#tablered

 According to LeakedSource, the DailyMotion data breach appears to have taken place on October 20, 2016, which means it is possible that hackers have been circulating the data for over a month.

Email addresses and usernames have been stolen in the data breach.

 The stolen data consists of 85.2 Million unique email addresses and usernames and around 20 percent of the accounts (more than 18 Million users) had hashed passwords tied to them.

 The passwords were protected using the Bcrypt hashing algorithm with ten rounds of rekeying, making it difficult for hackers to obtain user's actual password.

 Bcrypt is a cryptographic algorithm that makes the hashing process so slow that it would literally take centuries to actual brute-force password of a user.

A company can spend hundreds of thousands of dollars on firewalls, intrusion detection systems and encryption and other security technologies, but if an attacker can call one trusted person within the company, and that person complies, and if the attacker gets in, then all that money spent on technology is essentially wasted.

Internet security researchers say people should not rush to change their passwords after the discovery of a widespread “catastrophic” software flaw that could expose website user details to hackers.

Suggestions by Yahoo and the BBC that people should change their passwords at once – the typical reaction to a security breach – could make the problem worse if the web server hasn’t been updated to fix the flaw, says Mark Schloesser, a security researcher with Rapid7, based in Atlanta, Georgia. 

Single laptop with a decent internet connection to launch overwhelming denial of service (DoS) attacks in order to bring down major Internet servers and modern-day firewalls.

 This is a new attack technique that lone attackers with limited resources (in this case, a laptop and at least 15Mbps of bandwidth) can use to knock large servers offline.

 Dubbed a BlackNurse attack or the low-rate "Ping of Death" attack, the technique can be used to launch several low-volume DoS attacks by sending specially formed Internet Control Message Protocol (ICMP) packets, or 'pings' that overwhelm the processors on server protected by firewalls from Cisco, Palo Alto Networks, among others.

 In other words, this low-volume DoS technique remains effective because it is not flooding the firewall with traffic, but rather it is pushing high load onto the CPU, effectively knocking servers offline even if they've tons of network capacity.

  Products Affected

 The BlackNurse attack works against the following products: •Cisco ASA 5506, 5515, 5525 (default settings) •Cisco ASA 5550 (legacy) and 5515-X (latest generation) •Cisco Router 897 (can be mitigated) •SonicWall (misconfiguration can be changed and mitigated) •Some unverified Palo Alto •Zyxel NWA3560-N (wireless attack from LAN side) •Zyxel Zywall USG50

 Cisco said it does not consider the reported behavior to be a security issue, warning:

IBM announced a new cloud service that would enable companies to analyze performance, security, and interoperability of blockchain ecosystems in a secure cloud environment. The company claims that the new cloud environment, which is based on IBM’s LinuxOne (a Linux-only server) used for high-security projects, will enable businesses to analyze and run blockchain projects that handle private and confidential clients’ data, but for now still beta mode.

Blockchain is a relatively new technology. It is made up of a distributed database developed to retain and secure data records that can neither be meddled with nor edited. The database is further structured into separate data blocks, which can be time stamped, holding a wide range of distinct information.

Blockchain was first designed by Bitcoin, a crypto-currency firm, as a method of protecting digital cash from manipulation and looting. The technology now has a wide range of applications and can securely store and transfer valuable information such as digital assets and money, intellectual property, and voting records.

Blockchain technology is gradually gaining traction and popularity in the business world. Enterprises are testing the practicality of implementing blockchain in cloud-based services. All business establishment need to maximize the security of customer data and transactions data. Blockchain offers exactly that.

But a data breach in a blockchain project could be disastrous for a company and its clients. Blockchain transmits precious digital information. Data breaches cost business enterprises up to $4 million in 2015. The number of cyber-attacks went up by 64% in 2015. These figures are ever on the rise. According to IBM experts, a breach on a blockchain ecosystem could be bad news for businesses.