Business

Cyberattacks That Wildfired Into Worldwide Threats

Published

4 years ago

September 12, 2019

Recently Heard

Share this post:

X (Twitter) Facebook LinkedIn WhatsApp

It all began with a seemingly innocuous experiment.

In November 1988, Robert Tappan Morris, a graduate student at Cornell University created a self-replicating computer program to ascertain the size of the internet i.e. the number of devices connected to it. The program was supposed to travel from computer to computer and ask each machine to send a signal back to the main server which would keep count.

Sadly, things did not go as planned.

The program encountered an error and morphed into a worm (Morris worm). Before spreading to a machine, the worm checked if the machine was already infected. If it was, the worm would re-infect it 1 in 7 times. This caused many machines to get infected several times. A machine with too many Morris worm processes ran out of computing resources and began to malfunction.

The Morris worm caused denial-of-service (DoS) to 10% of the 60,000 machines on the internet. It took 72 hours for the researchers at Purdue and Berkeley to stop the worm from causing further damage.

Robert Morris was convicted under the 1986 Computer Fraud and Abuse Act and sentenced to three years of imprisonment, 400 hours of community service and a $10,000 fine.

The experiment not only caused widespread damage but also laid the foundation for the distributed denial-of-service attacks we often hear of today.

Cyberwarfare is on an all-time high. Cybercriminals are developing sophisticated methods to target anything ranging from your personal systems to an entire computer network. If recent studies are to be believed, hackers, on an average, attack the internet every 39 seconds.

To paint a better picture of the damage done by cyberattacks, we have compiled a list of some notable cyberattacks that wildfired into worldwide threats. Let us discuss them one by one.

1) Yahoo

While the cyberattacks date back to 2013-14, it was in September 2016 that Marissa Mayer, then Yahoo CEO announced the company had been the victim of the largest data breach ever in 2014, possibly by a ‘state-sponsored’ actor. The attack exposed the names, email addresses, date of births and telephone numbers of around 500 million users.

A couple of months later in December 2016, Yahoo admitted that in a separate attack in 2013, over 1 billion user accounts were compromised. In addition to names, email addresses, DOBs and telephone numbers, security questions and answers were also compromised this time.

In October 2017, Yahoo revised the estimate, saying all of its 3 billion accounts were compromised in the attacks. In June 2018, Yahoo was eventually sold to Verizon Communications for $4.48 billion. But the disclosure of the breaches did significant damage to Yahoo’s reputation- Yahoo’s sale price was slashed by a whopping $350 million.

2) Equifax

In September 2017, Equifax, a noted consumer credit reporting agency, announced something particularly vexing for its customers- an application vulnerability on one of their websites resulted in a massive data breach compromising the data of its American, British and Canadian customers.

The breach exposed the personal data including names, date of births, social security numbers and addresses of 143 million customers in addition to 200,000 credit card numbers.

The breach was discovered in July 2017 but Equifax believed it started as early as mid-May.

Equifax uses an open-source framework Apache Struts for its online disputes web application. In March 2017, the Apache Software Foundation discovered a vulnerability in the application and released information regarding it. Equifax, however, did nothing to patch its system.

Two months after the vulnerability was disclosed, hackers attacked the portal accessing highly sensitive customer information from 51 databases bit by bit in a span of 76 days.

The company’s delay in disclosing the breach drew flak from all quarters. Equifax, however, claimed it needed time to gather information on the extent of damage done.

3) Adult Friend Finder

In what is referred to as the largest data breach of 2016, over 400 million accounts from six databases belonging to FriendFinder Networks Inc. were compromised. FriendFinder is the company that runs some of the most prominent adult-oriented social websites.

The bulk of these accounts came from Adult Friend Finder. The hackers stole 20 years of personal data including names, email addresses and passwords.

It was later discovered that the attackers cashed in on Local File Inclusion (LFI) to implement the breach. LFI is a web application vulnerability that hackers can exploit to read sensitive information and execute system commands remotely.

