Xfinity discloses data breach after recent Citrix server hack (www.bleepingcomputer.com)
from LollerCorleone@kbin.social to cybersecurity@infosec.pub on 19 Dec 2023 06:19
https://kbin.social/m/cybersecurity@infosec.pub/t/712190

Comcast Cable Communications, doing business as Xfinity, disclosed on Monday that attackers who breached one of its Citrix servers in October also stole customer-sensitive information from its systems.

#cybersecurity

threaded - newest

solariplex@slrpnk.net on 19 Dec 2023 06:46 collapse

They were revealed to brag to ad sellers about having access to tons of sensitive information about its customers, by spying on e.g. ambient conversations through smartphones and smart TVs, right?

Or was it them who requested customers install an xfinity root certificate on their phone, without telling it would enable xfinity to man-in-the-middle all their internet activity?

Funny, it’s almost like fucking around with peoples’ privacy and security inevitably leads to finding out

GlitzyArmrest@lemmy.world on 19 Dec 2023 07:47 next collapse

Unfortunately, Comcast will get a slap on the wrist and the customers will be the ones finding out.

MSgtRedFox@infosec.pub on 20 Dec 2023 02:29 collapse

I just heard about the root certificate thing from security now podcast.

It blows my mind there were trying to do that level of interception.

Exceptionally bad since most normal people have no concept of the gravity of installing a root cert.

solariplex@slrpnk.net on 20 Dec 2023 21:15 collapse

Hello, fellow SN enjoyer! That’s where I first heard it as well