Wednesday, January 28, 2015

Private Security Companies more of a threat than Government Snooping

›
You may think that the Governments warrantless wiretapping and surveillance programs are troubling but private companies and operators are m...
Tuesday, January 27, 2015

NOTICE: Patch your Linux Servers

›
As you may have read in the media recently, a new zero-day security vulnerability for a common component in the Linux operating system has ...
Friday, January 23, 2015

ALERT: Whale Phishing Alert

›
The FBI and Internet Crime Complaint Center warns of a very profitable spam campaign that has already claimed more than 2,000 victims global...
Thursday, January 22, 2015

Drones Being Used to Smuggle Drugs Over the Border

›
It goes without saying that Drones provide a unique way to take photographs, explore hard to reach areas and in this case to smuggle drugs a...
Wednesday, January 21, 2015

ALERT: RSA Public Key has a backdoor

›
We are seeing indications that the RSA public key is compromised and has a backdoor. Several security researchers have confirmed through act...
Tuesday, January 20, 2015

ALERT: Barclay Card Service Phishing and Possible Customer Accounts Compromised

›
We are researching this information currently and are in the process of putting out a bulletin from our SOC. It is thought that the uptick i...
Sunday, January 18, 2015

So tired of seeing this Starbucks

›
Hey Starbucks are you just asking for a breach?  Not that I want to give criminals any ideas but Starbucks and Waffle House need to get thei...

Hackers for Hire Getting Publicity

›
I was quite surprised the NY Times published a recent article on "Hackers for Hire". The website in case you were curious is at ...
Friday, January 16, 2015

NEWS: NY Post Twitter Hacked

›
The New York Post on Friday said that one of its Twitter feeds focused on business news had been hacked, following a series of inaccurate ...

Upcoming Maintenance 1/17/2015 00:00-02:00

›
We will be performing maintenance on our feeds during the timeframe indicated. While we do not expect any outages we will not be able to pos...
Thursday, January 15, 2015

BREACH: Safeway Improper Disposal Cost Them $10 Million

›
Source: http://www.healthcareinfosecurity.com/hefty-fine-in-improper-disposal-case-a-7797

ThreatStream Picking Up our Feeds - Feeds Will Be Changing to Customer Only Certs Soon!

›
If your a ThreatStream customer and would like our indicators make sure you opt in the control panel. Check out our accuracy and you will se...
Wednesday, January 14, 2015

Hey Security Personnel - There's more to wireless than 802.11

›
I am amazed at how many of these breaches and attacks are taking place over WIFI and even more surprised at how many are taking place over o...
Tuesday, January 13, 2015

News Indicator Feeds, Service Plans and Security Appliance Package

›
SLC Security Services LLC has expanded our SOC offerings. We are offering 2 levels of service with our Intel feeds. The first is our bring y...
Monday, January 12, 2015

OUR OPINION: National Breach Notification Standard

›
We have been reading articles and watching interviews concerning a national breach notification standard and several people in our office an...
Sunday, January 11, 2015

WARNING:GoGo Inflight Internet Interception

›
We have been seeing reports of invalid SSL certificates, Malware infections and other problems with GoGo Inflight Internet service. In fact ...

INTEL: Paris suspect in terror plot update (TERROR SUSPECT Hayat Boumeddiene) via OSINT-X (UPDATED)

›
The remaining subject wanted in connection with the terror attacks is back in Syria. Information shows that the subject was able to move thr...
Friday, January 9, 2015

UPDATED: SA - Terrorist Security Alert France

›
FOR IMMEDIATE RELEASE A gun assault on the Paris offices of satirical magazine Charlie Hebdo Wednesday was the deadliest terrorist attack...
Thursday, January 8, 2015

ACO Congress is currently undergoing Maintenance. Check back soon.

›
A notice was posted to the ACO Congress that the site is currently down and undergoing maintenance. SLC Security Services LLC is NOT involve...

