apparently been massively hacked. Staminus’s entire network was down for more than 20 hours until Thursday evening, leaving customers to vent their rage on the company’s Facebook and Twitter pages. In the midst of the outage, someone posted online download links for what appear to be Staminus’s customer credentials, support tickets, credit card numbers and other sensitive data. The e-zine posted online Thursday following an outage […]
March 14, 2016

From Stolen Wallet to ID Theft, Wrongful Arrest

This post was originally published on this site It’s remarkable how quickly a stolen purse or wallet can morph into full-blow identity theft, and possibly even result in the victim’s wrongful arrest. All of the above was visited recently on a fellow infosec professional whose admitted lapse in physical security lead to a mistaken early morning arrest in front of his kids. The guy police say stole Miller’s wallet and got him wrongfully arrested was himself apprehended earlier this month. On the morning of Feb. 20, Lance Miller was arrested in front of his two children by local sheriffs in Golden, […]
March 16, 2016

Thieves Phish Moneytree Employee Tax Data

This post was originally published on this site Payday lending firm Moneytree is the latest company to alert current and former employees that their tax data — including Social Security numbers, salary and address information — was accidentally handed over directly to scam artists. Seattle-based Moneytree sent an email to employees on March 4 stating that “one of our team members fell victim to a phishing scam and revealed payroll information to an external source.” “Moneytree was apparently targeted by a scam in which the scammer impersonated me and asked for an emailed copy of certain information about the Company’s […]