Interestingly, this was the second time Friend Finder users had their accounts compromised; the first time being in May 2015, when personal information of 4 million accounts was made public on a forum accessible only through Tor.

4) Marriott International

In November 2018, Marriott International, world’s third largest hotel chain, disclosed that hackers had access to the reservation systems of many of its hotel chains since 2014, exposing sensitive information of its 500 million customers.

As per the records, an unauthorized party had accessed the reservation database of Starwood properties (that included several renowned hotel chains) in July 2014 and had been there till the breach was detected.

Marriot acquired Starwood properties in 2016 but kept Starwood’s reservation system separate from its own. As a result, the attack did not affect Marriot’s reservation system.

In addition to personal information, hackers had stolen credit card details of over 100 million customers although it is not certain if the hackers were able to decrypt the card information. The breach was attributed to Chinese intelligence groups seeking to gather data on US citizens.

5) eBay

In May 2014, the e-commerce giant reported a cyberattack that exposed the names, addresses, date of births and passwords of its 145 million users. As per eBay, the attackers cracked some employee login credentials in order to gain access to its corporate network. They had complete inside access for 229 days; during this time they were able to make their way to the customer database.

Thankfully, the breach did not affect the financial information of users as it was stored separately. The cyberattack may have diminished user activity but had little impact on eBay’s earnings.

6) Quora

Discovered in November 2018, the intrusion exposed the user information of 100 million Quora accounts. The compromised data included names, email addresses, encrypted passwords, data imported from other networks, public content and actions (questions, answers, comments and upvotes) as well as non-public content and actions (direct messages, downvotes and answer requests ). Users who had posted anonymously were, however, not affected as the site did not collect data from these users.

According to Quora CEO Adam D’Angelo, the attack happened on account of unauthorized access to one of their systems by a ‘malicious third-party’.

In response to the attack, Quora immediately launched an investigation. As a security measure, it logged out all users and forced all accounts to reset their passwords.

7) Aadhaar

The World Economic Forum (WEF) Global Risk Report considers Aadhaar data breach as the largest in the world. Aadhaar, the Indian government ID database, reportedly suffered multiple breaches that compromised the accounts of its 1.1 billion registered users. It was only in January 2018 that the cybersecurity experts discovered the criminals were selling access to the database at a rate of 500 INR for 10 minutes.

In the period between August 2017 and January 2018, Aadhaar numbers, names, phone numbers and addresses of 1.1 billion registered users were found susceptible to data breach. As per a report by The Tribune, anonymous sellers on WhatsApp were targeting village-level enterprise operators hired by the ministry of electronics and information technology to sell access to UIDAI data.

8) First American Financial Corp.

In what can be considered the biggest breach of 2019, over 800 million mortgage documents were left exposed on account of a vulnerability on First American Financial Corp website that allowed anyone with a web browser to access the documents. First American, an eminent real estate title insurance firm based out of the USA, patched the vulnerability in May 2019 after a real estate developer Ben Shoval discovered the flaw and notified a security researcher Brian Krebs of it.

Before the flaw was fixed, any user with access to the link to any document hosted on the website could change a single digit in the URL and access others’ files. These files did not require a password or any other kind of authentication. These documents included highly sensitive information including bank account numbers and statements, mortgage and tax records, social security numbers and transaction receipts dating all the way back to 2003.

So far, there have not been any reports of hackers accessing and misusing the data for personal gains.

9) Heartland Payment Systems

At the time of breach in 2008, Heartland Payment Systems was a prominent payment processing company that processed over 100 million payment card transactions per month for 175,000 merchants. The breach was identified in January 2009 when Visa and MasterCard notified Heartland of shady transactions from the accounts it had processed.

The breach started with a SQL injection attack in late 2007. The hackers spent months trying to access the payment processing system and eventually installed a spyware program that captured card data as the payments were processed.

The cyberattack had severe consequences. Heartland was considered out of compliance with the Payment Card Industry Data Security Standard and barred from processing payments of prominent credit card merchants till May 2009. The company also paid $145 million in compensation for fraudulent payments.

