Student Suspected in University Hack That Leaked Info of 654K Cornhuskers

Officials at the University of Nebraska suspect a current undergraduate student is behind a hack earlier this month that appears to have spilled the sensitive information of tens of thousands of past and present students. According to a report from the Omaha World-Herald today, Police Chief Owen...

Serco: 'Sophisticated' Attack On U.S. Govt. Pension Plan Nets Info On 123k

Serco Inc., a well-known contractor working with the U.S. government, announced that it was the target of a sophisticated attack that exposed data on 123,000 civil employees of the Federal government and their families, including names, addresses and social security numbers taken from the company...

phpCollab 2.5 - Direct Request Multiple Protected Page Access

source: https://www.securityfocus.com/bid/53675/info phpCollab is prone to an unauthorized-access and an arbitrary-file-upload vulnerabilities. Attackers can leverage these issues to gain unauthorized access to application data and to upload and execute arbitrary code in the context of the...

Anonymous hacks Bureau of Justice and leaks 1.7GB of data

Anonymous hacks Bureau of Justice and leaks 1.7GB of data Anonymous has apparently hacked the United States Bureau of Justice Statistics and posted 1.7GB of data belonging to the agency on The Pirate Bay. This is a Monday Mail Mayhem release. Online statements attributed to Anonymous said they we...

December 2011 – Square Enix / Trion Worlds

Two minor data breaches affected video game developers Square Enix Final Fantasy and Trion Worlds Rift late last year, allegedly spilling sensitive information from the company’s servers. The attack against Square Enix hit 1.8 million users – mostly North American and Japanese customers who signe...

June 2011 – Epic Games & Codemasters Hacks

Happening almost simultaneously with the hacks at Nintendo, Bethesda, and other firms, the Epic Games hack spilled email addresses and encrypted passwords online and prompted the company to reset all of its users’ passwords. Codemasters had it bad too: their breach exposed the personal informatio...

June 2011 – Nintendo, Bethesda Softworks, Minecraft, EVE Online, League of Legends

A cadre of video game companies including Bethesda Softworks, Minecraft and Nintendo was targeted in June when the hacktivist group Lulzsec raided servers belonging to the firms. Bethesda had information on about 200,000 users of its Brink video game pilfered – but not released. Servers at...

June 2011 – Bioware hacked, EA info compromised

Electronic Arts’ Bioware, creators of MMORPG Star Wars: The Old Republic and the popular Mass Effect and Dragon Age series had a hacker infiltrate a decade-old server that was hosting the Neverwinter Nights forums in June, 2011. While no social security numbers or credit cards were compromised, E...

April 2011 – Sony PSN

Executives at Sony probably didn’t anticipate that a lawsuit against technology whiz kid George Hotz would end up backfiring as spectacularly as it did. The missing ingredient? The hacktivist group Anonymous, which adopted Hotz as a cause célèbre and retaliated with an attack on Sony’s Play Stati...

A CISO's Guide To Application Security – Part 5: Justifying an Investment in AppSec

This post is the last in a 5-part series on Application Security, or “AppSec”. This blog post series has examined the growing threats to software, defined the components of a sound AppSec program, described an evolutionary path to AppSec maturity, and considered a number of tools and technologies...

Kickstarter Data Breach Publishes 70,000 Startup Ideas

An application programming interface API error on the popular Kickstarter crowdfunding website exposed the plans and descriptions of more than 70,000 yet-to-be launched projects. The API bug exposed project descriptions, goals, durations, rewards, videos, images, locations, categories, and...

Bogus Report: 55,000 Twitter accounts compromised

Bogus Report: 55,000 Twitter accounts compromised Thousands of Twitter passwords were exposed this week and the site was looking into matter. According to a message posted on Twitter's Japanese blog, None of the recently leaked Twitter logins and passwords came from within the company. Twitter ha...

A CISO's Guide To Application Security – Part 4: Weighing AppSec Technology Options

This post is the fourth in a 5-part series on Application Security, or “AppSec”. The series will define the components of a sound AppSec program, delineate the growing threats to software, weigh the costs of a data breach, and outline the CISO’s responsibility in managing software security risk...

FEMA: State, Local Officials Not Prepared to Respond to Cyberattack

A report by the Federal Emergency Management Agency FEMA finds that state and local government officials in the U.S. are pessimistic about their ability to respond to a cyberattacks. The National Preparedness Report NPR was commissioned by the Obama Administration. It found that, although the...

Global Payments Hack Could Span to June 2011, Affect Over 1.5M Cards

The data breach that hit payment processor Global Payments earlier this year could have dated back to June 2011, launching speculation over whether more credit card numbers were stolen than initially reported. Several alerts issued by Visa and Mastercard, obtained by KrebsonSecurity.com, suggest...

Hacker claims to hack European Space Agency, NASA, US Air Force and Military, French Ministry of Defence

Hacker claims to hack European Space Agency, NASA, US Air Force and Military, French Ministry of Defence Hackers with group name "The Unknowns" claimed to Hack European Space Agency, NASA, US military, US Air Force, Harvard.Renault Company, French Ministry of Defence, Bahrain Ministry of Defecene...

Fat Finger Error Lands Welsh Health Board $114K Fine

An e-mail gaffe and a spelling mistake by a doctor led to a breach of the UK’s Data Protection Act last year, according to a press release by the Information Commissioner’s Office today. The Aneurin Bevan Health Board ABHB in South Wales was fined £70,000 about $114,000 USD after it mistakenly se...

UK Govt. Investigating London Marathon Data Breach That Spilled Info On 38,000

The UK Information Commissioner’s Office ICO said it is looking into a possible data breach of the Website used by organizers of the London Marathon – major, international sporting event that attracted more than 37,000 runners for the 37th running on April 22nd. According to a BBC report, the hom...

VMWare Source Code leaked by Anonymous Hackers

VMware on Tuesday announced that a single file from its ESX server hypervisor source code has been posted online, and it held out the possibility that more proprietary files could be leaked in the future. "The fact that the source code may have been publicly shared does not necessarily mean that...

A CISO's Guide To Application Security – Part 2: The Growing Threat to Applications

Editor’s Note: This post is the second in a multi-part series on Application Security, or “AppSec” prepared by our friends over at application testing firm Veracode. The series will define the components of a sound AppSec program, delineate the growing threats to software, weigh the costs of a da...