0

There are many reports of data breaches, especially ransomware attacks, in the news lately. But it is difficult to determine the root cause or what vulnerabilities were exploited for each one. I would like to know exactly how attackers are getting into these companies’ servers so that I can be proactive and take preventative measures.

Is there some website somewhere which explains the technical details of real world breaches so that others may learn these lessons?

  • Many breaches are through non-technical means (e.g. social engineering), so there aren't many details in this case. – multithr3at3d Nov 22 at 16:47
0

Most of breached website won't expose the technical flaws exploited by the attacker since it would directly or indirectly expose their system, and potentially, another attacker can exploit that information to their advantage.

You can find brief cause of almost each major data breaches in Wikipedia though:

See https://en.wikipedia.org/wiki/List_of_data_breaches

| improve this answer | |
0

The Privacy Rights Clearinghouse keeps a comprehensive Chronology of Data Breaches, and includes Type of Breach and Type of Business.

See https://privacyrights.org/data-breaches

It gives you the threat vector (type) but does not include technical details.

I often check Google to research root cause technical details to understand the nature of a big hack, and the vulnerability. Sometimes it's easy to track down good technical articles on the causes of the breach. Other times there does seem to be much disclosure, as the other answer suggests. No one wants to really say what vulnerability they left unprotected.

| improve this answer | |

Not the answer you're looking for? Browse other questions tagged or ask your own question.