Half of the Largest Companies: Threat Vulnerable
October 24, 2016
Compromised Credentials, a research report by Digital Shadows reveals that around 1,000 companies comprising of Forbes Global 2000 are at risk as credentials of their employees are leaked or compromised.
As reported by Channel EMEA in Digital Shadows Global Study Reveals UAE Tops List in Middle East for…
The report found that 97 percent of those 1000 of the Forbes Global 2000 companies, spanning all businesses sectors and geographical regions, had leaked credentials publicly available online, many of them from third-party breaches.
Owing to large-scale data breaches in recent times, credentials of 5.5 million employees are available in public domain for anyone to see. Social networks like LinkedIN, MySpace and Tumblr were the affliction points of these breaches, the report states.
Analyzed geographically, companies in Middle-East seem to be the most affected:
The report revealed that the most affected country in the Middle East – with over 15,000 leaked credentials was the UAE. Saudi Arabia (3360), Kuwait (203) followed by Qatar (99) made up the rest of the list. This figure is relatively small as compared to the global figure due to the lower percentage of organizations that reside in the Middle East.
Affected organizations may not be able to contain the damages by simply resetting the passwords of the employees. It also needs to be seen if the information available is contemporary, not reposted and is unique. Moreover, mere password resetting can cause lot of friction within the IT departments of the organizations.
Without proper analysis, it will be difficult for the affected companies to gauge the extent of the damage. But considering the PR nightmare it leads to, will these companies come forward and acknowledge the breaches?
Vishal Ingole, October 24, 2016
Sponsored by ArnoldIT.com, publisher of the CyberOSINT monograph
Ancient History Tumblr Hack Still Beats Myspace Passwords Sale
September 19, 2016
Personal information remains a hot ticket item on the darknet. Metro shared an article highlighting the latest breach, More than 65million Tumblr emails sold on the darknet. While the leak happened in 2013, Tumblr has now reported the magnitude of the database that was hacked. As a call to action, the article reports Tumblr’s recommendation for users to change their passwords and look out for phishing attempts. The article reports,
The database includes email addresses and passwords. These are heavily protected by a procedure which makes it extremely difficult to reproduce the passwords. The database has turned up on the darknet marketplace The Real Deal at a price of £102, reports Motherboard.
Troy Hunt, who runs the security research site Have I Been Pwned, said the leak is an example of a ‘historical mega breach’. Users who fear their credentials were involved in the Tumblr hack can find out here.
Let’s not forget the more recent hack of potentially the largest login credentials theft: Hacker offers 427 million MySpace passwords for just $2,800. Many are commenting on the low price tag for such a huge quantity of personal information as a sign of MySpace’s lack of appeal even on the Dark Web. When login information including passwords are stolen, phishing attempts on the site are not the only issue for victims to be concerned with; many individuals use the same login credentials for multiple accounts.
Megan Feil, September 19, 2016
Sponsored by ArnoldIT.com, publisher of the CyberOSINT monograph
There is a Louisville, Kentucky Hidden Web/Dark Web meet up on September 27, 2016.
Information is at this link: https://www.meetup.com/Louisville-Hidden-Dark-Web-Meetup/events/233599645/
Tumblr Tumbles, Marking yet Another Poor Investment Decision by Yahoo
April 14, 2016
The article on VentureBeat titled As Tumblr’s Value Head to Zero, a Look at Where It Ranks Among Yahoo’s 5 Worst Acquisition Deals pokes fun at Yahoo’s tendency to spend huge amounts of cash for companies only to watch them immediately fizzle. In the number one slot is Broadcast.com. Remember that? Me neither. But apparently Yahoo doled out almost $6B in 1999 to wade into the online content streaming game only to shut the company down after a few years. And thusly, we have Mark Cuban. Thanks Yahoo. The article goes on with the ranking,
“2. GeoCities: Yahoo paid $3.6 billion for this dandy that let people who knew nothing about the Web make web pages. Fortunately, this was also mostly shut down, and nearly all of its content vanished, saving most of us from a lot GIF-induced embarrassment. 3. Overture: Yahoo paid $1.63 billion in 2003 for this search engine firm after belatedly realizing that some upstart called Google was eating its lunch. Spoiler alert: Google won.”
The article suggests that Tumblr would slide into fourth place given the $1.1B price tag and two year crash and burn. It also capitulates that there are other ways of measuring this list, such as: levels of hard to watch. By that metric, cheaper deals with more obvious mismanagement like the social sites Flickr or Delicious might take the cake.