The perpetrators were eventually apprehended. Albert Gonzalez, a Cuban American along with two Russian accomplices were indicted in 2009. In March 2010, Gonzalez who allegedly masterminded the operation was sentenced to 10 years in federal prison.

10) Target Stores

Target, the US retail giant, suffered a massive data breach in December 2013. The breach exposed the personal data of 70 million customers and banking data of over 40 million customers. The attack was, however, not discovered by Target. It was the US security services that detected some aberrant bank transactions and warned the brand. The hacker group located somewhere in Eastern Europe had accessed Target’s point-of-sale payment card readers through a third-party vendor and collected around 110 million debit and credit card numbers.

The event had repercussions-Target CIO resigned in March 2014, its CEO in May 2014. The cost of the breach was estimated to be around $162 million.

As per Target, it has made significant security improvements since the breach. In 2017, however, a settlement was announced that gave Target 180 days to develop and maintain a comprehensive security system. As per Tom Kellermann, CEO of Strategic Cyber Ventures, the security measures implemented by Target are grossly inadequate and focus more on keeping the attackers out and not on improving response.

11) Adobe

Though the breach was first announced in October 2013, Adobe was not aware of the extent of the breach then. The company originally reported that the hackers had stolen nearly 3 million encrypted credit card records in addition to login data for an undetermined number of accounts.

Adobe later discovered that the attackers had accessed usernames and encrypted passwords for over 38 million active users. After several weeks of investigation, it was discovered that the hackers had also stolen customer names, IDs, passwords along with debit and credit card information.

The cyberattack cost Adobe dearly-the company had to pay a whopping $1.1 million as legal fees. An estimated $1 million was paid to users to settle claims of violating the Customer Records Act.

12) Sony’s PlayStation Network

One of the most well-known cyberattacks that wildfired into worldwide threats includes Sony’s PlayStation data breach in April 2011 when the personal data of over 77 million users was compromised. 12 million credit card details were stolen. After the breach was discovered, PlayStation network as well as Sony Entertainment Network was closed for around a month.

The breach compelled Sony to pay 15 million dollars as compensation in addition to hefty legal fees. They also had to refund customers whose bank accounts were illegally used. Like in many other data breaches, the hackers exploited SQL Injection to steal sensitive information. Had Sony been vigilant enough, the breach could have been averted.

In November 2014, one of its subsidiaries Sony Pictures Entertainment was infected by a computer worm. Hackers who identified themselves as ‘Guardians of Peace’ stole 100 terabytes of data from the company including film scripts, emails and personal data of around 47,000 employees.

The attack was linked to the North Korean government who had expressed disapproval over ‘The Interview’, a Sony-backed film centered on an assassination plot against the North Korean leader Kim Jong Un.

In light of the attack, Sony cancelled the broadcast of several films and paid an estimated $8 million as compensation to its employees and former employees.

The Final Word

These breaches show that even the best brands on the planet are vulnerable to cyberattacks. They may have leveraged the latest technologies to secure their data, but hackers always remain a step ahead- they exploit the same technologies to subvert the security mechanisms and misuse the data to their advantage.

In view of these developments, there are certain steps you need to take to minimize security threats:

Use a strong username-password combination for all accounts. Choose a different password for every account.

Delete the accounts you don’t use any longer.

Do not divulge too much personal information on third-party applications.

Seeking secure hosting solutions for your enterprise? We are there to help. At Go4hosting, we offer the best cloud server hosting solutions to safeguard your business from cyberattacks. For details, connect with our cloud experts today.

Share this post:

X (Twitter) Facebook LinkedIn WhatsApp

Business

Virtual Numbers for Small Businesses: Affordable Solutions for Enhanced Communication

Published

1 week ago

September 26, 2023

Alex Harsha

Share this post:

X (Twitter) Facebook LinkedIn WhatsApp

Virtual phone numbers have become popular all over the world. They are popular because virtual phone numbers are practical and provide a wide range of benefits. There are several significant variations between a virtual number and a regular number, and there is no direct connection between a virtual number and a telephone.

