Connecticut Sues Health Net On Data Breach

Attorney General Richard Blumenthal has sued Health Net of Connecticut for failing to secure private patient medical records and financial information involving 446,000 Connecticut enrollees and is fighting for encryption on medical records. Read the full article. Office of Inadequate Security...

Data Breach Numbers In 09 Down From 08

In 2009, the Identity Theft Resource Center recorded 498 breaches, less than the 657 in 2008, more than the 446 in 2007. Are data breaches increasing or decreasing? That is the question no one can answer. Read the full article. Help Net Security...

Heartland to Pay Visa $60 Million for Breach

Heartland Payment Systems on Jan. 8 announced that it has agreed to pay up to $60 million to Visa to cover losses to credit and debit cardholders affected by the massive data breach Heartland suffered in 2008. Read the full article. eWEEK...

discuz 6.1.0 Sql注入漏洞

No description provided by source...

Sniffing Programmer Gets 2 Years Jail for TJX

Stephen Watt, a 25-year-old former Morgan Stanley software engineer, pleaded guilty last December to creating a custom sniffing program dubbed “blabla” that Albert Gonzalez and other hackers used to siphon millions of credit and debit card numbers from TJX’s network; Watt received a 2 year Federa...

Heartland Pays $3.6 Mil to Amex for Breach

Heartland Payment Systems will pay American Express $3.6 million to settle charges relating to the 2008 hacking of its payment system network. Read the full article. Computerworld...

CVE-2009-4303

CVE-2009-4303 affects Moodle 1.8 (before 1.8.11) and 1.9 (before 1.9.7). The issue: sensitive data, including password hashes and unspecified “secrets,” can be stored in backup files, potentially exposing them to an attacker who can access backups. In the connected documents, Debian/SUSE advisori...

Notre Dame Data Breach Number at 24K

Notre Dame University, who originally discovered a data breach back in early November 2009, said 24,000 NDU employees were affected. Read the full article. The Observer...

CVE-2009-4236

EC-CUBE information disclosure vulnerability (CVE-2009-4236) affects EC-CUBE Ver2 Version 2.4.0 RC1 through 2.4.1 and EC-CUBE Community Edition r18068 through r18428. The issue enables remote attackers to obtain sensitive customer data via unknown vectors related to sessions. Root cause is descri...

HSBC Warns of Exposed Customer Info

HSBC Bank says a bug in its imaging software inadvertently exposed sensitive data about some of its customers going through bankruptcy proceedings. Read the full article. Computerworld...

PhpShop 0.8.1 SQL Injection / XSS / XSRF

Application: PhpShop Version affected: 0.8.1 Website: http://www.phpshop.org/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Vuln: Multiple Vulnerabilities SQL INJECTION http://localhost/phpshop-0.8.1/?page=admin/functionlist&moduleid=111111' union...

Heartland CEO Talks Lessons Learned

A Cyber Forensics panel at the U.S Spy Museum discussed data breaches and the effects one bad hacking event can have; The panel discussion included the CEO of Heartland Payment Systems, whose company was the victim of a very large, very publicized data breach in 2008. Read the full article. Dark...

Major D.C. Construction Co. Fooled by Phishing

Nigel Parkinson, president of Parkinson Construction who built the D.C Convention Center and Nationals baseball stadium, fell victim to phony SSN email site that stole passwords, including those to the company’s bank account where money mules were used to steal funds. Read the full article...

Python < 2.5.2 Imageop Module 'imageop.crop()' Buffer Overflow Vulnerability

No description provided by source. Python's 'imageop' module is prone to a buffer-overflow vulnerability. Successful exploits may allow attackers to execute arbitrary code in the context of applications using the vulnerable Python module. This may result in a compromise of the underlying system...

HealthNet Data Breach Affects 1.5 Mil Customers

Health Net Inc. announced Wednesday that it is investigating a healthcare data security breach that resulted in the loss of patient data, affecting 1.5 million customers. The healthcare provider said the lost files, a mixture of medical data, Social Security numbers and other personally...

Connecticut Investigates Blue Cross Blue Shield Data Breach

Connecticut Attorney General Richard Blumenthal is investigating Blue Cross Blue Shield’s loss of confidential information, including tax identification and Social Security numbers, for 800,000 healthcare providers nationwide. The attorney general is also seeking additional identity theft...

Security Metrics Are Useless Without a Plan

WASHINGTON–There has been a big push in recent years in the security community toward metrics, and measurements of all types have become a hot topic in certain corners of the industry. But measurement for measurement’s sake is useless-and perhaps even counterproductive–if the security team in an...

Two Data Breach Notification Bills Advance in Senate

Two separate bills that would require organizations to notify consumers when their personal information has been compromised have made their way out of committee in the Senate, a critical step toward the creation of a national data-breach notification bill. A variety of technology vendors, consum...

Congress Calls for Internal Security Review

After a former Congressional staffer exposed some sensitive data on a file-sharing network recently, some lawmakers are calling for the Congress to start an internal review of its own data security policies immediately. The situation, which is linked to an ethics investigation in the House of...

Remote File Disclosure in Vivvo CMS 4.1.5.1

No description provided by source. waraxe-2009-SA075 - Remote File Disclosure in Vivvo CMS 4.1.5.1 =============================================================================== Author: Janek Vind "waraxe" Date: 21. October 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-75.html...