OpenSC: Arbitrary code execution

Background OpenSC is a tools and libraries for smart cards. Description Multiple stack-based buffer overflow errors have been discovered in OpenSC. Impact A physically proximate attacker could possibly execute arbitrary code using a specially crafted smart card. Workaround There is no known...

Starbucks Patches Vulnerable iOS App

Starbucks has patched a vulnerability in its iOS app that was found last week spilling user data, including usernames and passwords, by adding what it’s called an “additional safeguard measure” to protect its customers. While it’s a relatively quick turnaround for the company – it only took about...

vSkimmer Point-of-Sale Terminals Server Information Disclosure

vSkimmer is a Trojan-like malware designed to infect Windows-based servers attached with payment card readers. Post infection, the malware gathers sensitive information such as Credit Card numbers and sends it back to the C server...

20 Million Credit Cards stolen in South Korea; 40% Population affected by the Data Leak

Since all threats to data security and privacy often come from outside, but internal threats are comparatively more dangerous and a difficult new dimension to the data loss prevention challenge i.e. Data Breach. The "Insider threats" have the potential to cause greater financial losses than attac...

Target Attackers Took 11 GB of Data, Researchers Say

The attackers who infiltrated Target’s network several weeks ago and made off with 40 million credit and debit card numbers used a multi-stage attack, funneling their stolen data through an FTP server and then a VPS server in Russia. It took more than two weeks, but the attackers eventually...

NSA admits to collect 200 Million text messages per day under Project DISHFIRE

After the exposure of various surveillance programs, including PRISM, XKeyscore, MUSCULAR, DROPOUTJEEP in recent revelation, NSA has come up as the only ‘Government that Actually Listen’. Another day and here comes another revelation - According to the The Guardian, National Security Agency NSA h...

Detecting and Preventing Compromises in Retail Payment Systems

Information Weeks Matthew Swartz published an article on the recently- confirmed payment card breaches at Target, Nieman Marcus and three other unnamed retailers. This article and many others reveal that these attacks involve sophisticated malware and some even suggest it is the work of the same...

US retailer Neiman Marcus confirmed data breach after TARGET

The TARGET Hack was not the only massive Data breach that happened during the last Black Friday, but also other three major US Retailers were also hacked. Recently, Neiman Marcus also confirmed a data breach that involves Credit card theft from its customers during the holiday shopping season,...

RAM Scrapers and the Target Data Breach

The retail and hospitality industries have a painful history with wonky point-of-sale systems and malware known as RAM scrapers. These attacks, which date back as many as six years, are designed to be injected into running processes and steal payment card data before it’s encrypted by a...

Hackers behind TARGET data breach looking for Pro-cracker to decrypt Credit card PINs

I think you haven’t forgotten the massive data breach occurred at TARGET, the third-largest U.S. Retailer during last Christmas Holidays. People shop during Black Friday sales in which over 40 million Credit & Debit cards were stolen, used to pay for purchases at its 1500 stores nationwide in the...

Staysure Hacked, Credit Card details of 93,000 Customers stolen

Staysure, a UK based Insurance company has suffered a massive data breach. More than 93,000 customers' sensitive financial data may have been compromised by unknown hackers. We became aware of the problem on November 14, and quickly informed the relevant card issuing bodies and subsequently The...

Ubuntu Update for linux USN-2075-1

Check for the Version of linux OpenVAS Vulnerability Test $Id: gbubuntuUSN20751.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for linux USN-2075-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

Ubuntu 13.10 : linux vulnerabilities (USN-2075-1)

Vasily Kulikov reported a flaw in the Linux kernel's implementation of ptrace. An unprivileged local user could exploit this flaw to obtain sensitive information from kernel memory. CVE-2013-2929 Dave Jones and Vince Weaver reported a flaw in the Linux kernel's per event subsystem that allows...

Use of 3DES to Encrypt Stolen Target PIN Data Invites Worry

Target Corp.’s admission that encrypted PIN data was stolen in the Black Friday breach was bad news for consumers. For security experts, especially cryptographers, particular exception was taken to the retail giant’s use of Triple DES 3DES encryption to keep the PIN data safe. With all crypto...

[CVE-2013-6986] Insecure Data Storage in Subway Ordering for California (ZippyYum) 3.4 iOS mobile application

Title: CVE-2013-6986 Insecure Data Storage in Subway Ordering for California ZippyYum 3.4 iOS mobile application Published: December 7, 2013 Reported to Vendor: May 2013 CVE Reference: CVE-2013-6986 https://vulners.com/cve/CVE-2013-6986 CVSS v2 Base Score: 4.9 CVSS v2 Vector...

Threat Outbreak Alert: Fake Credit Card Transaction Report Email Messages on December 19, 2013

Medium Alert ID: 32231 First Published: 2013 December 19 17:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a credit card transaction notification for the recipient. The text in the email message attempts to convince...

Beetel Connection Manager 'NetConfig.ini'文件处理远程缓冲区溢出漏洞

BUGTRAQ ID: 63414 Beetel Connection Manager是一套3G无线上网卡的连接管理器。 Beetel Connection Manager验证 NetConfig.ini 文件不正确时可触发缓冲区溢出，这可使上下文独立的攻击者造成应用崩溃，停止响应，也可能执行任意代码。 0 beetel Beetel Connection Manager PCWBTLINDV1.0.0B04 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Threat Outbreak Alert: Fake Visa Card Statement Notification Email Messages on December 8, 2013

Medium Alert ID: 32079 First Published: 2013 December 9 20:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a Visa card statement for the recipient. The text in the email message attempts to convince the recipient to...

ZippyYum 3.4 Insecure Data Storage

Title: CVE-2013-6986 Insecure Data Storage in Subway Ordering for California ZippyYum 3.4 iOS mobile application Published: DATE Reported to Vendor: May 2013 CVE Reference: CVE-2013-6986 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6986 CVSS v2 Base Score: 4.9 CVSS v2 Vector...

Biggest American Bank 'JPMorgan Chase' hacked; 465,000 card users' data stolen

JPMorgan Chase, one of the world's biggest Banks has recently announced that it was the victim of a cyber attack and warned round 465,000 of its holders of prepaid cash cards on the possible exposure of their personal information. In the Security Breach that took place on the bank's website...