Small businesses can quickly and affordably enhance their business by using virtual phone numbers. As it helps to maintain a professional image, the majority of small business owners are choosing a virtual number for customer care solutions. Here are the reasons why virtual phone number India can be an affordable solution for small businesses:

Virtual numbers are economical for startups and small companies

What financial savings may your company expect from a virtual phone number? The first thing is that there are no additional tools or equipment are initially required. Second, unlike mobile phone plans, you can pick and choose the functions you need, saving you money on extras your team won’t use.

A virtual number will assist you with customer retention, which will increase income and is the third reason to get a virtual number.

Establish local presence

Most existing and prospective clients prefer to contact a local vendor for their needs. No matter where they are physically located, small businesses can create and maintain a strong local presence by using virtual phone numbers.

Choosing a local virtual call phone number gives businesses the opportunity to add customization. Using a virtual phone number has other benefits, like handling increased call volume because people are more likely to call a nearby company than one located miles away.

Keep personal communication and business separate.

Your personal cell phone number should be kept private if you don’t want others to know it. This is specifically true if you want to publish a phone number for your company online.

With a virtual number, you can manage both your friends and family’s direct cell numbers from the same device. You can do it while also having a separate phone number for your business contacts.

Virtual numbers are more than just a number.

The best thing about virtual Indian number is that they come with more high-tech and sophisticated functions than your regular number. There are many other services that come with virtual phone lines, including call forwarding, sophisticated conference tools, SMS and email notifications, comprehensive customization, etc.

You can also easily get voicemail service in addition to a variety of other helpful features with efficient business solutions.

Maintain a level of privacy.

It is not always easy to communicate with coworkers or business partners using personal phone numbers. But with virtual phone numbers it is easy to be connected to a personal number without compromising privacy.

For lone proprietors who want to operate a business while keeping their home numbers confidential virtual numbers can work incredibly well.

Choosing a virtual phone service: Things to take into account

Getting a virtual phone number is not too difficult. But when getting ready to get one or more for work, there are several important things to consider:

● Free telephone numbers: A virtual phone number is a freebie that some service providers give to subscribers. As part of an upgrade or add-on, you can also get multiple free numbers.

● Use and access: To make sure that business numbers are used properly and by the appropriate persons, it is important to keep track of usage and access. Most services come with extras that let you better track phone line usage and make sure everything works as it should.

● Pricing and overall value for the money: For getting a virtual number, there are several economical choices available. The service that will provide you with the best value for your money is the one you should choose. While a free service might be adequate for a very small business, a larger corporation would need to look around for options that offer the best integrations.

Final thoughts

Small businesses benefit from using virtual phone numbers as they enable them to reduce unnecessary costs and improve overall performance. The virtual mobile number India also offers a lot of sophisticated and advanced features to small businesses. So, consider getting a virtual phone number for your company if you want to improve effectiveness and make it simpler for customers to contact you.

Share this post:

X (Twitter) Facebook LinkedIn WhatsApp

Business

USAII® Launches Groundbreaking AI Leadership Certification Program

Published

1 week ago

September 26, 2023

Alice

Share this post:

X (Twitter) Facebook LinkedIn WhatsApp

Stamford, CT, July 19, 2023 – The United States Artificial Intelligence Institute (USAII®) is proud to announce the launch of its highly anticipated AI Leadership Certification Program – Certified AI Transformation Leader (CAITL™). A cutting-edge initiative designed to equip business leaders and decision-makers with the skills and knowledge required to lead in the dynamic world of Artificial Intelligence (AI).

In a world where AI technologies are transforming industries and shaping economies, the need for visionary and adept leaders is more critical than ever. The USAII’s CAITL™ Certification Program is designed to address this demand by equipping executives, managers, and decision-makers with the expertise to harness the full potential of AI for their organizations and society as a whole.

As an AI Leadership Certification Program, the CAITL™ certification offers a comprehensive curriculum that covers a wide array of essential AI-related subjects. Participants will gain insights into cutting-edge AI strategies, ethical considerations in AI implementation, AI governance, and its implications on privacy and security.

