LinkedIn Latest Contributor to Breach Fatigue

The obvious takeaway from last week’s LinkedIn data breach revelation where we learned hackers were selling 117 million LinkedIn usernames, email addresses and passwords from a 2012 breach is, change your passwords-and often. The not so obvious takeaways come from noted security expert Troy Hunt,...

Fraudsters Stole ¥1.4 Billion from 1,400 Japanese ATMs in Just 3 Hours

In an era where major data hacks are on the rise, it is no surprise breaches on individuals are also up. In just three hours, over 100 criminals managed to steal ¥1.4 Billion approx. US$12.7 Million from around 1,400 ATMs placed in small convenience stores across Japan. The heist took place on Ma...

LinkedIn Breach Just Got A Lot Worse: 117 Million New Logins For Sale

Over 117 million LinkedIn user logins are for sale on the black market “The Real Deal” by hacker “Peace” for five Bitcoins $2,280. The breach is tied to an earlier hack on LinkedIn in 2012, when the company originally said 6.5 million accounts had been compromised. The hacker, identified as Peace...

Hacker puts up 167 Million LinkedIn Passwords for Sale

LinkedIn's 2012 data breach was much worse than anybody first thought. In 2012, LinkedIn suffered a massive data breach in which more than 6 Million users accounts login details, including encrypted passwords, were posted online by a Russian hacker. Now, it turns out that it was not just 6 Millio...

500K Members of Hacking Forum Doxxed

An underground forum called Nulled.io that helped users share stolen credentials, software cracks, and leaked content was hacked earlier this month, spilling a glut of information, including users’ email addresses, encrypted passwords, and IP addresses, among other details. According to researche...

Tumblr Requires Password Reset

Yahoo has forced a password reset on Tumblr account holders after it discovered that someone had accessed email addresses, and salted and hashed passwords from early 2013. A Tumblr spokesperson would not disclose who had accessed the data, where it was found, nor how many email addresses were...

Wendy's Comes Clean On Data Breach

Fast-food chain Wendy’s disclosed it was a victim of a point-of-sale system attack that installed malware on PoS computers affecting 300 franchise restaurants. The disclosure was part the company’s first quarter 2016 SEC filings on Wednesday and is the most complete account to date of a 2015 data...

2.7 billion Gmail, Yahoo and Hotmail accounts were compromised-the vulnerability warning-the black bar safety net

Russian users of Gmail, Yahoo and Microsoft email Hotmail, etc. 2. 7 2 3 million accounts were compromised, and in the Russian underground black market trade. ! This time, Russian hackers successfully conducted a massive data leak accident. In this cyber attack, hackers stole 2. 7 2 3 million...

Hacker is Selling 272 Million Email Passwords for Just $1

A massive database of 272 million emails and passwords for popular email services, including Gmail, Microsoft, and Yahoo, are being offered for sale on the Dark Web for less than $1, media reports. An anonymous Russian hacker, who goes by the moniker "the Collector," was first spotted by...

Identity Thieves Used Leaked PII to Steal ADP Payroll Info

Cybercriminals accessed a W-2 portal maintained by payroll company ADP recently to glean sensitive information about employees at a handful of companies. The company is stressing that the company itself wasn’t hacked, but that it appears identity thieves may have been able to create ADP accounts ...

GLPI 0.90.2 SQL Injection

Advisory ID: HTB23301 Product: GLPI Vendor: INDEPNET Vulnerable Versions: 0.90.2 and probably prior Tested Version: 0.90.2 Advisory Publication: April 8, 2016 without technical details Vendor Notification: April 8, 2016 Vendor Patch: April 11, 2016 Public Disclosure: April 29, 2016 Vulnerability...

Office 365 Vulnerability Exposed Any Federated Account

A severe vulnerability in the way Microsoft Office 365 handles federated identities via SAML put an attacker in position to have access to any account and data, including email messages and files stored in the cloud-based service. Microsoft pushed through a mitigation to the service on Jan. 5,...

Verizon DBIR Top Targets: Credentials, Phishing and PoS

A lack of security common sense still plagues businesses with 30 percent of phishing emails opened by campaign targets. Worse, 12 percent click on the attachments inside those phishing attacks, giving crooks easy access to systems to snarf up credentials that are later used to pull off financiall...

In-Brief: Spotify Hack, Secret of Chrome OS, MIT Bug Bounty, Nanowire Batteries

1. Spotify Hacked! Change your Password ASAP If you are one of the millions of people around the world who love to listen to music on Spotify, you may need to change your password immediately. Has Spotify been hacked? The company says no, but some Spotify users have claimed their profiles were...

53快服平台某漏洞涉及760w用户信息+百万聊天工人信息+消息

简要描述： RT 详细说明： post注入语法：sqlmap.py -r 6.txt -D talk --count --tables 延迟注入慢的不行跑了25小时左右 ======================数据包========================= POST /lword.php HTTP/1.1 Host: www5.53kf.com Proxy-Connection: keep-alive Content-Length: 364 Origin: http://www5.53kf.com User-Agent: Mozilla/5.0 Windows NT 6.1...

CBS Sports App Transmitted Data Unencrypted

CBS recently fixed a vulnerability in its popular Sports application that could have exposed users to man-in-the-middle attacks and inadvertently leaked personal data. According to researchers, upon registration, users’ names, email addresses, account passwords, dates of birth, and zip codes were...

FBI Quietly Admits to Multi-Year APT Attack, Sensitive Data Stolen

The FBI issued a rare bulletin admitting that a group named Advanced Persistent Threat 6 APT6 hacked into US government computer systems as far back as 2011 and for years stole sensitive data. The FBI alert was issued in February and went largely unnoticed. Nearly a month later, security experts...

Information on 50 Million Turkish Citizens Dumped Online

Turkey’s communications minister this week is denying reports that personally identifiable information of 50 million of the country’s citizens has been leaked online. On Monday hackers published what they claim is a Turkish citizenship database, a cache of information downloadable via BitTorrent,...

Personal Data of 50 Million Turkish Citizens Leaked Online

Personal details of nearly 50 Million Turkish citizens, including the country's President Recep Tayyip Erdogan, have been compromised and posted online in a massive security breach. A database, which contains 49,611,709 records, appeared on the website of an Icelandic group on Monday, offering...

Uber: Session Impersonation in riders.uber.com

Steps: First log in as attacker in riders.uber.com. Victim now opens https://login.uber.com/login in same browser eg: net cafe. It asks you to enter login credentials even though another session is alive. If victim enters his account credentials, he will be taken to riders site. Even though rider...