Instagram API exposure leaks 17.5 million user records

A threat actor leaked 17.5 million Instagram user records on BreachForums, likely originating from a 2024 API exposure. The data includes names, emails, and phone numbers, leading to widespread password reset spam and phishing risks.

**If you have an Instagram account, activate MFA ASAP. If you receive password reset emails, go don't click on any links from the emails. Visit Instagram, reset your password and ignore further password reset emails if you yourself haven't requested a password reset.**
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/instagram-api-exposure-leaks-17-5-million-user-records-9-6-a-t-j/gD2P6Ple2L

Instagram API exposure leaks 17.5 million user records

A threat actor leaked 17.5 million Instagram user records on BreachForums, likely originating from a 2024 API exposure. The data includes names, emails, and phone numbers, leading to widespread password reset spam and phishing risks.

**If you have an Instagram account, activate MFA ASAP. If you receive password reset emails, go don't click on any links from the emails. Visit Instagram, reset your password and ignore further password reset emails if you yourself haven't requested a password reset.**
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/instagram-api-exposure-leaks-17-5-million-user-records-9-6-a-t-j/gD2P6Ple2L

Die neue Dimension des Betrugs: Wenn Cyberkriminelle ganze Realitäten bauen! Cyberkriminelle heben Social Engineering aktuell auf ein neues, hochgradig perfides Level: In einer Art „Truman Show für Anleger“ konstruieren Betrüger komplette Schein-Investoren-Communities, die einzig dem Zweck dienen, Vertrauen zu erzeugen – und am Ende Identitäten und Vermögen zu stehlen. #CyberSecurity #SocialEngineering #KI #Betrug #Cybercrime

I got an email today from one of my vendors letting me know that they'll be requiring 2FA beginning January 12. I logged into my account, and in doing so learned that I had already set up 2FA.

A couple of things:

1) I logged in to set it up, thinking they must not have offered it before. It turned out that it was there as an option, and of course I had enabled it when I created the account some time ago.

2) I’m also thinking, “What!!!??? This is a major global provider of OT/ICS equipment, and they’re just NOW getting around to making 2FA mandatory?”

My guess is they realized they needed it to be mandatory, not optional, for CMMC compliance.

It’s too bad that it takes regulation to make companies do the right thing.

#CallMeIfYouNeedMe #FIFONetworks

#cybersecurity

Die #SWP gelangt in einem aktuellen Papier zu dem Schluss, dass Europas #Cybersecurity in zentralen Bausteinen deutlich von den #USA abhängt, indem der Markt für wichtige #Sicherheitssoftware und Bedrohungsinformationen dominiert wird.

Wenn Washington seine Unterstützung reduziert, politische Prioritäten verschiebt oder Abhängigkeiten im Konfliktfall gezielt als Druckmittel einsetzt, könnte Europa kurz- und langfristig eine spürbar schlechtere IT-Sicherheitslage haben:

https://www.swp-berlin.org/publications/products/aktuell/2025A48_Europas_Cybersicherheit.pdf

Die #SWP gelangt in einem aktuellen Papier zu dem Schluss, dass Europas #Cybersecurity in zentralen Bausteinen deutlich von den #USA abhängt, indem der Markt für wichtige #Sicherheitssoftware und Bedrohungsinformationen dominiert wird.

Wenn Washington seine Unterstützung reduziert, politische Prioritäten verschiebt oder Abhängigkeiten im Konfliktfall gezielt als Druckmittel einsetzt, könnte Europa kurz- und langfristig eine spürbar schlechtere IT-Sicherheitslage haben:

https://www.swp-berlin.org/publications/products/aktuell/2025A48_Europas_Cybersicherheit.pdf

Looking for a source or the exact wording

Recently I read a post describing Multi Factor Authentication #mfa as (tongue in cheek)

• Something you forget
• Something you lose
• And something you get chopped off

Did anyone have a source?
#cybersecurity

Looking for a source or the exact wording

Recently I read a post describing Multi Factor Authentication #mfa as (tongue in cheek)

• Something you forget
• Something you lose
• And something you get chopped off

Did anyone have a source?
#cybersecurity

Just published: Apple Health + ChatGPT: The Privacy Tradeoff.

