blog

Config Server Firewall (CSF) – How To Install and Configure CSF LFD

Config Server Firewall (CSF) – How To Install and Configure CSF LFD

joshwho July 7, 2022

Introduction Config Server Firewall (or CSF) is a free and advanced firewall for most...

Bottlenecks in your DNS traffic is used in conjunction with DDoS attacks – Enabling TCP BBR in Ubuntu can help smooth that

Bottlenecks in your DNS traffic is used in conjunction with DDoS attacks – Enabling TCP BBR in Ubuntu can help smooth that

joshwho July 4, 2022

Most DDoS attacks try to take advantage of any weak point they can find....

Stop Slowloris and other Slow Post/Get type Attacks on Apache 2.4 with mod_qos

Stop Slowloris and other Slow Post/Get type Attacks on Apache 2.4 with mod_qos

joshwho July 4, 2022

Apache 2.4 mod_qos Slowloris is designed so that a single machine (probably a Linux/UNIX...

Gatekeeper Free Opensource DDoS Protection

Gatekeeper Free Opensource DDoS Protection

joshwho July 3, 2022

What is Gatekeeper? Gatekeeper is the first open source DoS protection system. It is...

Here’s Why DDoS Attacks Have Become a Bigger Threat

Here’s Why DDoS Attacks Have Become a Bigger Threat

joshwho July 3, 2022

DDoS (Distributed Denial of Service) attacks are no longer top of mind; however, today...

Linux How to – Iptables block common attacks and exploits 2022

Linux How to – Iptables block common attacks and exploits 2022

joshwho July 3, 2022

Following list summaries the common attack on any type of Linux computer: Syn-flood protection...

How to Protect Your Website from Layer 7 and large scale DDoS attacks and many other exploits for free 2022

How to Protect Your Website from Layer 7 and large scale DDoS attacks and many other exploits for free 2022

joshwho July 3, 2022

The internet is now more sophisticated than ever before and so are the new...

Luxottica - 77,093,812 breached accounts May 19, 2023

In March 2021, the world's largest eyewear company Luxoticca suffered a data breach via one of their partners that exposed the personal information of more than 70M people. The data was subsequently sold via a popular hacking forum in late 2022 and included email and physical addresses, names, genders, dates of birth and phone numbers. […]

RentoMojo - 2,185,697 breached accounts May 10, 2023

In April 2023, the Indian rental service RentoMojo suffered a data breach. The breach exposed over 2M unique email addresses along with names, phone, passport and Aadhaar numbers, genders, dates of birth, purchases and bcrypt password hashes.

MEO - 8,227 breached accounts April 24, 2023

In early 2023, a corpus of data sourced from the New Zealand based face mask company MEO was discovered. Dating back to December 2020, the data contained over 8k customer records including names, addresses, phone numbers and passwords stored as MD5 Wordpress hashes. MEO did not respond to multiple attempts to report the breach.

Terravision - 2,075,625 breached accounts April 23, 2023

In February 2023, the European airport transfers service Terravision suffered a data breach. The breach exposed over 2M records of customer data including names, phone numbers, email addresses, salted password hashes and in some cases, date of birth and country of origin. Terravision did not respond to multiple attempts by individuals period over a period […]

OGUsers (2022 breach) - 529,020 breached accounts April 14, 2023

In July 2022, the account hijacking and SIM swapping forum OGusers suffered a data breach, the fifth since December 2018. The breach contained usernames, email and IP addresses and passwords stored as argon2 hashes. A total of 529k unique email addresses appeared in the breach.

The Kodi Foundation - 400,635 breached accounts April 13, 2023

In February 2023, The Kodi Foundation suffered a data breach that exposed more than 400k user records. Attributed to an account belonging to "a trusted but currently inactive member of the forum admin team", the breach involved the administrator account creating a database backup that was subsequently downloaded before being sold on a hacking forum. […]

Sundry Files - 274,461 breached accounts March 31, 2023

In January 2022, the now defunct file upload service Sundry Files suffered a data breach that exposed 274k unique email addresses. The data also included usernames, IP addresses and passwords stored as salted SHA-256 hashes.

Leaked Reality - 114,907 breached accounts March 31, 2023

In January 2022, the now defunct uncensored video website Leaked Reality suffered a data breach that exposed 115k unique email addresses. The data also included usernames, IP addresses and passwords stored as either MD5 or phpass hashes.

TheGradCafe - 310,975 breached accounts March 24, 2023

In February 2023, the grad school admissions search website TheGradCafe suffered a data breach that disclosed the personal records of 310k users. The data included email addresses, names and usernames, genders, geographic locations and passwords stored as bcrypt hashes. Some records also included physical address, phone number and date of birth. TheGradCafe did not respond […]

Shopper+ - 878,290 breached accounts March 11, 2023

In March 2023, "Canada's online shopping mall" Shopper+ disclosed a data breach discovered on a public hacking forum. The breach dated back to September 2020 and included 878k customer records with email and physical addresses, names, phone numbers and in some cases, genders and dates of birth.