Verify Your Valentine

This Valentine’s Day, before you go looking for love in all the wrong chat rooms, CISA reminds users to be wary of internet romance scams. At first, cyber criminals promise the reward of romance after adopting an alias to appear as a potential partner. Once your heart is hooked on hope, they turn...

Complaint Management System 1.0 Shell Upload

Title: Complaint Management System v1.0- unrestricted file upload leading to RCE Exploit Author: Mohamed Elobeid 0b3!d Date: 2020-08-21 Vendor Homepage: https://www.sourcecodester.com/php/14206/complaint-management-system.html Software Link:...

The FBI Says ‘Boogaloo Boys’ Bought 3D-Printed Gun Parts

A criminal complaint alleges that a West Virginia man disguised the plastic components as wall hangers and sold hundreds of them online...

Nationwide Facial Recognition Ban Proposed By Lawmakers

Lawmakers have proposed legislation that would indefinitely ban the use of facial recognition technology by law enforcement nationwide. The new bill comes after months of public concerns surrounding facial recognition’s implications for data privacy, government surveillance and racial bias. The...

IC3 Releases Alert on Mobile Banking Apps

The Internet Crime Complaint Center IC3 has released an alert warning consumers of cyber risks associated with mobile banking apps. As more consumers rely on mobile apps for banking, malicious cyber actors are likely to increasingly target them with app-based banking Trojans and fake banking apps...

Hurricane-Related Scams

June 1 marks the official start of the 2020 Atlantic hurricane season. The Cybersecurity and Infrastructure Security Agency CISA warns users to remain on alert for malicious cyber activity targeting potential disaster victims and charitable donors following a hurricane. Fraudulent emails—often...

Logic Flaw Vulnerability in Phpgurukul Complaint Management System in PHP

Phpgurukul Complaint Management System in PHP is a PHP project that can be used to request complaints through an online service. A logic flaw vulnerability exists in Phpgurukul Complaint Management System in PHP, which can be exploited by an attacker to bypass normal user login and gain...

SQL Injection Vulnerability in Complaint Management System

Complaint Management System is a PHP project that allows complaints to be requested through an online service. The system is built using PHP, HTML, MYSQLi and Javascript. The Complaint Management System suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain...

TikTok Violated Children’s Privacy Law, FTC Complaint Says

The popular video sharing app TikTok has landed in hot water again over privacy issues. On Thursday, a group of privacy advocates filed a complaint with the Federal Trade Commission FTC alleging the platform failed to adequately protect children’s privacy. The complaint alleged that TikTok violat...

Complaint Management System 4.2 - Persistent Cross-Site Scripting

Exploit Title: Complaint Management System 4.2 - Persistent Cross-Site Scripting Author: Besim ALTINOK Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/complaint-management-sytem/ Version: v4.2 Tested on: Xampp Credit: İsmail BOZKURT ------ Details: 1- Vulnerable cod...

Complaint Management System 4.2 - Cross-Site Request Forgery (Delete User) Vulnerability

Exploit for php platform in category web applications Exploit Title: Complaint Management System 4.2 - Cross-Site Request Forgery Delete User Author: Besim ALTINOK Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/complaint-management-sytem/ Version: v4.2 Tested on:...

IC3 Releases Alert on Extortion Email Scams

The Internet Crime Complaint Center IC3 has released an alert warning of a recent increase in extortion email scams. Cyber criminals threaten to release sexually explicit photos or videos of victims unless they agree to send payment. The Cybersecurity and Infrastructure Security Agency CISA...

Be Cautious of Romance Scams

This Valentine’s Day, the Cybersecurity and Infrastructure Security Agency CISA reminds users to be wary of internet romance scams. Cyber criminals partaking in this type of fraud target victims, gain their confidence, and convince them to transfer funds. When online dating, use caution and never...

IC3 Issues Alert on Employment Scams

The Internet Crime Complaint Center IC3 has issued an alert warning consumers of fake jobs and hiring scams targeting applicants’ personally identifiable information PII. Cyber criminals posing as legitimate employers spoof company websites and post fake job openings to lure victims. Cyber...

Attacker Causes Epileptic Seizure over the Internet

This isn't a first, but I think it will be the first conviction: The GIF set off a highly unusual court battle that is expected to equip those in similar circumstances with a new tool for battling threatening trolls and cyberbullies. On Monday, the man who sent Eichenwald the moving image, John...

Epilepsy Foundation Bombarded with Seizure-Triggering Twitter Posts

The Epilepsy Foundation on Monday filed a criminal complaint against a number of undisclosed Twitter users after they bombarded its Twitter feed in November with a barrage of posts of flashing or strobing lights — exposing its thousands of followers to potential seizure-triggering images. The...

NGINX office in Moscow raided by police

By Waqas Russian authorities have raided NGINX offices in Moscow over a complaint filed by Rambler. Here's what happened: This is a post from HackRead.com Read the original post: NGINX office in Moscow raided by police...

Read the Trump Whistleblower Complaint Right Here

A conversation between Donald Trump and Ukrainian president Volodymyr Zelensky sparked a detailed complaint from an intelligence community whistle-blower. Here it is...

Potential Hurricane Dorian Cyber Scams

The Cybersecurity and Infrastructure Security Agency CISA warns users to remain vigilant for malicious cyber activity targeting Hurricane Dorian disaster victims and potential donors. Fraudulent emails commonly appear after major natural disasters and often contain links or attachments that direc...

Former AWS Engineer Arrested as Capital One Admits Massive Data Breach

A massive breach of Capital One customer data has hit more than 100 million people in the U.S. and 6 million in Canada. Thanks to a cloud misconfiguration, a hacker was able to access to credit applications, Social Security numbers and bank account numbers in one of the biggest data breaches to...