Pipka Card Skimmer Removes Itself After Infecting eCommerce Sites

A new JavaScript payment card skimmer, dubbed Pipka, has been identified on at least seventeen merchant websites attempting to target site visitors’ payment data. Unlike other skimmers, Pipka removes itself from the HTML code of compromised websites after exfiltrating payment card data – a...

Company Detected Years-Long Breach Only After Hacker Maxed Out Servers' Storage

What could be even worse than getting hacked? It's the "failure to detect intrusions" that always results in huge losses to the organizations. Utah-based technology company InfoTrax Systems is the latest example of such a security blunder, as the company was breached more than 20 times from May...

The Comprehensive Compliance Guide (Get Assessment Templates)

Complying with cyber regulations forms a significant portion of the CISO's responsibility. Compliance is, in fact, one of the major drivers in the purchase and implementation of new security products. But regulations come in multiple different colors and shapes – some are tailored to a specific...

Magento Warns E-Commerce Sites to Upgrade ASAP to Prevent Attacks

The popular e-commerce platform Magento is urging web administrators to install its latest security update in order to defend against malicious attacks in the wild that could exploit a critical remote code-execution vulnerability. While the company didn’t specify what kinds of potential attacks...

Facebook scams: Bad ads, bogus grants, and fake tickets lurk on social media giant

We recently highlighted new steps Instagram is taking to try and clamp down on scammers sending fake messages on their platform. It turns out, other social media giants are walking a similar path for a variety of bogus ads and other attacks. Facebook scams in particular have taken off, despite th...

Denial of Service Vulnerability in ZLAN Network Cards

ZLAN5103 can realize transparent data forwarding between RS232/485/422 and TCP/IP. Conveniently enables serial devices to connect to Ethernet and Internet, realizing the network upgrading of serial devices. ZLAN has a denial of service vulnerability, sending malformed RST packets to ZLAN5103 TCP...

Denial of Service Vulnerability in ZLAN5102 and ZLAN5103 NICs

ZLAN5102 serial server is a protocol converter between RS232/485 and TCP/IP developed by Shanghai Zoran Information Technology Co. This serial server can easily connect serial devices to Ethernet and Internet, and realize the network upgrade of serial devices.ZLAN5103 is a new generation of...

ALBA-2019:3785 libcacard bug fix and enhancement update

The libcacard packages contain the Common Access Card CAC emulation library. This update fixes the following bug: Backport the patch removing key caching to unbreak libcacard for CI usage BZ1750477. Users of libcacard are advised to upgrade to these updated packages, which fix this bug...

libcacard bug fix and enhancement update

The libcacard packages contain the Common Access Card CAC emulation library. This update fixes the following bug: Backport the patch removing key caching to unbreak libcacard for CI usage BZ1750477. Users of libcacard are advised to upgrade to these updated packages, which fix this bug...

Magecart Groups Attack Simultaneous Sites in Card-Theft Frenzy

In an interesting development on the financial cybercrime scene, different Magecart groups have been spotting stepping over each other and attacking the same sites. Magecart is an umbrella term encompassing several different threat groups who all use the same modus operandi: They compromise...

Tips to Accelerating PCI Data Security Standard Projects with Deep Security as a Service

Does your organization need to meet PCI DSS requirements? Are you struggling with multiple security tools? Or stretching your already overstretched team to prepare for an audit? Time to hit the accelerator with Trend Micro! If your applications deal with credit or payment card data, you need to g...

CVE-2019-12881

A flaw was found in the Linux kernel 4.15.0 on Ubuntu 18.04.2. The i915gemuserptrgetpages in drivers/gpu/drm/i915/i915gemuserptr.c could allow an attacker to corrupt the memory and crash the system if they have permission to issue an ioctl to a system with an i915 graphics card...

Huawei Emily-L29C Information Disclosure Vulnerability

The Huawei Emily-L29C is a smartphone from the Chinese company Huawei. An information disclosure vulnerability exists in the Huawei Emily-L29C. The vulnerability arises from a configuration or other error in the operation of a network system or product. An attacker can exploit this vulnerability ...

Leading Web Domain Name Registrars Disclose Data Breach

Another day, another massive data breach—this time affecting a leading web technology company, as well as both of its subsidiaries, from where millions of customers around the world have purchased domain names for their websites. The world's top domain registrars Web.com, Network Solutions, and...

Arbitrary File Overwrite

github.com/containers/libpod is vulnerable to arbitrary file overwrite. The vulnerability exists as it does not properly perform symlink processing and wild-card characters parsing, allowing for overwriting of existing files when an undesired glob operation occurs...

Magecart Gang Targets Skin Care Site Visitors For 5+ Months

The website of popular skin care brand First Aid Beauty has been hacked by the infamous Magecart group, which embedded digital card skimmers on the site to steal visitors’ payment-card information. The skimmers were undetected on the website for more than five months. First Aid Beauty is an...

Raccoon Malware Scavenges 100,000+ Devices to Steal Data

A new information stealer, dubbed Raccoon, is rapidly gaining popularity with cybercriminals. In just a few months, researchers say the malware has already infected hundreds of thousands of devices across the world to rove through victims’ credit card data, email credentials and more. The malware...

FBI Releases Article on Defending Against E-Skimming

The Federal Bureau of Investigation FBI has released an article to raise awareness on e-skimming threats. E-skimming occurs when an attacker injects malicious code onto a website to capture credit or debit card data or personally identifiable information PII. The Cybersecurity and Infrastructure...

Magecart 5 Linked to Carbanak Gang

Researchers have linked Magecart Group 5, the credit-card skimming cybercriminals behind the Ticketmaster breach, to Dridex phishing campaigns and the infamous Carbanak group. Magecart – which is an umbrella group encompassing several different affiliates all using the same modus operandi – injec...

“BriansClub” Hack Rescues 26M Stolen Cards

"BriansClub," one of the largest underground stores for buying stolen credit card data, has itself been hacked. The data stolen from BriansClub encompasses more than 26 million credit and debit card records taken from hacked online and brick-and-mortar retailers over the past four years, includin...