[mothered]

Greetings everyone,

Yet again another data breach, this time Involving Saks Fifth Avenue and also Lord & Taylor. Will our Information and credentials ever be safe with a given entity? Never.

A well-known ring of cybercriminals has obtained more than five million credit and debit card numbers from customers of Saks Fifth Avenue and Lord & Taylor, according to a cybersecurity research firm that specializes in tracking stolen financial data. The data, the firm said, appears to have been stolen using software that was implanted into the cash register systems at the stores and that siphoned card numbers until last month.

The theft is one of the largest known breaches of a retailer and shows just how difficult it is to secure credit-card transaction systems

Source.

[Kid]

Well, the owners of those "Credit-card transaction systems" basically will try to "secure" their systems more. But sometime the same thing will happen.

[Bish0pQ]

2018 has just started and there already have been numerous data breaches. I hope this year companies will actually start realizing how important security is.

[mothered]

2018 has just started and there already have been numerous data breaches.

I see It everyday, I personally do It everyday and to be honest, the magnitude of vulnerabilities have significantly Increased over the last decade or so.

I'm at a loss as to why companies (even "tech" related that I've compromised), leave themselves exposed to exploitation. Critical data In the hands of someone with malicious Intent, can have catastrophic effects on a very large scale- on both business and personal levels.

[Bish0pQ]

2018 has just started and there already have been numerous data breaches.

I see It everyday, I personally do It everyday and to be honest, the magnitude of vulnerabilities have significantly Increased over the last decade or so.

I'm at a loss as to why companies (even "tech" related that I've compromised), leave themselves exposed to exploitation. Critical data In the hands of someone with malicious Intent, can have catastrophic effects on a very large scale- on both business and personal levels.

I can imagine that, that is also mainly because IT just isn't cheap. Especially for smaller companies, a website and infrastructure can be a big part of the expenses of the company. That's while they put a lot of the developers to get it done as fast as possible so it's as cheap as possible. Only problem is that that causes that they create a functional, good looking website, but there is less time for testing and finding security related issues.

It still is a stupid idea, since pretty much all the information is on the internet, it's not that you have to do years of research to implement some basic security measures in your website/infrastructure.

[mothered]

I can imagine that, that is also mainly because IT just isn't cheap. Especially for smaller companies, a website and infrastructure can be a big part of the expenses of the company. That's while they put a lot of the developers to get it done as fast as possible so it's as cheap as possible.

Very good point.

The upside of companies being compromised (without critical data loss and/or downtime), Is that It forces the vendor In fixing their design and security.