Big-Name Law Firms Fall Victim To Hackers

Wall Street-savvy hackers are behind a data breach that involves a who’s-who of New York City legal firms. Federal investigators are looking into the breach that included Cravath Swaine & Moore LLP and Weil Gotshal & Manges LLP, both high-profile New York-based law firms. Cravath Swaine & Moore...

Stolen Data on 1.5 Million Verizon Enterprise Customers Up for Sale

Verizon is in the process of notifying customers of its Enterprise Solutions division that their data has been breached. The news comes a few days after a treasure trove of information on 1.5 million Verizon Enterprise customers reportedly made its way onto an underground cybercrime forum,...

Home Depot Agrees $19.5 Million To Settle 2014 Breach

Home Depot agreed this week to pay $19.5 million to compensate the 40 million cardholders it said were impacted by a massive 2014 data breach. As part of a proposed settlement by Home Depot, it admits no wrongdoing or liability in the breach, according to court filings with the US District Court...

American Express Notifies of Data Breach

American Express has begun notifying cardholders that their data may have been compromised in a third-party breach. A notification letter filed on March 10 with California’s attorney general indicates that AmEx account numbers, user names and other information including expiration dates may have...

Anti-DDoS Firm Staminus HACKED! Customers Data Leaked

Staminus Communications – a California-based hosting and DDoS Distributed Denial of Service protection company – is recovering a massive data breach after hackers broke down into its servers and leaked personal and sensitive details of its customers. Though the company acknowledged that there was...

Data Breach Vulnerability in Multiple Schneider Electric Telvent Products

The Schneider Electric Telvent Sage 3030M is an industrial data communication device for energy applications from Schneider Electric, France. The Schneider Electric Telvent Sage 3030M fails to properly populate data fields in Ethernet packets, allowing remote attackers to exploit the vulnerabilit...

Your iPhone will Alert You if You are Being Monitored At Work

Are You an Employee? It's quite possible that someone has been reading your messages, emails, listening to your phone calls, and monitoring your activities at work. No, it's not a spy agency or any hacker… ...Oops! It's your Boss. Recently, European Court had ruled that the Employers can legally...

Warning — Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System

Are you also the one who downloaded Linux Mint on February 20th? You may have been Infected! Linux Mint is one of the best and popular Linux distros available today, but if you have downloaded and installed the operating system recently you might have done so using a malicious ISO image. Here's...

金蝶协作办公系统 /kingdee/login/comm_user.jsp 等5处 SQL注入漏洞

No description provided by source...

Medical Device, Health Care Security Continues to Ail

TENERFIE, Spain – Sergey Lozhkin knows malware. Medical devices? Admittedly, not so much. That, however, was not an impediment to the Kaspersky Lab researcher in cracking the digital walls of a Moscow hospital and finding a shocking array of open doors on the network and weaknesses in medical...

Hacker Leaks Info of 30,000 FBI and DHS Employees

An unknown hacker who promised to release the personal information on government employees has dump online a list of nearly 20,000 Federal Bureau of Investigation FBI agents and 9,000 Department of Homeland Security DHS officers. Though the authenticity of the information has not been verified, a...

Vulnerabilities in the server operating system OS X Server, which allow attackers to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities of the Twisted module in the Wiki Server server operating system OS X Server are related to errors in the code. Exploiting these vulnerabilities could allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of the...

Fisher-Price, hereO Toys Expose Kids' Personal Data

As more devices are connected to the Internet, not only are vulnerabilities introduced into those networked things, but also some glaring holes are exposed in organizations’ ability to receive and triage bug reports. Researchers at Rapid7 today disclosed details on a pair of vulnerabilities in to...

CVE-2016-1489

CVE-2016-1489 affects Lenovo SHAREit for Windows (before 3.2.0) and Android (before 3.5.48_ww); files transferred over HTTP are in cleartext, enabling an attacker to sniff traffic or perform MITM attacks. CoreLabs and Lenovo advisories note related flaws (hard-coded password and unencrypted trans...

CVE-2016-0559

CVE-2016-0559 refers to an unspecified vulnerability in the Oracle Customer Intelligence component of Oracle E-Business Suite (versions 11.5.10.2, 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5). The description states that remote attackers could affect confidentiality and integrity via unknown v...

CVE-2016-0434

CVE-2016-0434 concerns Oracle Retail Applications’ Point-of-Service component (Oracle Retail POS) across versions 13.4, 14.0, and 14.1. The connected CNVD/NVD entries describe an unspecified vulnerability in the Oracle Retail Point-of-Service Mobile POS component that could be exploited by a loca...

CVE-2016-0409

Technical details are not publicly available in the provided documents for CVE-2016-0409; no affected product versions, root cause, or mitigation are described. Monitor for updates.

Casino Sues Cyber Security Company Over Failure to Stop Hackers

IT security firm Trustwave has been sued by a Las Vegas-based casino operator for conducting an allegedly "woefully inadequate" investigation following a network breach of the casino operator’s system. Affinity Gaming, an operator of 5 casinos in Nevada and 6 elsewhere in the United States, has...

191 Million US Voters' Personal Info Exposed by Misconfigured Database

BREAKING: A misconfigured database has resulted in the exposure of around 191 Million voter records including voters' full names, their home addresses, unique voter IDs, date of births and phone numbers. The database was discovered on December 20th by Chris Vickery, a white hat hacker, who was ab...

Hyatt Hotel Says Payment Systems Hacked with Credit-Card Stealing Malware

Hyatt Hotels Corporation is notifying its customers that credit card numbers and other sensitive information may have been stolen after it found malware on the computers that process customer payments. "We recently identified malware on computers that operate the payment processing systems for...