Sunday, December 28, 2014

DISCLOSURE: Independence Blue Cross

›
Independence Blue Cross has indicated that a maintenance worker discarded 12,500 paper records in the normal trash in October.
Thursday, December 25, 2014

H.J. Russell & Company - Owned

›
This companies IP address block has shown up in OSINT-X as a compromised host. This organization has machines attacking many other companies...

Merry Christmas from the SLC Security Team...

›
We wish you all a safe and happy holiday season... We will see you all on the 2nd...
Tuesday, December 23, 2014

Hey where did the domain monitoring go?

›
We wanted to let you all know that we are no longer offering notification services on domains. In order to get this information you will be ...

First Citizens Bank and Covert Electronic Surveillance

›
We are seeing indications that this bank is under covert electronic surveillance. This could be auditors hired by the bank, bad actors looki...

2014 Historical Data to be released to Tableau Desktop or Public Users

›
As part of our technology share program SLC Security Services LLC will be releasing intelligence information formatted for users of Tableau ...

Covert Listening Threats even worse than recent hacking attempts

›
Over the past few weeks we have been researching data from various audits on the east coast. We are noting a large increase in the identific...

Copycat Hacks Becoming Commonplace

›
While Government experts have pointed the finger at North Korea in the recent attack of SONY. We are still not convinced. The reason we are ...
Friday, December 19, 2014

BREACH UPDATE: Staples admits to customers data being lost

›
Staples Inc. has come out with the following statement today. The number of cards affected 1.16 million. Staples Inc. (SPLS) , the larg...
Thursday, December 18, 2014

The Grinch?? Alert Logic's Claim's Not Adding Up

›
So as penetration testers we immediately took the information provided by Alert Logic in a recent notification concerning a vulnerability in...
Wednesday, December 17, 2014

WE AGREE: SONY did not get hacked by North Korea

›
Those of us in the security research arena are not buying the statement in mainstream news that SONY was hacked by North Korea. In fact ther...
Monday, December 15, 2014

Guess What?! Your owned... UPDATED 12/16/2014 1:37PM EST

›
On 15 December, 2014 SLC Security Services LLC kicked off an analytic job to determine what host are owned or have been compromised. The fol...

Another Round - Compromised Host

›
We will be publishing another round of compromised host later this evening at approx. 10PM EST. We are running a batch analytic job in Ana...

BREACH: NCUA Flash Drive Lost - Data being sold on Darknet

›
NCUA confirmed that an examiner lost an external flash drive containing names, addresses and social security number as well as the account n...

SONY Hack - What they are not telling you

›
It goes without saying that SONY is in deep trouble. We started seeing problems back in February of 2014 as several Sony related host had sh...
Sunday, December 14, 2014

UPDATE: UC Berkeley Acknowledge Breach

›
Previously we reported  on a list of college systems that were showing up in our OSINT system as being compromised. Earlier today we were no...

Wireless the Number 1 Vector

›
If your organization is running wireless we are advising you that this is the number one attack vector. It is recommended that you move to c...

EXCLUSIVE: The Top 10 Items Missed During an Audit (Article 3 of 10 in a series)

›
This is an exclusive provided by SLC Security Services LLC the leader in Medical, Compliance and DOD Auditing Solutions. Number 10 on the ...
Friday, December 12, 2014

BREACH: Las Vegas Sands Corp

›
Breached by Iranian hackers in response to a comment made by the CEO of the company. Attack bears similarities with SONY as information was ...

BREACH: St. Louis Parking Company

›
St Louis Parking Company has released a press release indicating that customers information may have been breached from 6 Oct 2014 - 31 Oct ...

BREACH: Kickback Jack's

›
We have confirmation that Kickback Jack's has been attacked. As of today the attack appears to be limited to just a few locations howeve...

List of Owned Colleges and Universities

›
Over a weeks worth of research and sensor data has indicated a very large amount of college and universities that are infected with malware ...
Thursday, December 11, 2014

Colleges Largely Already Owned by Hackers or Spreading Malware

›
During research on our analytic system this week he are noticing a bad trend concerning educational institutions. We started looking at coll...
Wednesday, December 10, 2014

NEWS: Hackers contacted top Sony executives before attack via OSINT-X Newswires

›
Top executives at Sony Pictures received an email extorting money three days before the company’s computer network was taken offline in a...
Tuesday, December 9, 2014

Data Security Excellence Note: Smithfield Johnston Memorial Hospital

›
During a recent walk through of Smithfield Johnston Memorial Hospital our staff noted that this hospital takes data security seriously. Ther...
Sunday, December 7, 2014

BREACH: WellCare informs Medicare subscribers of data breach via OSINT-X Newswires

›
Some personal information of a few dozen Monroe County residents who are Medicare subscribers with WellCare Health Plans recently was mish...