“This certification program represents a significant milestone for USAII® and the field of AI leadership. Our aim is to foster a new generation of forward-thinking, responsible, and strategic leaders who can leverage AI to drive positive change and innovation across various sectors,” said Mr. Ajit K Jha, President and CEO, EdTechDigit Innovations, the worldwide logistics and marketing partner of USAII®.

Key program highlights include:

1. Comprehensive Curriculum: A robust and up-to-date curriculum designed by leading AI experts covers everything from AI fundamentals to strategic applications.

2. Live Masterclass: Seasoned professionals and renowned AI influencers will lead the masterclass, providing participants with a wealth of knowledge and practical insights.

3. Real-world Use Cases: Participants will have the opportunity to learn with real-world AI use cases, allowing them to apply their learning and gain relative experience.

4. Self-paced learning: The program offers both online and self-paced learning formats, enabling professionals from across the world to access this transformative education.

Registrations for the CAITL™ Certification Program are now open, and interested business leaders and decision-makers can find more information on the USAII website (www.usaii.org).

About USAII®

The United States Artificial Intelligence Institute (USAII®) is the world’s leading Artificial Intelligence certifications provider for aspiring professionals and leaders at any stage of their career, organizations, institutions, academia, or governments, looking to upskill and reskill their expertise in the ever-evolving Artificial Intelligence domain. USAII® provides self-paced, and the most powerful Artificial Intelligence certifications designed perfectly to empower the highly demanding skills of an Artificial Intelligence professional.

For Media Contacts

Team – Marketing and Communications

United States Artificial Intelligence Institute (USAII®)

Email: [email protected]

Share this post:

X (Twitter) Facebook LinkedIn WhatsApp

Business

The Power of PE Twine: Why it’s Ideal for Fishing and Sports Netting

Published

1 week ago

September 26, 2023

Alice

Share this post:

X (Twitter) Facebook LinkedIn WhatsApp

Introduction

PE twine, also known as polyethylene twine, is a material that is very adaptable and long-lasting, making it ideal for use in a wide range of applications that take place outside. PE twine is the ideal material for the task at hand, whether you’re an experienced fisherman who wants to haul in a huge catch or a sports fan who wants a dependable solution for sports netting. Both of these scenarios call for the use of the material. Because of its strong strength as well as its resistance to abrasion and ultraviolet radiation, it is an excellent material for use in severe outdoor situations. In the next article, we will go over the many advantages of PE twine, as well as its applications in fishing and sports netting, and explain why it is regarded as one of the top materials for usage in these contexts. Also, by partnering with PE twine manufacturers, businesses can obtain a reliable and durable product that enhances efficiency and productivity in their operations.

Introduction to PE Twine and its versatility

1. The malleability and versatility of PE twine is one of the primary factors that has contributed to its widespread use. It is simple to operate and can be woven into a variety of various types of nets, which enables the production of bespoke nets that are suited to certain requirements. PE twine is a versatile material that can be used for a variety of purposes, making it an excellent option for anybody searching for a robust and dependable fishing net, such as a professional fisherman, or a sports fan in need of a long-lasting net for their favorite sport.

2. The durability and resilience to abrasion offered by PE twine is highly valued by anglers because it enables them to construct fishing nets that are up to the task of enduring the rigors of capturing fish in a variety of environments. It has outstanding knot strength, which enables safe and durable connections to be made between the twine and the many other components of the net. PE twine is ideal for use in applications that take place outside because to its high level of resistance to ultraviolet light (UV), which enables it to tolerate lengthy exposure to sunlight without suffering substantial deterioration.

3. PE twine shines just as brightly in the realm of sports netting as it does everywhere else. Because of its great tensile strength, it may be used to make nets that are durable enough to resist severe hits from balls or other objects, so providing both safety and durability. PE twine offers players and athletic facilities the kind of dependability and durability that is essential for participation in sports like soccer, baseball, and tennis, as well as other activities that need the use of a net.

