2601 matches found
CVE-2018-6236
A Time-of-Check Time-of-Use privilege escalation vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222813 by the tmusa driver. An attacker must first obtain the...
Phone Maker BLU Settles with FTC Over Unauthorized User Data Extraction
Android phone-maker BLU Products agreed to a proposed settlement on Tuesday with the Federal Trade Commission, over allegations it allowed the third-party firm Adups Technology to collect detailed consumer data from users without their consent. In an administrative complaint filed earlier this we...
The Internet of Everything and digital privacy: what you need to know
If you don’t already own Internet of Things IoT devices, you likely will soon. IoT-enabled devices are physical gadgets with built-in Internet connectivity that allow data transmission; often this happens in the background with no indication to the user that anything is happening. The IoT is more...
HackerOne CEO Talks Bug Bounty Programs at RSA Conference
SAN FRANCISCO – Marten Mickos, HackerOne CEO, catches up with Threatpost at RSA Conference to discuss hot-button issues around modern bounty programs. Topics range from how to design a program to protect consumer privacy and vulnerability disclosure issues. Mickos also reflects on the growing...
Advancing threat protection through industry-leading research
At Trend Micro we’ve been protecting our customers around the world for 30 years. So what’s the secret to staying at the cutting edge of the industry for all this time? By investing significant resources into forward-looking threat research, we’ve been able to anticipate where the black hats are...
Public Hearing on IoT Risks
The US Consumer Product Safety Commission is holding hearings on IoT risks: The U.S. Consumer Product Safety Commission CPSC, Commission, or we will conduct a public hearing to receive information from all interested parties about potential safety issues and hazards associated with...
Take these steps to stay safe from counterfeit software and fraudulent subscriptions
This post is authored by Matt Lundy, Assistant General Counsel, Microsoft. Software piracy and fraudulent subscriptions are serious, industry-wide problems affecting consumers and organizations around the world. In 2016, 39 percent of all software installed on computers was not properly licensed,...
San Diego Sues Experian Over ID Theft Service
The City of San Diego, Calif. is suing consumer credit bureau Experian, alleging that a data breach first reported by KrebsOnSecurity in 2013 affected more than a quarter-million people in San Diego but that Experian never alerted affected consumers as required under California law. The lawsuit,...
Survey: Americans Spent $1.4B on Credit Freeze Fees in Wake of Equifax Breach
Almost 20 percent of Americans froze their credit file with one or more of the big three credit bureaus in the wake of last year's data breach at Equifax, costing consumers an estimated $1.4 billion, according to a new study. The findings come as lawmakers in Congress are debating legislation tha...
National Consumer Protection Week
March 4–10 is National Consumer Protection Week NCPW, an event to encourage people and businesses to learn more about avoiding scams and understanding consumer rights. During NCPW, the Federal Trade Commission FTC and its partners highlight free resources to help protect consumers. NCCIC/US-CERT...
SQL injection vulnerability in the goods_order.class.php page of the B2B2C multi-store system of UQCMS Cloud Commerce (CNVD-2017-37553)
UQCMS cloud business system is a program using PHP + MYSQL, template using smarty template B2B2C e-commerce software. A SQL injection vulnerability exists in the goodsorder.class.php page of the UQCMS Cloud Business B2B2C Multi-Store System due to the program's failure to adequately filter...
Can Consumers' Online Data Be Protected?
Everything online is hackable. This is true for Equifax's data and the federal Office of Personal Management's data, which was hacked in 2015. If information is on a computer connected to the Internet, it is vulnerable. But just because everything is hackable doesn't mean everything will be hacke...
Turns out Equifax breach was way bigger than initially thought
By Carolina On July 29th Equifax, a consumer credit reporting agency in the United This is a post from HackRead.com Read the original post: Turns out Equifax breach was way bigger than initially thought...
w4.stern.nyu.edu XSS vulnerability
Open Bug Bounty ID: OBB-550681 Description| Value ---|--- Affected Website:| w4.stern.nyu.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Tax Identity Theft Awareness Week
Tax Identity Theft Awareness Week is January 29 to February 2, and many federal agencies are offering information and resources to help consumers learn to protect themselves from tax-related identity theft and Internal Revenue Service IRS imposter scams. NCCIC/US-CERT encourages consumers to revi...
Fixing the Meltdown and Spectre vulnerabilities
Two days ago, Graz University of Technology published a paper describing a pair of attacks on common microprocessors. The underlying vulnerability affects Intel, AMD, and ARM processors. All contemporary microprocessors pre-execute instructions. In other words, the vulnerability bypasses address...
December 21, 2017 – Morning Cyber Coffee Headlines – “Frosty the Snowman” Edition
Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! December 21, 2017 - Headlines Carbon Black in the News: Ransomware dominates th...
PHP Scripts Mall Consumer Complaints Clone Script SQL Injection Vulnerability
PHP Scripts Mall Consumer Complaints Clone Script is a set of PHP based consumer online complaints and reviews website script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Consumer Complaints Clone Script version 1.0. A remote attacker can exploit the...