OpenAI’s new ChatGPT Health feature can connect to Apple Health (and even medical records). The convenience is real, but so is the expanded attack surface. With healthcare breaches hitting millions of records, my blunt take is: if you care about privacy, don’t use it. Full stop.

If you do use it anyway, I break down what “not used for training” does and doesn’t mean, why HIPAA isn’t a force field here, and the practical steps to reduce your blast radius.

https://www.kylereddoch.me/blog/apple-health-chatgpt-the-privacy-tradeoff/

#CyberSecurity #Privacy #Apple #OpenAI #Healthcare #ThreatModeling #DataProtection

Just published: Apple Health + ChatGPT: The Privacy Tradeoff.

OpenAI’s new ChatGPT Health feature can connect to Apple Health (and even medical records). The convenience is real, but so is the expanded attack surface. With healthcare breaches hitting millions of records, my blunt take is: if you care about privacy, don’t use it. Full stop.

If you do use it anyway, I break down what “not used for training” does and doesn’t mean, why HIPAA isn’t a force field here, and the practical steps to reduce your blast radius.

https://www.kylereddoch.me/blog/apple-health-chatgpt-the-privacy-tradeoff/

#CyberSecurity #Privacy #Apple #OpenAI #Healthcare #ThreatModeling #DataProtection

n8n Users Urged to Patch CVSS 10.0 Full System Takeover Vulnerability https://hackread.com/n8n-users-patch-full-system-takeover-vulnerability/ #ApplicationSecurity #Cybersecurity #Vulnerability #Security #database #Upwind #n8n

n8n Users Urged to Patch CVSS 10.0 Full System Takeover Vulnerability https://hackread.com/n8n-users-patch-full-system-takeover-vulnerability/ #ApplicationSecurity #Cybersecurity #Vulnerability #Security #database #Upwind #n8n

There is no free lunch: Ein beliebter #Angriffsvektor sind mittlerweile #Aktivierungsschlüssel für Softwarelizenzen, die billig oder gar umsonst im Internet angeboten werden.

Genau das hat ein #Cyberkrimineller getan und mit einem kostenlosen Aktivierungstool für Microsoft #Windows 2,8 Millionen Computer mit #Malware infiziert, mit der über unbemerkte Adressänderungen Transaktionen von Kryptowährungen an die Wallet des Angreifers umgeleitet wurden:

https://t3n.de/news/windows-aktivierungstool-infiziert-pc-1724021/ #cybersecurity

There is no free lunch: Ein beliebter #Angriffsvektor sind mittlerweile #Aktivierungsschlüssel für Softwarelizenzen, die billig oder gar umsonst im Internet angeboten werden.

Genau das hat ein #Cyberkrimineller getan und mit einem kostenlosen Aktivierungstool für Microsoft #Windows 2,8 Millionen Computer mit #Malware infiziert, mit der über unbemerkte Adressänderungen Transaktionen von Kryptowährungen an die Wallet des Angreifers umgeleitet wurden:

https://t3n.de/news/windows-aktivierungstool-infiziert-pc-1724021/ #cybersecurity

10 Best Free Blue Team Tools in 2026

Organizations assess their cybersecurity posture and safeguard network infrastructure by deploying experts for comprehensive security evaluations.

🧑‍💻 https://cybersecuritynews.com/blue-team-tools/

#opensource #blueteam #tools #hacking #cybersecurity #network #itsecurity #it #itsec #security #hack

Thinking about a move into Cyber Security. Are there any conferences, companies or meetups I should definitely look at in #scotland please? #cybersecurity

Thinking about a move into Cyber Security. Are there any conferences, companies or meetups I should definitely look at in #scotland please? #cybersecurity

10 Best Free Blue Team Tools in 2026

Organizations assess their cybersecurity posture and safeguard network infrastructure by deploying experts for comprehensive security evaluations.

🧑‍💻 https://cybersecuritynews.com/blue-team-tools/

#opensource #blueteam #tools #hacking #cybersecurity #network #itsecurity #it #itsec #security #hack