December 2011 – Square Enix / Trion Worlds

Two minor data breaches affected video game developers Square Enix Final Fantasy and Trion Worlds Rift late last year, allegedly spilling sensitive information from the company’s servers. The attack against Square Enix hit 1.8 million users – mostly North American and Japanese customers who signe...

Customer Credit Reports for Resale in Black market

Customer Credit Reports for Resale in Black market Internet security concerns grew the most, Approximately half of respondents said they were seriously concerned about viruses, spam, and the safety of online shopping. 70% of respondents said they were seriously concerned about identity theft, and...

MSNBC: Hackers Crack Credit Report Sites, Sell Profiles

Hackers are actively exploiting weak Web site security at leading credit rating agencies and stealing customer credit reports for resale on the black market, according to a report by MSNBC. Well trafficked websites like AnnualCreditReport.com, Equifax.com, or CreditReport.com are being hacked and...

Online Dating Sites Getting Around With Customers Data

Just in time for Valentine’s Day, the privacy watchdogs over at the Electronic Frontier Foundation have put together a guide for those tempted to dance the algorithm electric. Their findings: online dating services may be getting around with your personal data. Leading online dating sites hold on...

Strato NumberFormatException - Validation Vulnerability

Document Title: =============== Strato NumberFormatException - Validation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=395 Release Date: ============= 2012-01-20 Vulnerability Laboratory ID VL-ID: ==================================== 395...

Zappos a division of Amazon got Hacked

Zappos a division of Amazon got Hacked A notification mail from Zappos is circulating in Customers that a division of Amazon "Zappos.com" got Hacked by Unknown Hackers. Notification mail indicated that names, email addresses, mailing addresses, and the last four digits of customer's social securi...

Specialforces.com Says Hack Of Customer Data Is Six Months Old

Just days after a successful attack on the security think tank Stratfor, Anonymous, the anarchic hacking collective, is getting headlines again for an attack on Specialforces.com, a Web site used by members of the armed forces law enforcement officers and gun enthusiasts. However, an employee...

GlobalSign Says No Evidence of CA Compromise Found

GlobalSign, the certificate authority that the attacker who compromised Comodo and DigitNotar claimed he had infiltrated as well, said it has completed its months-long security review and found no evidence that its CA infrastructure was compromised or that any rogue certificates had been issued...

Data Breaches for All

Sony’s online gaming platform, The PlayStation Network PSN, disappeared for more than a month starting in April, and no amount of double X and O-ing or right joysticking could save it. The reason? A massive attack on PSN’s network knocked the gaming giant offline and exposed the data of more than...

350,000 Epson Korea customers data breached

350,000 Epson Korea customers data breached Epson Korea Co., Ltd. said that hackers had breached the personal data of its 350,000 registered customers last week. An official at the South Korean affiliate of Seiko Epson Corp. said the company has reported the case to the communications regulator. ...

California Approves Data Security Rules for Smart Meters

The state of California has approved new rules to protect the data stored on so-called “smart meters,” in an effort to protect customer consumption data as household utilities are wired and connected to an IP-enabled “smart grid.” The California Public Utilities Commission CPUC, which regulates...

Asterisk2Billing v1.9.4 - SQL Injection Vulnerability

Document Title: =============== Asterisk2Billing v1.9.4 - SQL Injection Vulnerability Release Date: ============= 2011-08-11 Vulnerability Laboratory ID VL-ID: ==================================== 246 Product & Service Introduction: =============================== Asterisk ist eine freie Software...

Asterisk2Billing v1.9.4 - SQL Injection Vulnerability

Document Title: =============== Asterisk2Billing v1.9.4 - SQL Injection Vulnerability Release Date: ============= 2011-08-11 Vulnerability Laboratory ID VL-ID: ==================================== 246 Product & Service Introduction: =============================== Asterisk ist eine freie Software...

Zones Web Solution SQL Injection

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Zones Web Solution index.php?manufacturersid AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.zones.in/ Persian Gulf 4 Ever! Dork : "Powered By : Zones Web Solution"...

AirBerlin Website - Remote SQL Injection Vulnerabilities

Document Title: =============== AirBerlin Website - Remote SQL Injection Vulnerabilities Release Date: ============= 2011-07-20 Vulnerability Laboratory ID VL-ID: ==================================== 225 Product & Service Introduction: =============================== One of the most Famous Europe...

Epsilon Ups Ante on Security Following Breach

Nearly three months after marketing services firm Epsilon had its system breached, the company has begun to rebuild the security of its e-mail marketing platform. The firm has unveiled an array of enhancements they claim will mitigate “electronic crimes in motion” according to a press release...

Sega Says More Than One Million Affected By Sega Pass Breach

Sega has responded to the attack on its Sega Pass gaming network, saying that data belonging to more than a million of its customers was stolen. The attack on Sega, which came to light last week, is the latest in a string of such compromises of gaming and media companies. The Sega Pass attack...

Air India unit - Centaur Hotels website insecure - Passports, ID's, credit cards data at Risk

Air India unit - Centaur Hotels website insecure - Passports, ID's, credit cards data at Risk Website of Centaur Hotel at IGI airport New Delhi - https://centaurhotels.com/ used to upload customer data like passport, pan card, credit card and other forms of personal identification of their guests...

Congressmen, Witnesses Question Data Breach Bill's Specifics

In an initial hearing to discuss a proposed national data-breach notification bill on Wednesday, representatives and witnesses dissected the SAFE Data Act proposed by Rep. Mary Bono Mack and said that the legislation had a long way to go to be ready for prime time. The hearing, which is just the...

Citigroup Attackers Used Simple, Clever Entry Point

The technique hackers used to break into Citigroup’s network last month was at once clever and simpler than security researchers expected, a report from the New York Times says. According to the article, hackers were able to log onto a site used by the credit card company’s customers to gain acce...