UPDATED WITH REFERENCES: Black Boxes being heavily utilized in ATM fraud attacks

›
We have several confirmed reports of recent arrest and the increase in the use of black box ATM machine hacks. There have been confirmed rep...
Wednesday, January 7, 2015

BREACH: www.acocongressportal.com

›
We have indications that this server was hacked earlier today. In addition to post showing up on popular sites for dumps we are also seeing ...

Pastebin Being Used to Launch Attacks

›
We are seeing code as well as commands being stored on pastebin with specific keywords and content strings used to launch denial of service ...

OSINT-X Service Impact

›
Due to the ongoing feed activity as a result of the terror attacks in Paris our OSINT-X system is under heavy load today. What this means fo...
Friday, January 2, 2015

Best Statement We Have Seen All Year

›
"Many companies are so focused on the perimeter that they have little idea what's going on inside the network."

BREACH UPDATE: Chick-Fil-A Inc

›
Popular fast-food chain Chick-Fil-A Inc. is investigating a payment card data breach affecting an unknown number of its U.S. locations, but...
Sunday, December 28, 2014

DISCLOSURE: Independence Blue Cross

›
Independence Blue Cross has indicated that a maintenance worker discarded 12,500 paper records in the normal trash in October.
Thursday, December 25, 2014

H.J. Russell & Company - Owned

›
This companies IP address block has shown up in OSINT-X as a compromised host. This organization has machines attacking many other companies...

Merry Christmas from the SLC Security Team...

›
We wish you all a safe and happy holiday season... We will see you all on the 2nd...
Tuesday, December 23, 2014

Hey where did the domain monitoring go?

›
We wanted to let you all know that we are no longer offering notification services on domains. In order to get this information you will be ...

First Citizens Bank and Covert Electronic Surveillance

›
We are seeing indications that this bank is under covert electronic surveillance. This could be auditors hired by the bank, bad actors looki...

2014 Historical Data to be released to Tableau Desktop or Public Users

›
As part of our technology share program SLC Security Services LLC will be releasing intelligence information formatted for users of Tableau ...

Covert Listening Threats even worse than recent hacking attempts

›
Over the past few weeks we have been researching data from various audits on the east coast. We are noting a large increase in the identific...

Copycat Hacks Becoming Commonplace

›
While Government experts have pointed the finger at North Korea in the recent attack of SONY. We are still not convinced. The reason we are ...
Friday, December 19, 2014

BREACH UPDATE: Staples admits to customers data being lost

›
Staples Inc. has come out with the following statement today. The number of cards affected 1.16 million. Staples Inc. (SPLS) , the larg...
Thursday, December 18, 2014

The Grinch?? Alert Logic's Claim's Not Adding Up

›
So as penetration testers we immediately took the information provided by Alert Logic in a recent notification concerning a vulnerability in...
Wednesday, December 17, 2014

WE AGREE: SONY did not get hacked by North Korea

›
Those of us in the security research arena are not buying the statement in mainstream news that SONY was hacked by North Korea. In fact ther...
Monday, December 15, 2014

Guess What?! Your owned... UPDATED 12/16/2014 1:37PM EST

›
On 15 December, 2014 SLC Security Services LLC kicked off an analytic job to determine what host are owned or have been compromised. The fol...

Another Round - Compromised Host

›
We will be publishing another round of compromised host later this evening at approx. 10PM EST. We are running a batch analytic job in Ana...

BREACH: NCUA Flash Drive Lost - Data being sold on Darknet

›
NCUA confirmed that an examiner lost an external flash drive containing names, addresses and social security number as well as the account n...

SONY Hack - What they are not telling you

›
It goes without saying that SONY is in deep trouble. We started seeing problems back in February of 2014 as several Sony related host had sh...
Sunday, December 14, 2014

UPDATE: UC Berkeley Acknowledge Breach

›
Previously we reported  on a list of college systems that were showing up in our OSINT system as being compromised. Earlier today we were no...

Wireless the Number 1 Vector

›
If your organization is running wireless we are advising you that this is the number one attack vector. It is recommended that you move to c...

