Tuesday, March 31, 2015

Cedar APT IOC's Added

›
Cedar APT IOC's Added to the commercial feed. A total of 6 IOC's related to Cedar have been updated.
Sunday, March 29, 2015

BREACH: Advantage Dental

›
Advantage Dental ("Advantage"), an Oregon-based dental services provider notified 151,626 patients of a breach of personal patien...
Friday, March 27, 2015

BREACH: Startup Slack Reports Data Breach

›
Looks like they have implemented 2 factor authentication.  http://www.usatoday.com/story/tech/2015/03/27/slack-data-breach/70545436/
Thursday, March 26, 2015

Under Attack - This Pattern Looks Familiar

›
Just like in previous disclosures that we have provided information within a few hours we end up coming under attack and just like the last ...

UPDATED WITH INDICATORS AND NOTES: Large BOTNET exposed

›
SLC Security Services LLC has discovered a previously unknown BOTNET network. We will be adding the indicators to our paid feeds. We had pre...

UPDATED 3-25-2014: Third US Health Entity Suspected of being Compromised

›
While we can't name any particular names at this time we have started seeing indicators of another related attack originating out of Chi...

Apple Credential Phishing Attempts - As reported by MalwareBytes

›
We have been seeing many reports of Apple phishing schemes to include over 100 pages hosted at ovh.net. The scheme starts by emailing users ...
Wednesday, March 25, 2015

Following the News - Intelligence Agency's Lacking Actionable Data

›
It goes without saying that the number of terrorist events over the past 2 weeks is quite alarming and as of the last 2 months the activity ...

NC REN - North Carolina Research and Eduation Network - Public Proxy

›
Why on earth would NC REN be running a publicly accessible proxy server on their networks? This would definitely indicate either a misconfig...
Monday, March 23, 2015

BREACH: Berkeley Get's Whacked

›
Our OSINT monitoring is showing that a server at Berkeley has been compromised. Currently the site is reporting to be on IP 181.224.147.237 ...
Friday, March 13, 2015

William Farrell CPA - Cary NC

›
CPA leaks payroll information. Interesting thing happened today while we were reviewing faxes received by our company. We started receiving ...

Highmark - Related to Anthem Attack

›
More than 51,000 current Highmark health insurance customers in Pennsylvania will receive letters this week notifying them that their pers...
Thursday, March 12, 2015

NOTICE: Phone System Outage

›
SLC Security will be performing upgrades to our internal telephone system on 13 March between 12:00AM and 4:00AM (CDT). During this event al...
Monday, March 2, 2015

Wow you don't say...

›
Previously we have reported as has DataBreaches.net on University of Chicago. I saw today where they have indicated that they have been bre...
Sunday, March 1, 2015

Health Care Audits are a Joke

›
It goes without saying that the Government even with their many billions of dollars on security have failed to stop the ex-filtration of hig...

Despite our Warnings - Wake Health

›
Despite our previous warnings we are now seeing indications that Wake Health is being specifically targeted by external actors. While we hav...
Sunday, February 22, 2015

Theory: Utilizing Porn Sites to Infect and Gain Access - Gov Connection or Bad Guys?

›
Over the course of the last few days we have been seeing a ton of traffic being exfiltrated to 101 Ave of the America's, 10th Floor (reg...
Saturday, February 21, 2015

Defacement: We noted that cctec.cornell.edu was defaced

›
Our OSINT-X noted that cctec.cornell.edu was defaced by AnonSec. I'm sure this is only the begining. We have been reporting on many of t...
Thursday, February 19, 2015

Wall of Shame

›
Here's some of the latest traffic we are seeing today: US Traffic 1. Boston University - Compromised System (Infiltrated Blacklist) ...
Wednesday, February 18, 2015

Dyre and Upatre Evolving - Emerging Threats gets it right

›
We were just reading a report from Emerging Threats concerning the development and frequent changes and variations to these malware products...
Tuesday, February 17, 2015

Spina & Lavelle Attorneys Trying to Penetrate our Infrastructure

›
Either these attorneys are owned or they are probing for information. Just letting you know we see you. Have a great day!
Monday, February 16, 2015

Traffic drops on our sensors

›
Last night our security engineers noted some very interesting things happening with our sensors. After midnight some coordinated attacks tha...

