833 matches found
Japanese Aerospace Firm Kawasaki Warns of Data Breach
Japanese aerospace company Kawasaki Heavy Industries on Monday warned of a security incident that may have led to unauthorized access of customer data. According to the company’s data breach notification, it first discovered unauthorized parties accessing a server in Japan, from an overseas offic...
Sophos breach: Customer data exposed due to permission access flaw
By Sudais Asif Sophos has acknowledged the breach by sending email notifications to targeted customers. Here's what happened and what data was exposed. This is a post from HackRead.com Read the original post: Sophos breach: Customer data exposed due to permission access flaw...
Safeguard Identity Data at the Source
Leverage Identity Cloud's built-in tooling to safeguard your customers' data from unnecessary exposure When your customers create an account on your website or application, they are entrusting their valuable information with you in order to establish a relationship. To maintain that relationship,...
The vulnerability of the integration component of the Magento Commerce software development and management platform, related to authentication errors, allows attackers to gain unauthorized access to protected information and delete customer data through the REST API without authorization.
The vulnerability of the integration component of the Magento Commerce software for online store development and management is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and delete customer data throug...
BigBasket data breach – 20 million customer data sold on dark web
By Deeba Ahmed India’s leading online supermarket BigBasket acknowledged putting sensitive data of more than 20 million users at stake. This is a post from HackRead.com Read the original post: BigBasket data breach - 20 million customer data sold on dark web...
Shopify: Order lookup features of Shopify Chat Application leads to customer orders enumeration due to lack of user input validation
It came to my attention that the Shopify Chat application allows a customer to retrieve its order status by only providing the order email and number. Noticing that it results in being provided the order status page link, I started playing a bit with both parameters and I found out that it is...
PT-2020-4578 · Adobe · Magento
Name of the Vulnerable Software and Affected Versions: Magento versions 2.4.0 and 2.3.5p1 and earlier Description: The issue is related to an incorrect permissions vulnerability in the Integrations component of Magento. This could allow authenticated users with permissions to the Resource Access...
EdgeWorkers Use Story: Creating high-performing, individualized campaign responses in online retail
As campaigns and digital experiences become more individualized, they can create a challenge for delivering content to consumers at the highest velocity. Having each paid search, social media, and email marketing campaign add unique query string parameters to requests is critical for tracking the...
Shopify Sufferd Data Breach Because of “Rogue” Employees
By Deeba Ahmed Shopify has blamed 2 of its support team members for stealing customer data from 200 merchants This is a post from HackRead.com Read the original post: Shopify Sufferd Data Breach Because of "Rogue" Employees...
Cross site request forgery (csrf)
Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request...
Shopify: Disclose customer orders details by shopify chat application.
Hello Shopify Security Team! Bug Summary: ============= This bug leads to disclose any store orders details including sensitive informations, through shopify chat app. the chat app can retrieve the orders details for unauthorized user. Reproduction steps: ============= - install shopify chat...
Robocall Legal Advocate Leaks Customer Data
A California company that helps telemarketing firms avoid getting sued for violating a federal law that seeks to curb robocalls has leaked the phone numbers, email addresses and passwords of all its customers, as well as the mobile phone numbers and other data on people who have hired lawyers to ...
Cloud hosting firm Blackbaud pays ransom after thwarting ransomware attack
By Deeba Ahmed Blackbaud claims it paid a ransom to protect customer data. This is a post from HackRead.com Read the original post: Cloud hosting firm Blackbaud pays ransom after thwarting ransomware attack...
Fitness firm V Shred exposes 606 GB worth of sensitive customer data
By Waqas V Shred was launched in 2016. This is a post from HackRead.com Read the original post: Fitness firm V Shred exposes 606 GB worth of sensitive customer data...
Dridex Malware
Summary This Alert is the result of recent collaboration between the Department of the Treasury Financial Sector Cyber Information Group CIG and the Department of the Treasury’s Financial Crimes Enforcement Network FinCEN to identify and share information with the financial services sector...
DigitalOcean Data Leak Incident Exposed Some of Its Customers Data
DigitalOcean, one of the biggest modern web hosting platforms, recently hit with a concerning data leak incident that exposed some of its customers' data to unknown and unauthorized third parties. Though the hosting company has not yet publicly released a statement, it did has started warning...
DigitalOcean Data Leak Incident Exposed Some of Its Customers Data
DigitalOcean, one of the biggest modern web hosting platforms, recently hit with a concerning data leak incident that exposed some of its customers' data to unknown and unauthorized third parties. Though the hosting company has not yet publicly released a statement, it did has started warning...
Unspecified Vulnerability in CIPPlanner CIPAce (CNVD-2020-21811)
CIPPlanner CIPAce is a suite of business process automation and application development platforms from the US-based CIPPlanner. A security vulnerability exists in CIPPlanner CIPAce, which can be exploited by an attacker to make an HTTP GET request to two files containing customer data and...
