Jeremy Kirk

Managing Editor, Security and Technology, ISMG

Kirk is a veteran journalist who has reported from more than a dozen countries. Based in Sydney, he is Managing Editor for Security and Technology for Information Security Media Group. Prior to ISMG, he worked from London and Sydney covering computer security and privacy for International Data Group. Further back, he covered military affairs from Seoul, South Korea, and general assignment news for his hometown paper in Illinois.

Mitsubishi Electric Blames Anti-Virus Bug for Data Breach

Jeremy Kirk • January 21, 2020

Mitsubishi Electric says hackers exploited a zero-day vulnerability in its anti-virus software, prior to the vendor patching the flaw, and potentially stole trade secrets and employee data. The Japanese multinational firm announced the breach more than six months after detecting it in June 2019.

Aussie Bank Says Server Upgrade Led to Data Breach

Jeremy Kirk • January 17, 2020

P&N Bank in Perth, Australia, says a server upgrade gone wrong led to the breach of sensitive personal information in its customer relationship management system. The incident is another example how organizations can be imperilled by mistakes on the part of their suppliers.

Equifax Settles Mega-Breach Lawsuit for $1.38 Billion

Jeremy Kirk • January 15, 2020

A federal judge in Atlanta has given final approval to a settlement that resolves a class action lawsuit against credit bureau Equifax, which in 2017 suffered one of the largest data breaches in history. The minimum cost to Equifax will be $1.38 billion.

Baby's First Data Breach: App Exposes Baby Photos, Videos

Jeremy Kirk • January 14, 2020

A baby photo and video-sharing app called Peekaboo Moments is exposing sensitive logs through an exposed Elasticsearch database, a researcher has found. The data includes baby photos and videos, birthdates, location data and device information.

Severe Citrix Flaw: Proof-of-Concept Exploit Code Released

Jeremy Kirk • January 13, 2020

Proof-of-concept code has been released to exploit a severe Citrix vulnerability present in tens of thousands of enterprises. Citrix says it's developing permanent patches but that enterprises should use its mitigation guidance. In the meantime, attackers are hunting for vulnerable machines.

UK Fines Dixons Carphone for Massive Breach

Jeremy Kirk • January 10, 2020

British regulators have fined Dixons Carphone $653,000 for a breach that exposed millions of payment card details and personal data due to point-of-sale malware. The retailer's lack of security contributed to a "careless loss of data," the Information Commissioner's Office says.

TikTok App Had Major Security Vulnerabilities

Jeremy Kirk • January 9, 2020

The security company Check Point has revealed several vulnerabilities in TikTok, the popular Chinese video app that has raised concerns lately from the U.S. military and lawmakers. The issues are fixed, and TikTok says it doesn't appear the issues were exploited for a breach.

FBI Asks Apple for Access to Saudi Shooter's iPhones

Jeremy Kirk • January 8, 2020

The FBI has sent a letter to Apple asking for help in accessing encrypted data from two iPhones belonging to a deceased shooter. The bureau's move may be a prelude to another legal fight between the FBI and Apple over strong encryption.

US Government Website Defaced With Pro-Iran Message

Jeremy Kirk • January 6, 2020

The DHS says the defacement of a U.S. government website over the weekend is not linked to Iranian state-sponsored actors. Attackers posted a pro-Iran message with a photo of President Donald Trump being punched in the face. The website, belonging to the Federal Depository Library Program, is now offline.

Researcher Spots New Tricks in Web Payment Card Skimmers

Jeremy Kirk • January 3, 2020

E-commerce sites have been under siege from cybercriminals who seek to sneak malicious code into checkout processes. A researcher has now found two new methods that payment card number thieves are using to try to stay under the radar.

Report: Cloud Hopper Attacks Affected More MSPs

Jeremy Kirk • December 31, 2019

A persistent question over the past several years is which managed service providers were affected by APT10, a tenacious Chinese hacking group. But a Wall Street Journal investigation on Monday has revealed new companies affected by Cloud Hopper attacks.

How Can Credential Stuffing Be Thwarted?

Jeremy Kirk • December 31, 2019

Credential stuffing is a growing problem that's difficult to address, says Troy Hunt, creator of the Have I Been Pwned data breach notification service, who sizes up mitigation efforts.

Smart Home Device Maker Wyze Exposed Camera Database

Jeremy Kirk • December 30, 2019

Seattle-based smart home device maker Wyze says an error by a developer exposed a database to the internet over a three-week period earlier this month. The data included customer emails, nicknames of online cameras, WiFi SSIDs, device information and Alexa tokens.

New Orleans' Mission: Clean 4,000 Computers in 48 Hours

Jeremy Kirk • December 20, 2019

New Orleans is setting an aggressive pace to restore services after a ransomware attack crippled the city's IT systems: fixing more than 450 servers and 3,500 endpoints in just 48 hours. It's work that would normally take weeks to months, but the city plans to do it must faster.

Alleged Dark Overlord Member Extradited, Pleads Not Guilty

Jeremy Kirk • December 19, 2019

An alleged member of The Dark Overlord hacking group who apparently made dumbfounding operational security mistakes while trying to extort U.S. companies has pleaded not guilty. Nathan Wyatt is perhaps the only person associated with the notorious hacking group who left a clear digital trail.

«
1 (current)
2
3
4
…
49
»

«
1 (current)
2
3
4
…
49
»