8711 matches found
Wawa Data Breach: Malware Stole Customer Payment Card Info
Popular convenience-store chain Wawa Inc. has disclosed a data breach potentially affecting all of its 850 locations. The breach stemmed from malware on its in-store payment processing systems that collected customers’ payment card data – for almost 10 months. The popular chain of Wawa convenienc...
CVE-2019-17440 PAN-OS on PA-7000 Series: Improper restriction of communication to Log Forwarding Card (LFC) allows root access
Improper restriction of communications to Log Forwarding Card LFC on PA-7000 Series devices with second-generation Switch Management Card SMC may allow an attacker with network access to the LFC to gain root access to PAN-OS. This issue affects PAN-OS 9.0 versions prior to 9.0.5-h3 on PA-7080 and...
CVE-2019-17440
PAN-OS on PA-7000 Series: Improper restriction of communications to the Log Forwarding Card (LFC) allows an unauthenticated attacker with network access to the LFC to gain root access. Affected are PAN-OS 9.0.x prior to 9.0.5-h3 on PA-7080/PA-7050 with an LFC; deployments using the first‑gen SMC/...
Hackers Stole Customers' Payment Card Details From Over 700 Wawa Stores
Have you stopped at any Wawa convenience store and used your payment card to buy gas or snacks in the last nine months? If yes, your credit and debit card details may have been stolen by cybercriminals. Wawa, the Philadelphia-based gas and convenience store chain, disclosed a data breach incident...
PAN-OS on PA-7000 Series: Improper restriction of communication to Log Forwarding Card (LFC) allows root access
Improper restriction of communications to Log Forwarding Card LFC on PA-7000 Series devices with second-generation Switch Management Card SMC may allow an attacker with network access to the LFC to gain root access to PAN-OS. This issue affects PAN-OS 9.0 versions prior to 9.0.5-h3 on PA-7080 and...
PAN-OS on PA-7000 Series: Improper restriction of communication to Log Forwarding Card (LFC) allows root access
Improper restriction of communications to Log Forwarding Card LFC on PA-7000 Series devices with second-generation Switch Management Card SMC may allow an attacker with network access to the LFC to gain root access to PAN-OS. This issue affects PAN-OS 9.0 versions prior to 9.0.5-h3 on PA-7080 and...
LifeLabs Paid Hackers to Recover Stolen Medical Data of 15 Million Canadians
LifeLabs, the largest provider of healthcare laboratory testing services in Canada, has suffered a massive data breach that exposed the personal and medical information of nearly 15 million Canadians customers. The company announced the breach in a press release posted on its website, revealing...
rhel bug fix update
An update is available for libiscsi, netcf, sgabios. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Bug Fixes: Rocky Linux8.1 Snapshot3 - Passthrough PCI card...
ALBA-2019:4274 virt:rhel bug fix update
Bug Fixes: AlmaLinux8.1 Snapshot3 - Passthrough PCI card goes into error state if used in domain kvm BZ1764829 HPE 8.1 BUG Icelake: KVM missing .pconfig BZ1775133 Failed to create a VM via virt-manager or web console in AlmaLinux8.1 snapshot-2.1 BZ1775134 Intel 8.2 Bug Icelake-Server host,...
A week in security (December 9 – 15)
Last week on Malwarebytes Labs, we cautioned readers against purchasing potentially privacy-invasive, cyber-insecure smart doorbells, warned about a new credit card skimmer vulnerability embedded within hundreds of fraudulent web sites selling supposedly name-brand shoes, and looked at the newest...
Hundreds of counterfeit branded shoe stores hacked with web skimmer
By Uzair Amir Research suggests that there are hundreds of fake branded shoe websites that are infected with credit card skimmer, which is... This is a post from HackRead.com Read the original post: Hundreds of counterfeit branded shoe stores hacked with web skimmer...
FIN8 Targets Card Data at Fuel Pumps
The notorious FIN8 cybercrime group has a new target when it comes to skimming payment-card details from consumers: Point-of-sale PoS systems used at fuel pumps at gas stations. Visa warned this week in a public alert posted online that its Payment Fraud Disruption PFD department has seen at leas...
Hundreds of counterfeit online shoe stores injected with credit card skimmer
There's a well-worn saying in security: "If it's too good to be true, then it probably isn't." This can easily be applied to the myriad of online stores that sell counterfeit goods—and now attract secondary fraud in the form of a credit card skimmer. Allured by great deals on brand names, many...
Multiple Intel NUC Firmware Multiple Security Vulnerabilities
Description Multiple Intel NUC Firmware are prone to multiple unspecified security vulnerabilities. Attackers can leverage these issues to gain elevated privileges. Technologies Affected Intel Compute Card CD1IV128MK BIOS Intel Compute Card CD1M3128MK BIOS Intel Compute Card CD1P64GK BIOS Intel...
OpenSC has an unspecified vulnerability
OpenSC is an open source smart card tool and middleware. A security vulnerability exists in OpenSC versions 0.19.0 and earlier and versions 0.20.x through 0.20.0-rc3, which stems from the libopensc/card-setcos.c file not being read correctly. An attacker can exploit this vulnerability to perform...
Unauthorized Access Vulnerability in UPS Network Management Card
An unauthorized access vulnerability exists in the UPS Network Management Card, which can be exploited by an attacker to obtain sensitive information...
There’s an app for that: web skimmers found on PaaS Heroku
Criminals love to abuse legitimate services—especially platform-as-a-service Paas cloud providers—as they are a popular and reliable hosting commodity used to support both business and consumer ventures. Case in point, in April 2019 we documented a web skimmer served on code repository GitHub...
The vulnerability of Google Chrome, related to the insecure processing of credit card data during autofilling, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of Google Chrome relates to the insecure processing of credit card data during automatic filling. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created HTML page...
Cyber Monday: Tips for Safeguarding Personal Information
Cyber Monday draw millions of shoppers online for deals and savings, but this day also provides opportunities for an attacker to steal personal information. The Cybersecurity and Infrastructure Security Agency CISA reminds users to remain vigilant when browsing or shopping online. CISA encourages...