Hackers Steal Up To $1 Billion From Banks

›
Now that's a headline that will just reach out and grab your attention. The obvious question here is why did they do it and secondly wha...
Wednesday, February 11, 2015

Memex Toolset Released...

›
DARPA has publicly presented for the first time a new set of search tools called Memex which will improve also researches into the “Deep W...

Obama Launches Cyberthreat Intel-Sharing Center

›
Long-awaited central repository for cyber threat information and intelligence created by The White House. The concept of a federal govern...

IMPORTANT NOTICE CONCERNING FEEDS

›
FOR IMMEDIATE RELEASE Starting on 1 March 2015 SLC Security Services LLC will be moving our public indicator feeds to a paid subscription ...
Tuesday, February 10, 2015

Wall of Shame

›
Here's some of the latest traffic we are seeing today: US Traffic 1. New York University -Malicious Activity 2. Princeton University...

NEWS ROUNDUP 2/10/2015

›
Twitter Request from the NSA top 1.9 Million Account Request UPI posted a story today on the 190 million users on twitter stating that the...

Delay in actionable intelligence creating additional risk, additional malware seen

›
With the recent Anthem incident it goes without saying that organizations need to share information to protect other entities from similar a...
Monday, February 9, 2015

NEWS ROUNDUP 2/9/2015

›
Hard to Tackle Malware being used in University Breaches: Many security professionals including our company have been warning Universities ...

FBI Online Agent Screenlocker

›
We have been seeing a ton of screen lockers lately. Just today one of our customer calls and states that they believe the FBI has locked out...

Interesting Routing Anamalies on the Internet

›
We are currently researching some really interesting routing anomalies on the Internet. It seems that not only is the Great Firewall of Chin...
Friday, February 6, 2015

Connecting the Dots... One breach at a time...

›
Take our big data analytics training and learn how to make sense of data in your enterprise. Learn how to connect the dots, build out your o...

Collaboration in the Works

›
We wanted to let the readers know that we are working on a collaboration with several security providers to provide our intelligence prod...

NEWS ROUNDUP 2/6/2015

›
Frederick High School and West Frederick Middle School in Maryland were closed February 5 following a February 4 shooting outside the high s...

May just wanna disable flash until this situation becomes stable... Wait it's flash... Ugggghh

›
For the third time in two weeks, Adobe has issued an emergency security update for its Flash Player software to fix a dangerous zero-day v...

IOC's for Digestion

›
Traffic to or from: 196.203.89.134 194.105.9.85  
Thursday, February 5, 2015

Our Information on Anthem - Q&A

›
See our official post here .

How we monitor for problems and detect issues before the attack...

›
Utilizing our cloud based computing platform we are able to see attack information as it happens in real time. We are able to monitor Dark N...
Wednesday, February 4, 2015

BREACH: Anthem breach is the mother of all Healthcare Data Breaches!

›
We knew ahead of time but waited until the CEO of Anthem made a public statement. The Anthem breach will prove to be one of the biggest brea...

BREACH: capdm.ca Breached - Updated

›
See http://pastebin.com/9Lu68fMi to see if your account is compromised. 2/3/2015: Reached out to the organization to get additional detail...

Krebs Post about Physical Attack

›
Yeah hackers are changing their tactics. Like I said last week while everybody is concentrating on the network hackers are actively using ha...

ATTACKER: The Preston Law Firm of Houston Texas

›
Hey guys you may want to check out your systems because we have been seeing attacks from you all day. As some of you know that fact that we ...

Pay Attention on Friday

›
I bet something big hits at the end of the day on Friday!

ATTACKS: Harvard, MIT and Others

›
We have noted an uptick in the number of brute force and email probes from MIT and Harvard. In addition we have noted that Boston University...

DISCLOSURE: UMass Memorial Medical Group

›
The UMass Memorial Medical Group is working with law-enforcement personnel after it learned a former employee allegedly accessed private ...
Tuesday, February 3, 2015

D-Link Router Vulnerability - CONFIRMED

›
D-Link’s popular DSL2740R wireless router is vulnerable to domain name system (DNS) hijacking exploits that requiring no authentication to ...

