4596 matches found
Google Detects and Boots Tizi Spyware Off Google Play
The Google Play Protect team said it identified a new strain of Android spyware called Tizi found inside several apps previously available via the Google Play marketplace. The recent discovery triggered a wider investigation by Google who said apps infected by the Tizi malware date back to 2015...
Imgur Confirms 2014 Breach of 1.7 Million User Accounts
Popular image sharing community Imgur said last week it was the victim of a data breach in 2014 that exposed 1.7 million user accounts. In a breach notice posted to its website last Friday, the company said users are being notified via email that they must update their passwords immediately. “On...
Imgur was hacked in 2014; affecting 1.7M users
By Waqas Its just another day with just another data breach This is a post from HackRead.com Read the original post: Imgur was hacked in 2014; affecting 1.7M users...
Imgur—Popular Image Sharing Site Was Hacked In 2014; Passwords Compromised
Only after a few days of Uber admitting last year's data breach of 57 million customers, the popular image sharing site disclosed that it had suffered a major data breach in 2014 that compromised email addresses and passwords of 1.7 million user accounts. In a blog post published on Friday, Imgur...
Alleged HBO hacker identified, charged and indicted
By Waqas HBO suffered a massive data breach in July and August This is a post from HackRead.com Read the original post: Alleged HBO hacker identified, charged and indicted...
Firefox to collaborate with HaveIBeenPwned to alert users on data breach
By ghostadmin Mozilla is joining hands with popular data breach notification website HaveIBeenPwned.com This is a post from HackRead.com Read the original post: Firefox to collaborate with HaveIBeenPwned to alert users on data breach...
CVE-2017-8174
CVE-2017-8174 affects Huawei USG6300/USG6600 firewall lines (firmware V100R001C30SPC300 and V100R001C30SPC500/600/700/800). The issue is a weak algorithm vulnerability that could allow an attacker to crack ciphertext and cause confidential information leaks on transmission links. Affected product...
After Getting Hacked, Uber Paid Hackers $100,000 to Keep Data Breach Secret
Uber is in headlines once again—this time for concealing last year's data breach that exposed personal data of 57 million customers and drivers. On Tuesday, Uber announced that the company suffered a massive data breach in October 2016 that exposed names, e-mail addresses and phone numbers of 57...
Australia’s “Essential Eight” is Critical to Meet 2018 Cybersecurity Mandates & Privacy Laws
Christopher Strand, Carbon Black’s security risk and compliance officer recently wrote a blog discussing how the new mandatory data breach notification rule in the Privacy Amendment Notifiable Data Breaches Bill 2016, helps bring attention to cybersecurity solutions and focus on the practices...
CENTCOM Says Massive Data Cache Found on Leaky Server is Benign
A massive archive of 1.8 billion publicly accessible social-media posts were found on the Amazon S3 storage buckets that belonged to a Pentagon contractor. The data was collected by the third-party contractor on the behalf of United States Central Command and United States Pacific Command...
Nextcloud: SQL Injection found in NextCloud Android App Content Provider
Using Drozer, we identified com.nextcloud.client is vulnerable to Sql Injection here is output from drozer: dz run scanner.provider.injection -a com.nextcloud.client Scanning com.nextcloud.client... Not Vulnerable: content://com.nextcloud.android.providers.UsersAndGroupsSearchProvider...
CVE-2017-10267
Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo...
How to Opt Out of Equifax Revealing Your Salary History
A KrebsOnSecurity series on how easy big-three credit bureau Equifax makes it to get detailed salary history data on tens of millions of Americans apparently inspired a deeper dive on the subject by Fast Company, which examined how this Equifax division has been one of the company's best...
Built-in Keylogger Found in MantisTek GK2 Keyboards—Sends Data to China
"The right keyboard can make all the difference between a victory and a defeat in a video game battlefield." If you are a gamer, you can relate to the above quote. But what if your winning weapon betrays you? The popular 104-key Mantistek GK2 Mechanical Gaming Keyboard that costs around €49.66 ha...
Malaysian Data Breach Leaves Stolen Data Online for a ‘Long Time’
A 2014 data breach may have left the personal details for tens of millions of Malaysians for sale online for “a long time,” according to Vijandren Ramadass, the founder of tech portal Lowyat.net, who uncovered the data leak. According to a New York Times report, “Malaysia said on Wednesday it was...
November 2, 2017 – Morning Cyber Coffee Headlines – “Houston Astros” Edition
Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! November 2, 2017 - Headlines Leaked Data From Massive Malaysian Breach 'Likely...
International Islamic University Chittagong: Default credentials on http://119.18.148.140/hrd/
Hello, When the mentioned URL is opened, the user is presented with a login form that logs them into the "HR & Payroll" system of the university. The issue here is that the credentials used are the application's default credentials, which are mentioned here...
X (Formerly Twitter): OS Command Execution on User's PC via CSV Injection
Summary: Twitter is vulnerable to CSV Injection. If an attacker can successfully exploit this, then they will compromise the PC of the user. The injection point is via a tweet on the main twitter.com site while the retrieval point is via the “Export Data” option on the analytics site. Description...
Whois Maintainer Accidentally Makes Password Hashes Available For Download
The regional internet registrar that administers IP addresses for the Asia Pacific region accidentally leaked Whois database data, including hashed passwords, forcing it to reset all passwords for objects in its Whois database. According to Asia Pacific Network Information Center APNIC, the...