f13.net

f13.net General Forums => General Discussion => Topic started by: Trippy on September 19, 2018, 06:57:09 AM



Title: Newegg.com payment breach
Post by: Trippy on September 19, 2018, 06:57:09 AM
Card skimming code in effect between August 14 and September 18.

https://www.volexity.com/blog/2018/09/19/magecart-strikes-again-newegg/
https://techcrunch.com/2018/09/19/newegg-credit-card-data-breach/


Title: Re: Newegg.com payment breach
Post by: Chimpy on September 19, 2018, 07:37:25 AM
Damn, now I need to check when my last purchase was. Looks like August 5th, so I am “safe”.


Title: Re: Newegg.com payment breach
Post by: WayAbvPar on September 21, 2018, 09:07:27 AM
I don't why I am surprised anymore. Security takes effort and money, two things people really don't like to part with. But still... :facepalm:


Title: Re: Newegg.com payment breach
Post by: Teleku on September 21, 2018, 09:22:09 AM
With only skimming info about the incident (so not knowing how lazy they were) I will just say that security IS an arms race.  You can be paying for good security and shit can still get through.  Organized crime across the globe is dumping millions of dollars into cyber theft efforts and development, let alone what some of the more shady nation states are up to.  Things keep getting more complex, which keeps creating new avenues for attack.  Especially with all that I've seen now working in this job, I'm honestly amazed private companies have done as well as they have.


Title: Re: Newegg.com payment breach
Post by: HaemishM on September 21, 2018, 09:25:58 AM
Having seen first hand the amount of sheer, unadulterated incompetence at work in private companies of all sizes, I'm surprised most of them aren't just smoking craters.