New Blog Location
Please update your blog location to our new blog.Provided by SLC Security Services LLC 919-441-7353
View ArticleTrinity College host being used as C2 by credential stealing malware...
We notified Trinity College of the issue and have not gotten a response. Provided by SLC Security Services LLC 919-441-7353
View ArticleGrace Life Church Compromised
gracelifechurchct.com appears to be distributing malware and appears to have been compromised. Login to the Threat Intelligence portal for more information. Provided by SLC Security Services LLC...
View Articlechaffey.edu Breached
A database containing the personal contact information at chaffey.edu was reported today. It appears through our research that the information is legitimate.In addition to name, phone number the breach...
View ArticleWalmart Leaked Data Appearing Online
With the holiday season right around the corner we started noting post on forums with a list of usernames and passwords. We have begun notifying the end users of the leaked information to see if we can...
View Article2 Big Stories Next Week
We are currently reviewing 2 issues both of which are confirmed issues of PII and/or PHI data that we uncovered in the course of reading user submissions this week. Both involve some high profile...
View ArticleState of Virginia DHRM fails to respond to notification
On 1-7-2016 a researcher that assist Jigsaw Security noted some issues with documents posted on the DHRM website. A PDF posted by this organization contained information that was obfuscated by blocks...
View ArticleCredit Suisse accounts start appearing online
We started noticing credit-suisse accounts showing up online this evening. Our system that collects information on compromised accounts started alerting to accounts at the firm. It is not known if the...
View ArticleLarge Numbers of MIT Email accounts leaked
We have noted a large amount of MIT related email accounts showing up on Darknet forums and in leaks posted to Paste sites.The information posted includes 98 accounts and additional information. The...
View ArticleAmerican Museum of Natural History
Looks to us like information from this site has been pulled down by hackers. We are notifying the affected users... Provided by SLC Security Services LLC 919-441-7353
View ArticleCornell University looks the other way
As part of a new initiative to notify users of leaked credentials Jigsaw Security a member of SLC Security notified Cornell of a security issue. The response from Tom McMahon was...
View ArticleRussia gets the jump with DMA Locker
Over the course of the last few days we have been monitoring the malware known as DMA locker. It appears as though Russia is building some really good capabilities for infecting workstations with zero...
View ArticleUniversity of Berkely In Trouble AGAIN
Started seeing reports from the University of Berkeley again this evening. Specifically 169.229.3.91 which has been observed trying to run shellcode against a rash of servers the last 2 weeks. The...
View ArticleUPDATED: A look at Guardzilla - They have eyes even when you don't!
Look familiar? Well this device started showing up in all the big box retailers last year so we decided to give one a try. Hooking the device up to a EVDO hotspot on Verizon was interesting at best....
View ArticleDeep Diving xDedic Marketplace
First off I would like to thank SecureList for posting the full unredacted IP address information on the servers posted to Pastebin in their recent article. Upon seeing the file I decided to have our...
View ArticleRepresenative Wagner Pennsylvania - Just a quick note
So we started seeing some references to Representative Wagner in PA in dumps today. It was his username and obvious password. Tried to contact them and let them know and was greeted with...
View ArticleDNC Hacked Over a Year Ago
What they are not telling you in the news is that the DNC was hacked at least as early as December 2015. Looking back through our data we noted the DNC FTP server information was publicly known and was...
View ArticleWakeMed again in the HIPAA Hot Seat
While I previously have taken down a post at the request of WakeMed I felt that I had to report this one. As reported on WRAL:WRAL in North Carolina reports:A Cary law firm has filed a motion against...
View ArticleWe Told You So!
I just read a post on databreaches.net that talks about the issues at WakeMed. Remember this is not the first time they have popped up on this blog. We contacted them and received no response. If they...
View ArticleWhat are we tracking today?
Just a little over 20000 infected camera's, routers, Unix embedded operating systems.It's not looking good for the Interwebs at the moment. This list keeps growing and growing...Hopefully we don't see...
View ArticleMore Retail Breach Details
We are about to release some details on another retail breach. It seems it just keeps getting worse and worse. We are trying to contact these folks but if they don't respond we will just post the...
View ArticleIBM of Brazil Credential Exposure
Looking through the Jigsaw Analytics Platform (from Jigsaw Security) we noted today that there was an account being leaked at the br.ibm.com domain.As 2016 comes to a close we have decided that instead...
View ArticleBitcoin Leaded Data
Searching through our platform we are seeing bitcoin transactions including full credit card numbers. Here is a redacted list of what we are seeing. These appear to be foreign but still...
View ArticleMotorola being targeted by Hackers
Yes we know it's been awhile but we haven't been hiding, simply busy. While working through our daily routine today we noted that there are quite a lot of Motorola like domains being registered by...
View ArticleHuge Uptick in Russian Activity
Over the last two days we have observed a huge uptick in Russian activity.It appears as though we will be seeing more of this.And here is the most recent updateAs you can see things in the malware...
View Article
More Pages to Explore .....