Exposed Database Reveals 100K+ Compromised Facebook Accounts

Cybercriminals left an ElasticSearch database exposed, revealing a global attack that compromised Facebook accounts and used them to scam others. Source: Threadpost

Cybercrime Moves to the Cloud to Accelerate Attacks Amid Data Glut

A report on the underground economy finds that malicious actors are offering cloud-based troves of stolen data, accessible with handy tools to slice and dice what's on offer. Source: Threadpost

Scams Ramp Up Ahead of Black Friday Cybercriminal Craze

With more online shoppers this year due to COVID-19, cybercriminals are pulling the trigger on new scams ahead of Black Friday and Cyber Monday. Source: Threadpost

Amazon Sues Instagram, TikTok Influencers Over Knockoff Scam

'Order This, Get This': Social-media influencers are in Amazon’s legal crosshairs for promoting generic Amazon listings with the promise to get prohibited counterfeit luxury items instead. Source: Threadpost

Botnet Attackers Turn to Vulnerable IoT Devices

Cybercriminals are leveraging the multitudes of vulnerable connected devices with botnets that launch dangerous distributed denial-of-service (DDoS) attacks. Source: Threadpost

Nation-State Attackers Actively Target COVID-19 Vaccine-Makers

Three major APTs are involved in ongoing compromises at pharma and clinical organizations involved in COVID-19 research, Microsoft says. Source: Threadpost

Ticketmaster Scores Hefty Fine Over 2018 Data Breach

The events giant faces a GDPR-related penalty in the U.K., and more could follow. Source: Threadpost

Credential-Stuffing Attack Hits The North Face

The North Face has reset an undisclosed number of customer accounts after detecting a credential-stuffing attack on its website. Source: Threadpost

Report: CISA Chief Expects White House to Fire Him

Chris Krebs, the first and current director of the CISA, said his protection of election process drew ire from Trump administration. Source: Threadpost