Breach report spreads to Mastodon
2 Nov 1 12:05 PM · 10d ago · 3 posts · 1 source · development 2 of 2
The Frontier Airlines breach allegation begins circulating on Mastodon as users share the Reddit discussion link.
Frontier Airlines Airline subject of breach report
The whole story articlesposts the bright band is this development · numbered dots are the others · click one to jump
What people said 12 voices · verbatim
-
https://pwn.watchhttps://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...> it feels like we're actively witnessing a corporate reckoning around security posture the likes of which has never occurred.As a cyber person, I agree. The theater has met reality, and those who put in…
-
H
Frontier air likely compromised https://www. reddit.com/r/frontierairlines/ comments/1xl20e8/psa_email_scam/
-
Norwegian cruise line had a similar thing recently with emails going out with actual booking information. Basically identical to the frontier scam emails. I wonder if there’s some customer service software that’s being exploited that they both use.Edit: some info from the NcL one with screenshots that look similar
-
Earlier this year, Frontier was one of the orgs that got their data leaked thanks to incorrectly configured security settings on their Microsoft Power Pages based website. While this is unlikely to be the source for current flight confirmation numbers, such data could sure help in phishing operations.
-
Someone found a vulnerability in the system of Hong Kong Airlines that let the user to see the details of another passenger by changing a few characters in the URL. He reported the issue to the airlines. Then he was prosecuted and found guilty for hacking.Tells you a lot about the attitude of many cooperations about these vulnerabilities.
-
My guess is something related to looking up Frontier flight status was abused to enumerate all active flight itineraries.If Frontier had been completely breached and all data compromised, there's likely more lucrative things the attacker can do than just using the data to enhance their credit card stealing phishing attack.
-
The "All modern digital infrastructure" xkcd (https://xkcd.com/2347/) where they had a fragile tower of blocks needs an update where those blocks are now collapsed on the floor in a complete mess.
-
The corporate reckoning will only come if there's actual consequences for any of this. There haven't been any when this was happening to one big company a month, there won't be any when it starts happening to five big companies a day.
-
It seems early to speculate, but if this is related to the massive uptick in CVEs we've been seeing recently it feels like we're actively witnessing a corporate reckoning around security posture the likes of which has never occurred.
-
I'm not sure there will be corporate reckoning. Unless security breaches come with business impacting consequences, they will continue to ignore it and just pay out occasional class action lawsuit.
-
For anyone else who has never heard of it: Frontier Airlines is a budget airline company based in Colorado USA.
-
Only 2 breaches/critical remote CVEs on HN frontpage today? Must be a slow news day lol!
All 2 developments of Frontier Airlines data breach reported on social platforms →
Hacker NewsMastodonNewswires