Chelsea Kerwin, April 14, 2016
Sponsored by ArnoldIT.com, publisher of the CyberOSINT monograph
She Is a Meme Librarian
January 20, 2016
Memes are random bits of Internet culture that come and go faster than the highest DSL speed. There are so many memes out there that it seems impossible to catalog the trends, much less each one. The Independent tells us that Amanda Brennan has made a career out of studying and documenting memes, becoming the world’s first meme librarian: “Meet Tumblr’s ‘Meme Librarian,’ The Woman With The Best Job On The Internet.”
Brennan works at Tumblr and her official title is content and community manager, but she prefers the title “meme librarian.” She earned a Master’s in Information from Rutgers and during graduate school she documented memes for Know Your Meme, followed by Tumblr.
“[In graduate school] immediately I knew I did not want to work in a traditional library. Which is weird because people go to library school and they’re like ‘I want to change the world with books!’ And I was like ‘I want to change the world of information.’ And they started a social media specialization in the library school, and I was like, ‘This is it. This is the right time for me to be here.’”
Brennan is like many librarians, obsessed with taxonomy and connections between information. The Internet gave her an outlet to explore and study to her heart’s content, but she was particularly drawn to memes, their origins, and how they traveled around the Internet. After sending an email to Know Your Meme about an internship, her career as a meme librarian was sealed. She tracks meme trends and discovers how they evolve not only in social media, but how the rest of the Internet swallows them up.
I wonder if this will be a future focus of library science in the future?
Whitney Grace, January 20, 2016
Sponsored by ArnoldIT.com, publisher of the CyberOSINT monograph
Search Your Yahoo Mail? Yeah, Right
August 19, 2015
While Web site search used to be considered the worst before Google released a high-performing search widget, the title now officially goes to email search. Nobody wants to search through their email to find a missing email and you are doomed if you even think about using a mail application such as Outlook or Apple Mail. In part of its rebranding effort, Yahoo is taking measures to fix email search, says the New York Times in “Yahoo Tweaks Email To Make Search More Personal.”
Yahoo has been working for a year to improve email search and now Yahoo mail has implemented the changes. It now offers auto complete and suggestions when a search term is typed into the query box. It will also index attachments and links included in emails, so users do not have to find the actual email they were in. The sorting options have also been updated and social media accounts can now be synced.
The changes are small and the auto complete/suggestions usually revert to basic keyword suggestions, but it is a step in the right direction. Yahoo does not want to overhaul the mail system too quickly, because, as anyone knows, too many changes at once are upsetting to users.
“Instead, Yahoo is subtly making changes. Last month, for example, it added a small plus button to the bottom right of the window used to compose emails. If you click on that button, you can drag and drop photos and documents from your email archive, pull in an animated GIF from Yahoo’s Tumblr social network, or add the results of a web search.”
Yahoo made a good business choice and is working to improve its email and other applications. It will be interesting to watch the changes unfold.
Whitney Grace, August 19, 2015
Sponsored by ArnoldIT.com, publisher of the CyberOSINT monograph
Tumblr Has a GIF For You
June 30, 2015
Facebook recently enabled users to post GIF images on the social media platform. Reddit was in an uproar over the new GIF and celebrated by posting random moving images from celebrities making weird faces to the quintessential cute kitten. GIFs are an Internet phenomenon and are used by people to express their moods, opinions, or share their fandom. Another popular social medium platform, Tumblr, the microblogging site used to share photos, videos, quotes, and more, has added a GIF search, says PCMag in “Tumblr Adds New GIF Search Capabilities.”
The main point of Tumblr is the ability share content either a user creates or someone else creates. A user’s Tumblr page is a personal reflection of themselves and GIFs are one of the ultimate content pieces to share. Tumblr’s new search option for GIFs is very simple: a user picks the + button, clicks the GIF button, and then search for the GIF that suits your mood. A big thing on Tumblr is citing who created a piece and the new search option has that covered:
“Pick the GIF you want and it slinks right in, properly credited and everything,” the company said. “Whoever originally posted the GIF will be notified accordingly. On their dashboard, on their phone, all the regular places notifications go.”
GIFs are random bits of fun that litter the Internet and quickly achieve meme status. They are also easy to make, which appeals to people with vey little graphic background. They can make something creative and fun without much effort and now the can be easily found and shared on Tumblr.
Whitney Grace, June 30, 2015
Sponsored by ArnoldIT.com, publisher of the CyberOSINT monograph