COMPROMISED HOST: General Mills

›
We previously reported on General Mills. As of today we are still seeing indications of an infection coming from their network. We believe t...

COMPROMISED HOST - University of Minnesota 128.101.165.206

›
We are starting to see reports of a compromised host out of the University of Minnesota. The IP address 128.101.165.206 looks to have been b...
Friday, December 5, 2014

EXCLUSIVE: The Top 10 Items Missed During an Audit (Article 2 of 10 in a series)

›
This is an exclusive provided by SLC Security Services LLC the leader in Medical, Compliance and DOD Auditing Solutions. Issue 9 - Inadeq...

Spotify Cell Phone Tracking

›
We wanted to alert you to a VERY interesting thing we noted today on a wireless penetration test. While conducting the test we started seein...
Tuesday, December 2, 2014

FRAUD ALERT: Domain's posing as Valve Corp (Russian)

›
UPDATE: We were contacted by the hosting provider Akamai and advised that the domain in the capture below is actually an imposter out of Ru...

Quotes and Comments - Your news our way

›
There is no malware involved, so an antivirus program has nothing to detect, Mandia said. To confirm it has been attacked, a company must ...

Why I love the big security companies! Here we go again Sony!!!

›
We keep reading these articles about very large corporate security giant's such as Mandiant and Fireeye and we sort of chuckle. These co...

Leveraging Big Data in your Enterprise

›
You cannot possibly view every single log file, every single login, every single password change, email, forum post, blog access, etc, etc. ...

BREACH: Highlands-Cashiers Hospital

›
" The hospital says a company hired to handle healthcare information, TruBridge, made a misconfiguration that put patients' names...
Monday, December 1, 2014

EXCLUSIVE: The Top 10 Items Missed During an Audit (Article 1 of 10 in a series)

›
This is an exclusive provided by SLC Security Services LLC the leader in Medical, Compliance and DOD Auditing Solutions. One of our client...
Sunday, November 30, 2014

62% of Medical Websites Vulnerable and could be hacked

›
A recent review of data from some recent botnet activity indicates that as many as 62% of known Medical or Medically related websites could ...
Thursday, November 27, 2014

CRITICAL ALERT: Hackers are just waiting on Cyber Monday...

›
SLC Security Services LLC is providing this alert in regards to the upcoming "Cyber Monday". We are seeing indicators that hackers...
Wednesday, November 26, 2014

SLC Staff are in the SOC... Monitoring the situation! ELEVATED PROTECTION LEVEL

›
Members of the security team at SLC Security are in the SOC. ALERT: Violent agitators, shots fired, looting, bricks & rocks being thro...

BREACH: Xerox and Texas Health and Human Services Commission Dispute Leads to Breach Notification via OSINT-X Newswires

›
An ongoing legal dispute between the Texas Health and Human Services Commission and its former contractor, Xerox, has led the state agency ...

Stolen Cards used on Charity Sites to Validate if they are Valid Cards

›
We have seen several reports today and yesterday of stolen cards being tested by carders on charity sites. If you operate a charity web site...
Monday, November 24, 2014

BREACH: City of Cleveland Police Website Hacked

›
Anonymous claims responsibility for the hacking of the Cleveland Police Website. A group of hackers claimed responsibility Monday for shut...
Thursday, November 20, 2014

General Mills has 3 Compromised Host

›
A company of this size should be able to manage their security infrastructure however 3 of their machines have showed up on our blacklist as...

GPS Tracker Vulnerability

›
During some research this week we tested several GPS trackers that offer bluetooth and we made an interesting discovery. All of the GPS trac...

1.5 Million Passwords Floated for Sale

›
SLC Security Services LLC has been made aware of a new password list being put up for sale on Darknet. The password file consist of major se...

EMAIL ISSUES: Texas A&M University-Kingsville

›
For the past few weeks, a phishing e-mail has had success in catching people’s information, causing it to circulate further throughout the ...

BOTNET Wall of Shame 11-20-2014

›
11-20-2014,50.193.61.78,Comcast Cable Communications Holdings, Inc 11-20-2014,54.68.211.27,Amazon Technologies Inc. 11-20-2014,67.222.114....
Monday, November 17, 2014

BOTNET Wall of Shame

›
11-17-2014,71.43.89.74,Time Warner Cable Internet LLC 11-17-2014,70.154.153.120,BellSouth.net Inc.
Sunday, November 16, 2014

SLC Security Services LLC OSINT system attacked by botnet

›
We want to send out personal thank you to the operators of this particular botnet for allowing us the opportunity to map out all the host th...

BREACH: U.S. State Department Hacked - Unclass Network Shut Down via OSINT-X Newswires

›
Unclassified Email Network Shut Down For Security Reasons The U.S. State Department has temporarily shut down its entire unclassified emai...
Friday, November 14, 2014

DHL the next to fall?

