consumer

Crunchyroll Got Breached. Their Systems Were Never Touched.

John Z Black Mar 29, 2026

Incidents & Breaches #crunchyroll #data-breach #okta #third-party-risk #supply-chain #zendesk #consumer #identity-chain

6.8 million Crunchyroll users had their data stolen through a three-hop attack chain that went from a vendor's infected laptop through Okta into Crunchyroll's customer service platform, without ever touching Crunchyroll's own systems.

Your Security Camera Is Probably Someone Else's Window Into the War

John Z Black Mar 28, 2026

Threat Intelligence #iot #ip-cameras #iran #russia #nation-state #hikvision #tp-link #wartime #physical-security #consumer

Nation-states are routinely hacking unpatched IP cameras to gather physical intelligence during active conflicts, and the cameras being targeted are the cheap, forgotten ones in your building's lobby.

Apple Is Literally Warning Millions of iPhone Users: You're Being Attacked Right Now

John Z Black Mar 28, 2026

Vulnerabilities & Patching #apple #ios #iphone #exploit #coruna #darksword #lockdown-mode #mobile-security #consumer

Apple pushed lock screen alerts to millions of iPhones warning of active attacks from the Coruna and DarkSword exploit kits -- and some users have no patch path at all.

Your Data This Week: Starbucks Employee Breach, Loblaw Customer Data, Steam Malware, and How to Respond to Each

John Z Black Mar 14, 2026

Consumer Security #starbucks #loblaw #steam #data-breach #malware #phishing #consumer #fbi #gaming

Three breaches hit this week through platforms people already trust. Starbucks employee data, Loblaw customer accounts, and FBI-flagged malware hiding in Steam games.