BREACHED: Texas A&M University

›
Seeing indicators that this entity has been breached for over a month and does not realize it. It appears as though their infrastructure is ...
Monday, February 2, 2015

Hardware Hacking and Physical Attacks Largely Being Ignored

›
One of the recurring issues that we are seeing on audits are the lack of knowledge on physical attacks to infrastructure. Most of the compan...

University of Chicago Still Leaking Information and Vulnerable

›
During a recent review of some incidents being covered by databreaches.net I was able to do some additional research and confirm that even a...
Sunday, February 1, 2015

TECHNOLOGY WATCH: British Government to Receive US Company Technologies

›
The British government has selected Northrop Grumman to provide it with engineering, development and other cyber-security solutions service...

Malware: tinba is gonna be the end of Suntrust, Regions Bank and a few others... wait for it! (Dyre Banking Trojan) - Updated

›
If your monitoring infections and malware traffic it goes without saying that banking targets are high on the priority watch list. I'm m...
Wednesday, January 28, 2015

Private Security Companies more of a threat than Government Snooping

›
You may think that the Governments warrantless wiretapping and surveillance programs are troubling but private companies and operators are m...
Tuesday, January 27, 2015

NOTICE: Patch your Linux Servers

›
As you may have read in the media recently, a new zero-day security vulnerability for a common component in the Linux operating system has ...
Friday, January 23, 2015

ALERT: Whale Phishing Alert

›
The FBI and Internet Crime Complaint Center warns of a very profitable spam campaign that has already claimed more than 2,000 victims global...
Thursday, January 22, 2015

Drones Being Used to Smuggle Drugs Over the Border

›
It goes without saying that Drones provide a unique way to take photographs, explore hard to reach areas and in this case to smuggle drugs a...
Wednesday, January 21, 2015

ALERT: RSA Public Key has a backdoor

›
We are seeing indications that the RSA public key is compromised and has a backdoor. Several security researchers have confirmed through act...
Tuesday, January 20, 2015

ALERT: Barclay Card Service Phishing and Possible Customer Accounts Compromised

›
We are researching this information currently and are in the process of putting out a bulletin from our SOC. It is thought that the uptick i...
Sunday, January 18, 2015

So tired of seeing this Starbucks

›
Hey Starbucks are you just asking for a breach?  Not that I want to give criminals any ideas but Starbucks and Waffle House need to get thei...

Hackers for Hire Getting Publicity

›
I was quite surprised the NY Times published a recent article on "Hackers for Hire". The website in case you were curious is at ...
Friday, January 16, 2015

NEWS: NY Post Twitter Hacked

›
The New York Post on Friday said that one of its Twitter feeds focused on business news had been hacked, following a series of inaccurate ...

Upcoming Maintenance 1/17/2015 00:00-02:00

›
We will be performing maintenance on our feeds during the timeframe indicated. While we do not expect any outages we will not be able to pos...
Thursday, January 15, 2015

BREACH: Safeway Improper Disposal Cost Them $10 Million

›
Source: http://www.healthcareinfosecurity.com/hefty-fine-in-improper-disposal-case-a-7797

ThreatStream Picking Up our Feeds - Feeds Will Be Changing to Customer Only Certs Soon!

›
If your a ThreatStream customer and would like our indicators make sure you opt in the control panel. Check out our accuracy and you will se...
Wednesday, January 14, 2015

Hey Security Personnel - There's more to wireless than 802.11

›
I am amazed at how many of these breaches and attacks are taking place over WIFI and even more surprised at how many are taking place over o...
Tuesday, January 13, 2015

News Indicator Feeds, Service Plans and Security Appliance Package

›
SLC Security Services LLC has expanded our SOC offerings. We are offering 2 levels of service with our Intel feeds. The first is our bring y...
Monday, January 12, 2015

OUR OPINION: National Breach Notification Standard

›
We have been reading articles and watching interviews concerning a national breach notification standard and several people in our office an...
Sunday, January 11, 2015

WARNING:GoGo Inflight Internet Interception

›
We have been seeing reports of invalid SSL certificates, Malware infections and other problems with GoGo Inflight Internet service. In fact ...