›
Remember when UPS stores started getting smacked? How there was a delay in information that we reported right here. Today we are making a pr...

NOTICE: Virginia Polytechnic Institute and State Univ

›
Although it has not been publicly disclosed we can tell you that we have data coming from this entity that is quite troubling. It looks like...

BOTNET Wall of Shame - This will be an ongoing feature of the blog

›
The following host were detected during our last review. These are the results out of the first 100 in the list. There are over 7600 in the ...
Thursday, November 13, 2014

Entity Portal Coming Soon...

›
Honestly we are very tired of telling companies that they are infected, hosting malware or owned. What we are about to start doing is just p...

Botnet List - PENDING

›
Later this week we will post a list of organizations that have been identified as having machines that are actively part of a larger botnet....

BREACH: Anthem Blue Cross Data Breach

›
This is not news to us but we are glad they finally disclosed it. Now if the other 2 Blue Cross locations would do the same we would feel li...

HACKING ACTIVITY: TSB Bank

›
Cyber-criminals are stealing signatures and personal details from hacked email accounts to try and dupe bank staff into releasing cash. T...
Wednesday, November 12, 2014

BREACH: HSBC Turkey Confirms Card Breach via OSINT-X Newswires

›
HSBC Turkey confirms that a recent cyber-attack exposed payment card information for 2.7 million customers. The bank is a subsidiary of...

Many companies infected and they don't even realize it

›
SLC Security Services has been performing analysis of malware infections as detected by Internet honeypots, threat data (From other vendors)...

BREACH: US weather systems hacked by Chinese: Report via OSINT-X Newswires

›
The Washington Post is saying China hackers have breached a U.S. weather network, with CNBC's Eamon Javers. ...

BREACH: City and Industrial Development Corporation's (CIDCO)

›
The personal records of about 85,000 applicants to the City and Industrial Development Corporation's (CIDCO) housing scheme have inadv...

BREACH: Eastern Iowa Airport

›
The Eastern Iowa Airport recently learned of a security incident involving credit and debit card data collected at the Airport Parking Fac...

BREACH: USPS (Updated 11-11-2014 4:22PM EST)

›
USPS is reporting that employee data and now customer data, has been compromised.  Major news articles started reporting on the issue ea...
Tuesday, November 11, 2014

It's Quiet... You should be worried

›
We are seeing some indicators of some serious malware distribution today. We are starting to see compromised servers popping up all over the...
Monday, November 10, 2014

Applebee's Quietly Disabling Wifi Payment System?

›
Just this week we were advised that 2 of our local Applebee's no longer allowed customers to pay via the tableside tablet system that ha...

BREACH: Grand Casino Mille Lacs via OSINT-X Newswires (WCCO)

›
Update 11-11-2014 @ 10:00AM ET: Grand Casino Mille Lacs has posted a website notice and has a toll-free phone number - 866-328-1987 - for ...

Don't change your IP camera passwords, end up an Internet star

›
A website finds and displays web camera's that have not had the default passwords changed. Hosted out of Russia... Who knew? http://w...
Sunday, November 9, 2014

BREACH: Wyoming State Library

›
The Wyoming State Library said its statewide online catalog was breached last month by unknown hackers, but no sensitive personal data was...
Friday, November 7, 2014

BREACH: Idaho Supreme Court (Website Defacement)

›
State officials learned at about 12:15 p.m. Thursday that the website hosting court opinions, jury information and other resources for Idaho...

NEWS: FBI Seized Darknet Sites

›
List of Darknet sites that were seized or taken offline. Silkroad 2.0 Agora Alpaca Blackmarket BlueSky Cloud Nine Hydra OnionShop ...

Microsoft has 16 Patches in the Queue for Next Week

›
All you Micro$oft users be aware a large update is coming next week. Corporate customers can expect the patches Sunday evening or Monday and...
Thursday, November 6, 2014

Quotes and Comments - Your news our way

›
Protecting the Perimeter From the Cloud - Why not fight fire with fire? Why Ebola Makes HIPAA Training Urgent - We thought HIPAA traini...

Quotes and Comments - Your news our way

›
NSA Director Says Agency Shares Vast Majority of Bugs it Finds: Yeah they share them 10 years after they find them and exploit them. They s...

Leveraging Hadoop for Security Analysis in Networks

›
I have been trying to stay active on the blog but as you all can tell we have become somewhat busy over the past few weeks. This is to be ex...
Wednesday, November 5, 2014

The Latest Hacking Craze - Old Attacks - New Technology

›
SLC Security provides an SDR course for beginners. What is an SDR you ask? SDR stands for "software defined radio". No longer is i...

Over 1000 Backoff Malware Infected Machines in the US, 2500 in Europe

›
Researchers at SLC Security Services LLC have been able to identify over 3500 positive infections utilizing 3 variants of the Backoff malwar...