4. Materials from By partnering with PE twine manufacturers can give huge benefit to, businesses who can obtain a reliable and durable product that enhances efficiency and productivity in their operations. It has a well-deserved reputation for hardness and durability because to its remarkable resistance to fatigue and flexibility, both of which contribute to its great reputation. Because of its superior insulating capabilities, polypropylene is a material that may be used without risk in the production of electrical products and cable sheathing. In its fiber form, polypropylene has a broad range of applications that include not just being beneficial for fishing but also for a large variety of other items, such as ropes, twine, tape, carpets, furniture, clothes, and camping gear. These applications are not restricted to only fishing, though. Because of its water resistance, it is particularly useful for applications in the maritime industry.

5. Last but not least, all of PE Twin materials and upholstery textiles not only make furniture seem nicer but also shield it from damage caused by daily use. They are simple to modify, which makes it possible to quickly refresh the appearance of a space or adapt it to evolving preferences. Therefore, the next time you come across these things that at first glance seem to be unremarkable, give some thought to the great potential they possess and the myriad of ways in which they may make your life simpler and more joyful.

FAQs:

Q. What is PE twine, and why is it ideal for fishing and sports netting?

A. PE twine, short for Polyethylene twine, is a durable and versatile material made from high-density polyethylene fibers. It’s an excellent choice for fishing and sports netting due to its strength, resistance to environmental factors, and overall performance in demanding conditions.

Q. What are the key advantages of using PE twine in fishing nets?

A. PE twine offers exceptional tensile strength, making it capable of withstanding the stresses of fishing environments. It also has low water absorption, UV resistance, and high abrasion resistance, ensuring the longevity of fishing nets even when exposed to harsh weather and marine conditions.

Q. How does PE twine contribute to sports netting applications?

A. In sports netting, PE twine excels due to its superior strength-to-weight ratio. This makes it a reliable choice for constructing nets for sports like soccer, baseball, and tennis. It can endure high-impact hits and prolonged exposure to sunlight without compromising its performance.

Q. Is PE twine suitable for both freshwater and saltwater fishing?

A. Yes, PE twine is suitable for both freshwater and saltwater fishing. Its resistance to water and salt ensures that it maintains its strength and durability over time, making it an excellent choice for various fishing environments.

Q. Can PE twine withstand exposure to sunlight and UV rays?

A. Absolutely, one of the remarkable properties of PE twine is its resistance to UV degradation. This means it can withstand prolonged exposure to sunlight without weakening or breaking down, making it ideal for outdoor applications like fishing and sports netting.

Q. How does the diameter of PE twine affect its performance?

A. The diameter of PE twine plays a crucial role in its performance. Thicker twine tends to be stronger but may have increased drag in water or wind. Thinner twine might be more suitable for applications where minimal visibility is desired, but it could have slightly less strength.

Q. Is PE twine less prone to tangling compared to other materials?

PE twine has a relatively smoother texture compared to some other materials, which can help reduce tangling to some extent. However, proper net design and construction techniques also play a significant role in preventing tangling.

Q. Can I use PE twine for making intricate net designs?

A. Yes, PE twine can be used for creating intricate net designs due to its flexibility and knot-holding capabilities. It’s important to choose the appropriate twine thickness for the intricacy of the design to ensure optimal performance.

Q. Is PE twine easy to work with for net repairs and maintenance?

A. Yes, PE twine is known for its ease of use when it comes to net repairs and maintenance. Its knot-holding ability and resistance to fraying make it a convenient choice for mending damaged nets and extending their lifespan.

Q. Is PE twine available in various colors and sizes?

A. Yes, PE twine comes in a variety of colors and sizes to suit different applications. This allows for customization based on visibility needs, aesthetics, and specific requirements of fishing or sports netting.

Bottom Line

In summary, our blog article has elucidated the remarkable efficacy and adaptability of polyethylene twine in the context of fishing and sports nets. PE twine is a very suitable option for those who engage in angling or sporting activities, owing to its notable attributes of robustness, longevity, and capacity to withstand various weather conditions.