EXCLUSIVE: The Top 10 Items Missed During an Audit (Article 3 of 10 in a series)

›
This is an exclusive provided by SLC Security Services LLC the leader in Medical, Compliance and DOD Auditing Solutions. Number 10 on the ...
Friday, December 12, 2014

BREACH: Las Vegas Sands Corp

›
Breached by Iranian hackers in response to a comment made by the CEO of the company. Attack bears similarities with SONY as information was ...

BREACH: St. Louis Parking Company

›
St Louis Parking Company has released a press release indicating that customers information may have been breached from 6 Oct 2014 - 31 Oct ...

BREACH: Kickback Jack's

›
We have confirmation that Kickback Jack's has been attacked. As of today the attack appears to be limited to just a few locations howeve...

List of Owned Colleges and Universities

›
Over a weeks worth of research and sensor data has indicated a very large amount of college and universities that are infected with malware ...
Thursday, December 11, 2014

Colleges Largely Already Owned by Hackers or Spreading Malware

›
During research on our analytic system this week he are noticing a bad trend concerning educational institutions. We started looking at coll...
Wednesday, December 10, 2014

NEWS: Hackers contacted top Sony executives before attack via OSINT-X Newswires

›
Top executives at Sony Pictures received an email extorting money three days before the company’s computer network was taken offline in a...
Tuesday, December 9, 2014

Data Security Excellence Note: Smithfield Johnston Memorial Hospital

›
During a recent walk through of Smithfield Johnston Memorial Hospital our staff noted that this hospital takes data security seriously. Ther...
Sunday, December 7, 2014

BREACH: WellCare informs Medicare subscribers of data breach via OSINT-X Newswires

›
Some personal information of a few dozen Monroe County residents who are Medicare subscribers with WellCare Health Plans recently was mish...

COMPROMISED HOST: General Mills

›
We previously reported on General Mills. As of today we are still seeing indications of an infection coming from their network. We believe t...

COMPROMISED HOST - University of Minnesota 128.101.165.206

›
We are starting to see reports of a compromised host out of the University of Minnesota. The IP address 128.101.165.206 looks to have been b...
Friday, December 5, 2014

EXCLUSIVE: The Top 10 Items Missed During an Audit (Article 2 of 10 in a series)

›
This is an exclusive provided by SLC Security Services LLC the leader in Medical, Compliance and DOD Auditing Solutions. Issue 9 - Inadeq...

Spotify Cell Phone Tracking

›
We wanted to alert you to a VERY interesting thing we noted today on a wireless penetration test. While conducting the test we started seein...
Tuesday, December 2, 2014

FRAUD ALERT: Domain's posing as Valve Corp (Russian)

›
UPDATE: We were contacted by the hosting provider Akamai and advised that the domain in the capture below is actually an imposter out of Ru...

Quotes and Comments - Your news our way

›
There is no malware involved, so an antivirus program has nothing to detect, Mandia said. To confirm it has been attacked, a company must ...

Why I love the big security companies! Here we go again Sony!!!

›
We keep reading these articles about very large corporate security giant's such as Mandiant and Fireeye and we sort of chuckle. These co...

Leveraging Big Data in your Enterprise

›
You cannot possibly view every single log file, every single login, every single password change, email, forum post, blog access, etc, etc. ...

BREACH: Highlands-Cashiers Hospital

›
" The hospital says a company hired to handle healthcare information, TruBridge, made a misconfiguration that put patients' names...
Monday, December 1, 2014

EXCLUSIVE: The Top 10 Items Missed During an Audit (Article 1 of 10 in a series)

›
This is an exclusive provided by SLC Security Services LLC the leader in Medical, Compliance and DOD Auditing Solutions. One of our client...
Sunday, November 30, 2014

62% of Medical Websites Vulnerable and could be hacked

›
A recent review of data from some recent botnet activity indicates that as many as 62% of known Medical or Medically related websites could ...
Thursday, November 27, 2014

CRITICAL ALERT: Hackers are just waiting on Cyber Monday...

