Minimize business disruption and move forward with solid assessment guidance

COVID-19 has seized the worlds attention by disrupting the economy, the workforce, and our personal lives. While no one knows when this pandemic is going to end or its lasting impact, Coalfire is listening closely to our customers and doing everything we can to minimize disruption to their...

Italian email provider Email.it hacked with data on sale

By Sudais Asif Italian email provider by the name of Email.it was hacked leading to a breach of the data of its 600,000 customers. This is a post from HackRead.com Read the original post: Italian email provider Email.it hacked with data on sale...

Imperva Wants to Hear From YOU!

Imperva is pleased to announce UserVoice, a new product feedback system that allows YOU to shape the future of Imperva product lines. UserVoice empowers Imperva users to share feedback and ideas in one comprehensive, crowd-sourced place where they can also see and react to the ideas others submit...

Virgin Media & T-Mobile data breach exposes customers data

By Deeba Ahmed Virgin Media and T-Mobile have suffered a data breach in which customers' data has been impacted. Heres's what happened. This is a post from HackRead.com Read the original post: Virgin Media & T-Mobile data breach exposes customers data...

Virgin Media Data Leak Exposes Details of 900,000 Customers

On the same day yesterday, when the US-based telecom giant T-Mobile admitted a data breach, the UK-based telecommunication provider Virgin Media announced that it has also suffered a data leak incident exposing the personal information of roughly 900,000 customers. What happened? Unlike the...

Virgin Media Data Leak Exposes Details of 900,000 Customers

On the same day yesterday, when the US-based telecom giant T-Mobile admitted a data breach, the UK-based telecommunication provider Virgin Media announced that it has also suffered a data leak incident exposing the personal information of roughly 900,000 customers. What happened? Unlike the...

License compatibility and merge rules for Veeam Availability Suite v10/v11

The following describes general licensing, compatibility and merge rules for end users/customers. It shows the monitoring and reporting capabilities of Veeam ONE licensed perpetually per socket and...

Top 5 Reasons to Attend Qualys Security Conference 2020 San Francisco

Are you interested in exploring the profound impact of digital transformation on the security industry, and how that impact affects practitioners? Are you planning to be in San Francisco during RSA Conference week? If yes, join us at Qualys Security Conference 2020 San Francisco on February 25!...

Intel CSME Vulnerability - Lenovo Support US

Lenovo Security Advisory: LEN-30525 Potential Impact: Privilege escalation, denial of service, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-14598 Summary Description: Intel reported a potential security vulnerability in CSME subsystem may allow...

Intel CSME Vulnerability - Lenovo Support US

No description provided...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Sterling B2B Integrator (CVE-2016-0702, CVE-2016-0705, CVE-2016-0798, CVE-2016-0799,  CVE-2016-0797).

Summary OpenSSL vulnerabilities were disclosed on March 1, 2016 by the OpenSSL Project. OpenSSL is used by IBM Sterling B2B Integrator. IBM Sterling B2B Integrator has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-0702 DESCRIPTION: OpenSSL could allow a local attacker to...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Sterling B2B Integrator

Summary OpenSSL vulnerabilities were disclosed by the OpenSSL Project. OpenSSL is used by IBM Sterling B2B Integrator. IBM Sterling B2B Integrator has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2179 DESCRIPTION: OpenSSL is vulnerable to a denial of service. By sending...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Sterling B2B Integrator (CVE-2015-3193, CVE-2015-3194, CVE-2015-3195, CVE-2015-3196, CVE-2015-1794)

Summary OpenSSL vulnerabilities were disclosed on December 3, 2015 by the OpenSSL Project. OpenSSL is used by IBM Sterling B2B Integrator. IBM Sterling B2B Integrator has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-3193 DESCRIPTION: OpenSSL could allow a remote attacker t...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Sterling B2B Integrator

Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by IBM Sterling B2B Integrator. IBM Sterling B2B Integrator has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2107 DESCRIPTION: OpenSSL could allow a remote attacker to...

Stolen card data of millions of Wawa customers sold on dark web

By Waqas Wawa, as you may know was hacked earlier but now, it is time for the company to face its worse nightmare... the Dark Web! This is a post from HackRead.com Read the original post: Stolen card data of millions of Wawa customers sold on dark web...

Starbucks: Singapore - IDOR in campaign.starbucks.com.sg

bytebunny discovered an Insecure Direct Object Reference IDOR exposing limited marketing data for customers in Singapore. @bytebunny — thank you for reporting the vulnerability and for confirming the resolution...

Access Misconfiguration for Customer Support Database

Today, we concluded an investigation into a misconfiguration of an internal customer support database used for Microsoft support case analytics. While the investigation found no malicious use, and although most customers did not have personally identifiable information exposed, we want to be...

Announcing the Microsoft Identity Research Project Grant

We are excited to announce the Microsoft Identity Research Project Grant a new opportunity in partnership with the security community to help protect Microsoft customers. This project grant awards up to $75,000 USD for approved research proposals that improve the security of the Microsoft Identit...

Podcast: What We've Learned from the Year of the Breach

This podcast is sponsored by Arctic Wolf. Large-scale data breaches hitting organizations like Capital One and Georgia Tech in 2019 show that companies continue to be targeted in malicious cyberattacks that expose customers’ personal data and valuable records. Threatpost host Cody Hackett sat dow...

LifeLabs Paid Hackers to Recover Stolen Medical Data of 15 Million Canadians

LifeLabs, the largest provider of healthcare laboratory testing services in Canada, has suffered a massive data breach that exposed the personal and medical information of nearly 15 million Canadians customers. The company announced the breach in a press release posted on its website, revealing...