Plus: At least 30% of hackers are women, according to a new report
| Part of  Network | |
 Presented by  |
Researchers have found a security flaw in Booking.com that affects users that log in using Facebook. Hackers could steal data and take different actions by pretending to be the victim. More: - The breach takes advantage of a flaw in OAuth, a technology that is used by hundreds of thousands of companies globally and millions of users.
- OAuth essentially allows users to log in to websites using their credentials for Facebook, Google, etc.
- The researchers stated they tracked the flaws by manipulating specific steps in the OAuth sequence.
- After discovering the flaws, researchers notified Booking.com, which claims to have patched them since then.
- Booking claims that the flaw has not been used by threat actors to steal any user data.
- 90% of the users preferred social login over traditional email registration on websites.
Zoom Out: - OAuth has been targeted by hackers numerous times. In 2022, GitHub confirmed several organizations were compromised by a threat actor using stolen OAUTH tokens to access their private repositories.
- Microsoft Exchange was also breached by hackers who installed OAuth applications and managed to control Exchange servers and spread spam.
| |
The White House has launched the U.S. National Cybersecurity strategy for 2023 and beyond. Private technology companies are expected to take on more responsibilities than ever before. More: - According to the government, cybersecurity is essential for the functioning of the U.S. economy, its democracy, digital communication system, etc.
- This document has five main pillars:
- The defense of critical infrastructure,
- the disruption and dismantlement of threat actors,
- the push toward reshaping market forces to drive security,
- investing in a resilient future,
- and the creation of international partnerships.
- One of the biggest changes the document brings is the fact that it transfers cybersecurity responsibilities from individuals, small businesses, and local governments to technology firms.
- This decision is being seen as something that favors long-term investments as a balance between existing and future threats.
- Industry experts stated that deciding to put more responsibility on private companies and regulate the industry is right.
| |
 A message from ROLLWORKS We want it all, and we want it now—Leads that is! With pressure on the rise to prove value AND generate results fast, marketers can no longer rely on just quantity. While the goal remains to maximize the volume of leads, the bigger focus now is on the quality of leads (your best-fit accounts!) Quality leads are best-fit accounts for your business that are ready to buy based on high fit scores, levels of intent, spikes in engagement, data, and more! Trust us, we know this shift in focus can make it hard to get leadership on board (let alone your marketing team), so we’ve created this guide to help cover the balancing act of moving from quantity to quality in 4 easy steps! Get the guide
| |
The U.S. is implementing new laws meant to protect water systems from hackers. The decision comes as water resource management facilities in the country were cyberattacked on multiple occasions. More: - The new legislation requires state governments to audit the cybersecurity practices of public water systems.
- This decision was made due to the fact that many facilities have allegedly failed to take basic security steps to protect themselves and their clients.
- The U.S. Environmental Protection Agency led this decision.
- The U.S. water sector includes more than 148,000 public water systems.
Zoom Out: - Only weeks into the Biden administration, in February 2021, a hacker infiltrated a Florida water treatment facility and tried to increase the amount of sodium hydroxide to a potentially dangerous level.
- An employee at the plant realized what was going on and manually stopped the system before it sent out contaminated water.
- The FBI and the U.S. Cybersecurity and Infrastructure Security Agency have warned about multiple ransomware attacks on the computer networks of water and wastewater facilities from California to Maine.
| |
At least 30% of hackers are women, according to a new report. More women are hackers than work in the legal cyber industry as of 2023. More: - A security company used machine learning to analyze text written by 50 random users of the Russian-language XSS forum and 50 users of the English-language Hackforums site.
- The software concluded that revealed that at least 30% of those XSS forum users were women, while the same figure rose to 36% of Hackforums users.
- 4-8% of the U.K., Russian, and U.S. prison population are female.
| |
Privacy-focused browser Brave has launched a new AI-powered search feature. The company is based in San Francisco. More: - Brave is a privacy-focused browser that automatically blocks online advertisements and website trackers.
- The platform provides users the choice to turn on optional ads for a premium price.
- The company claims that Summarizer does not impact the previous privacy-first concept that Brave had.
- The company aims to roll out the feature once the company develops further.
- The Brave Summarizer has been made available to almost all users of Brave Search on both desktop and mobile.
| |
Quick Hits: - Get Gusto, the #1 payroll software according to PCMag. Set up your free account and get 25% off for the first 6 months when you run payroll by May 31, 2023. Terms apply.*
- A new report claims that China has a vast amount of data on U.S. citizens and businesses that it has obtained under suspected digital hacking campaigns.
- American fast-food chain Chick-fil-A has confirmed that over 71,000 customers had their accounts breached.
- According to unconfirmed reports, the Polish special services are using the Pegasus surveillance software to spy on specific politicians from the opposition.
- Normally it takes weeks or months to hire world-class talent, but Toptal has cut it down to just 2-5 days. Take a look.*
*This is sponsored content.
| |
Upcoming events at Inside: - March 07 - Inside Startups Coffee Break (Register Here)
- March 09 - Inside Marketing w/ Jen Bryan (Velocity Growth) (Register Here)
- March 09 - Webinar on how Jiminny leverages AI for conversation intelligence (Register Here) *
- April 18 - Human Resources Summit'23 (Register Here)
*This is a sponsored listing.
| |
 |  | Arbër is an Inside writer who also has experience in entrepreneurship. He has experience covering Consumer Tech, Venture Capital, NFTs, Crypto, etc. Arbër holds a Bachelor's degree in Business from XAMK University in Finland. When he is not reading(and writing) business news, he chooses to watch sports or anime...and then read news about sports or anime. |   | | Editor | Aaron Crutchfield is based in the high desert of California. Over the last two decades, he has spent time writing and editing at various local newspapers and defense contractors in California. When he's not working, he can often be found looking at the latest memes with his kids or working on his 1962 and 1972 Fords. | |
Find out here how to Shrink Time to Revenue in 4 Steps. | |
| 767 Bryant St. #203, San Francisco, CA 94107
Copyright © 2023 Inside.com | |
| |