INTEL: Paris suspect in terror plot update (TERROR SUSPECT Hayat Boumeddiene) via OSINT-X (UPDATED)

›
The remaining subject wanted in connection with the terror attacks is back in Syria. Information shows that the subject was able to move thr...
Friday, January 9, 2015

UPDATED: SA - Terrorist Security Alert France

›
FOR IMMEDIATE RELEASE A gun assault on the Paris offices of satirical magazine Charlie Hebdo Wednesday was the deadliest terrorist attack...
Thursday, January 8, 2015

ACO Congress is currently undergoing Maintenance. Check back soon.

›
A notice was posted to the ACO Congress that the site is currently down and undergoing maintenance. SLC Security Services LLC is NOT involve...

UPDATED WITH REFERENCES: Black Boxes being heavily utilized in ATM fraud attacks

›
We have several confirmed reports of recent arrest and the increase in the use of black box ATM machine hacks. There have been confirmed rep...
Wednesday, January 7, 2015

BREACH: www.acocongressportal.com

›
We have indications that this server was hacked earlier today. In addition to post showing up on popular sites for dumps we are also seeing ...

Pastebin Being Used to Launch Attacks

›
We are seeing code as well as commands being stored on pastebin with specific keywords and content strings used to launch denial of service ...

OSINT-X Service Impact

›
Due to the ongoing feed activity as a result of the terror attacks in Paris our OSINT-X system is under heavy load today. What this means fo...
Friday, January 2, 2015

Best Statement We Have Seen All Year

›
"Many companies are so focused on the perimeter that they have little idea what's going on inside the network."

BREACH UPDATE: Chick-Fil-A Inc

›
Popular fast-food chain Chick-Fil-A Inc. is investigating a payment card data breach affecting an unknown number of its U.S. locations, but...
Sunday, December 28, 2014

DISCLOSURE: Independence Blue Cross

›
Independence Blue Cross has indicated that a maintenance worker discarded 12,500 paper records in the normal trash in October.
Thursday, December 25, 2014

H.J. Russell & Company - Owned

›
This companies IP address block has shown up in OSINT-X as a compromised host. This organization has machines attacking many other companies...

Merry Christmas from the SLC Security Team...

›
We wish you all a safe and happy holiday season... We will see you all on the 2nd...
Tuesday, December 23, 2014

Hey where did the domain monitoring go?

›
We wanted to let you all know that we are no longer offering notification services on domains. In order to get this information you will be ...

First Citizens Bank and Covert Electronic Surveillance

›
We are seeing indications that this bank is under covert electronic surveillance. This could be auditors hired by the bank, bad actors looki...

2014 Historical Data to be released to Tableau Desktop or Public Users

›
As part of our technology share program SLC Security Services LLC will be releasing intelligence information formatted for users of Tableau ...

Covert Listening Threats even worse than recent hacking attempts

›
Over the past few weeks we have been researching data from various audits on the east coast. We are noting a large increase in the identific...

Copycat Hacks Becoming Commonplace

›
While Government experts have pointed the finger at North Korea in the recent attack of SONY. We are still not convinced. The reason we are ...
Friday, December 19, 2014

BREACH UPDATE: Staples admits to customers data being lost

›
Staples Inc. has come out with the following statement today. The number of cards affected 1.16 million. Staples Inc. (SPLS) , the larg...
Thursday, December 18, 2014

The Grinch?? Alert Logic's Claim's Not Adding Up

›
So as penetration testers we immediately took the information provided by Alert Logic in a recent notification concerning a vulnerability in...
Wednesday, December 17, 2014

WE AGREE: SONY did not get hacked by North Korea

›
Those of us in the security research arena are not buying the statement in mainstream news that SONY was hacked by North Korea. In fact ther...
Monday, December 15, 2014

Guess What?! Your owned... UPDATED 12/16/2014 1:37PM EST

›
On 15 December, 2014 SLC Security Services LLC kicked off an analytic job to determine what host are owned or have been compromised. The fol...