3 ms·
Is there a database of these big corporate hacks anywhere? Furthermore, is there any categorization of the method that was used? I am curious of the ratio: X%
by fbdab103 3y ago
Is there a database of these big corporate hacks anywhere?
Furthermore, is there any categorization of the method that was used? I am curious of the ratio: X% mix-configured cloud permissions, Y% bad defaults, Z% unpatched 9-year old vulnerability, N% most minimal social hacking, etc
Probably too much egg on everyone's face to get public post-mortems, but I would enjoy knowing more.
- qingcharles 3y agoThere's this? https://haveibeenpwned.com/PwnedWebsites https://haveibeenpwned.com/PwnedWebsites
- tapland 3y agoOne good one for data breaches is Mozillas: https://monitor.firefox.com/breaches https://monitor.firefox.com/breaches
- basch 3y agoDoesn’t cover corporate attacks. The latest MGM isn’t there.
- ziddoap 3y agoThere is generally going to be a lag between a breach being reported in the news and the breached data being processed & organized for services like Monitor & HaveIBeenPwned (this also assumes the breached data is posted publicly rather than being sold privately or held for ransom).
- red-iron-pine 3y agofrom the website: > It can sometimes take months or years for credentials exposed in a data breach to appear on the dark web. Breaches get added to our database as soon as they have been discovered and verified.
- deleted 3y ago[deleted]
- coldpie 3y agoI've often though about maintaining a website with a timeline of hacked organizations, large and small, as an illustration of the fact that there is no such thing as computer security and how all data on networked computers should be considered semi-public. Mostly what keeps me from doing it is it seems like too many events happen to stay on top of it, haha.