CitiBank hacked & large number of customer data stolen

CitiBank hacked & large number of customer data stolen Security breaches happen, they're going to continue to happen … the mission of the banking industry is to keep the customer base safe and customers feeling secure about their financial transactions and payments Citigroup said today that hacke...

CitiBank hacked & large number of customer data stolen

CitiBank hacked & large number of customer data stolen Security breaches happen, they're going to continue to happen … the mission of the banking industry is to keep the customer base safe and customers feeling secure about their financial transactions and payments Citigroup said today that hacke...

Following Breach of 283K, Honda Canada Faces Lawsuit

Honda Canada Inc. has announced it was the victim of an attack in March that exposed the records of over 283,000 car owners, potentially putting them at risk of targeted scams. Data such as the owners’ names, addresses and even their Vehicle Identification Numbers VINs were leaked when attackers...

HB eCommerce - SQL Injection

HB eCommerce - SQL Injection ------------- HB ECOMMERCE SQL Injection Vulnerability --------------- ------------------------------------------------------------------------ ------------------------------------------------------------------------ + Exploit Title: HB ECOMMERCE SQL Injection...

Sony Adds New Chapter to Data Breach Response Manual

In the course of the last five or six years, there has come to be a fairly well-established and familiar cycle for data breaches. Company X discovers an attack that compromised some customer data; it investigates and assesses the damage; it reports the breach to the relevant authorities and...

Stolen data may be sold on cyber black market !

Hackers behind what computer security experts believe could be the biggest data theft in US history may be planning to sell the information to cyber criminals for targeted scams. And while the tens of millions of names and email addresses swiped from online marketing firm Epsilon do not appear to...

Database of banking recruitment website Efinancialcareers-gulf.com hacked !

The database of global banking recruitment website efinancialcareers-gulf.com has been hacked, according to the former CEO of Credit Suisse Private Bank Australia, Nick Kalikajaros. The British company that has Australian operations believed its registered users' names, email addresses, registere...

Lush Cosmetics Australian website hacked !

The Australian and New Zealand shopping site of cosmetics retailer Lush has been hacked just weeks after a similar breach occurred on the UK site. Credit card details and other intimate information of shoppers have been exposed. If you visit the Lush Cosmetics Australian website you will find a...

UConn Co-op website hacked !

Storrs : A computer hacker accessed the customer database of HuskyDirect.com, a website that sells sports paraphernalia from the UConn Co-op, prompting the store to order the vendor that manages the site to take it down. The Co-op announced Tuesday that it has notified law enforcement of the...

Russian payment processor ChronoPay.com Hacked !

Criminals this week hijacked ChronoPay.com, the domain name for Russia's largest online payment processor, redirecting hundreds of unsuspecting visitors to a fake ChronoPay page that stole customer financial data. Reached via phone in Moscow, ChronoPay chief executive Pavel Vrublevsky said the...

Millions of customer's email addresses stolen from Honda !

American Honda says it has contacted millions of its customers after hackers stole a database containing names, email addresses, and VINs the Vehicle Identification Number, or unique 17 character ID for your motor vehicle. The obvious danger is that cybercriminals might use the list to send out...

Hamburgled: Third Party Breach Spills Customer Data From McDonald's, Others

UPDATE McDonald’s has served billions of hamburgers, but thousands of those customers may be regretting their patronage, after the fast food giant acknowledged that contact information for an unknown number of customers was stolen from a third party e-mail marketing firm it uses. McDonald’s said...

7) Reputation matters – check it!

When you walk into a doctor’s office, you like to see those frames hanging, right? The degrees from the prestigious medical school and certificates of completion from a reputable hospital residency program? The license from your state’s Board of Registration in Medicine, maybe? They don’t mean yo...

BSI Hotel Booking System Admin 1.42.0 - Authentication Bypass

BSI Hotel Booking System Admin 1.42.0 - Authentication Bypass ----------------------------------------------------------------------------------------- ECHOADV113$2010 BSI Hotel Booking System Admin Login Bypass Vulnerability...

THQ.com SQL Injection

This is pretty much because I want to embarrass these assholes. See: http://gamepolitics.com/2010/06/14/exec-thq-anti-used-game-initiative-could-make-everyone-happy SQLi 1: http://www.thq.com/us/mythq/register?contentType=GAMEALERT&alertGame='4896 This one is pretty obvious. It's an injection via...

Wyndham Hotels Hit Again By Hackers

Hackers broke into computer systems at Wyndham Hotels & Resorts recently, stealing sensitive customer data. The break-in occurred between late October 2009 and January 2010, when it was finally discovered. This is the third data breach reported by Wyndham in the past year. Read the full article...

CVE-2009-4236

The process function in data/class/pages/admin/customer/LCPageAdminCustomerSearchCustomer.php in EC-CUBE Ver2 2.4.0 RC1 through 2.4.1, and Community Edition r18068 through r18428, allows remote attackers to obtain sensitive information customer data via unknown vectors related to sessions...

Design/Logic Flaw

The process function in data/class/pages/admin/customer/LCPageAdminCustomerSearchCustomer.php in EC-CUBE Ver2 2.4.0 RC1 through 2.4.1, and Community Edition r18068 through r18428, allows remote attackers to obtain sensitive information customer data via unknown vectors related to sessions...

CVE-2009-4236

The process function in data/class/pages/admin/customer/LCPageAdminCustomerSearchCustomer.php in EC-CUBE Ver2 2.4.0 RC1 through 2.4.1, and Community Edition r18068 through r18428, allows remote attackers to obtain sensitive information customer data via unknown vectors related to sessions...

HSBC Warns of Exposed Customer Info

HSBC Bank says a bug in its imaging software inadvertently exposed sensitive data about some of its customers going through bankruptcy proceedings. Read the full article. Computerworld...