›
SLC Security Services LLC is providing this alert in regards to the upcoming "Cyber Monday". We are seeing indicators that hackers...
Wednesday, November 26, 2014

SLC Staff are in the SOC... Monitoring the situation! ELEVATED PROTECTION LEVEL

›
Members of the security team at SLC Security are in the SOC. ALERT: Violent agitators, shots fired, looting, bricks & rocks being thro...

BREACH: Xerox and Texas Health and Human Services Commission Dispute Leads to Breach Notification via OSINT-X Newswires

›
An ongoing legal dispute between the Texas Health and Human Services Commission and its former contractor, Xerox, has led the state agency ...

Stolen Cards used on Charity Sites to Validate if they are Valid Cards

›
We have seen several reports today and yesterday of stolen cards being tested by carders on charity sites. If you operate a charity web site...
Monday, November 24, 2014

BREACH: City of Cleveland Police Website Hacked

›
Anonymous claims responsibility for the hacking of the Cleveland Police Website. A group of hackers claimed responsibility Monday for shut...
Thursday, November 20, 2014

General Mills has 3 Compromised Host

›
A company of this size should be able to manage their security infrastructure however 3 of their machines have showed up on our blacklist as...

GPS Tracker Vulnerability

›
During some research this week we tested several GPS trackers that offer bluetooth and we made an interesting discovery. All of the GPS trac...

1.5 Million Passwords Floated for Sale

›
SLC Security Services LLC has been made aware of a new password list being put up for sale on Darknet. The password file consist of major se...

EMAIL ISSUES: Texas A&M University-Kingsville

›
For the past few weeks, a phishing e-mail has had success in catching people’s information, causing it to circulate further throughout the ...

BOTNET Wall of Shame 11-20-2014

›
11-20-2014,50.193.61.78,Comcast Cable Communications Holdings, Inc 11-20-2014,54.68.211.27,Amazon Technologies Inc. 11-20-2014,67.222.114....
Monday, November 17, 2014

BOTNET Wall of Shame

›
11-17-2014,71.43.89.74,Time Warner Cable Internet LLC 11-17-2014,70.154.153.120,BellSouth.net Inc.
Sunday, November 16, 2014

SLC Security Services LLC OSINT system attacked by botnet

›
We want to send out personal thank you to the operators of this particular botnet for allowing us the opportunity to map out all the host th...

BREACH: U.S. State Department Hacked - Unclass Network Shut Down via OSINT-X Newswires

›
Unclassified Email Network Shut Down For Security Reasons The U.S. State Department has temporarily shut down its entire unclassified emai...
Friday, November 14, 2014

DHL the next to fall?

›
Remember when UPS stores started getting smacked? How there was a delay in information that we reported right here. Today we are making a pr...

NOTICE: Virginia Polytechnic Institute and State Univ

›
Although it has not been publicly disclosed we can tell you that we have data coming from this entity that is quite troubling. It looks like...

BOTNET Wall of Shame - This will be an ongoing feature of the blog

›
The following host were detected during our last review. These are the results out of the first 100 in the list. There are over 7600 in the ...
Thursday, November 13, 2014

Entity Portal Coming Soon...

›
Honestly we are very tired of telling companies that they are infected, hosting malware or owned. What we are about to start doing is just p...

Botnet List - PENDING

›
Later this week we will post a list of organizations that have been identified as having machines that are actively part of a larger botnet....

BREACH: Anthem Blue Cross Data Breach

›
This is not news to us but we are glad they finally disclosed it. Now if the other 2 Blue Cross locations would do the same we would feel li...

HACKING ACTIVITY: TSB Bank

›
Cyber-criminals are stealing signatures and personal details from hacked email accounts to try and dupe bank staff into releasing cash. T...
Wednesday, November 12, 2014

BREACH: HSBC Turkey Confirms Card Breach via OSINT-X Newswires

›
HSBC Turkey confirms that a recent cyber-attack exposed payment card information for 2.7 million customers. The bank is a subsidiary of...

Many companies infected and they don't even realize it

›
SLC Security Services has been performing analysis of malware infections as detected by Internet honeypots, threat data (From other vendors)...