15-year-old Boy Arrested in connection with TalkTalk Cyber Attack

The arrest is the first major outcome since TalkTalk – the biggest phone and broadband provider in the UK with more than 4 Million customers – had suffered a serious data breach. The Police Service of Northern Ireland PSNI and the investigating officers from the Metropolitan police's cyber crime...

TalkTalk Hackers Demand Ransom of CEO Dido Harding

Update The U.K.’s Metropolitan Police Cyber Crime Unit this afternoon arrested a 15-year-old Northern Ireland boy in connection with the TalkTalk hack. The teen is alleged to have violated the Computer Misuse Act, a police statement said. He is being questioned at the County Antrim police station...

TalkTalk Hacked; 4 Million Credit Card Profiles may have been Stolen

TalkTalk, one of the biggest UK-based phone and Internet service provider with more than 4 Million customers, has been hacked again, the company announced late Thursday. TalkTalk is informing its 4 million customers that it has fallen victim to a "significant and sustained cyber attack" and it is...

Dow Jones & Company Latest Financial Firm to Report Breach

The financial information firm Dow Jones & Company announced late last week that it’s the latest in an exhaustive list of companies this year to report a data breach. The News Corp.-owned company informed customers Friday that hackers managed to infiltrate their system in an apparent attempt to...

Kerio Control 8.6.1 - Multiple Vulnerabilities

Kerio Control 8.6.1 - Multiple Vulnerabilities IntelliSec Security Advisory ============================================================================================== Title: Multiple Vulnerabilities in Kerio Control Virtual Appliance Vulnerabilities: SQL Injection, Remote Code Execution throu...

K2 SmartForms / BlackPearl SQL Injection

Title: Boolean-based SQL injection Vulnerability in K2 Platforms. Author: Wissam Bashour - Help AG Middle East Vendor: K2 Product: SmartForms, BlackPearl, K2 for sharepoint Version: 4.6.7 Tested Version: Version 4.6.7 Severity: HIGH CVE Reference: CVE-2015-7299 About the Product: K2 smartforms ca...

2 0 1 5 year 9 on data security vulnerability analysis report-vulnerability warning-the black bar safety net

9 report of the core ideas In order to improve the majority of users of security awareness, of domestic professional database security vendor Anwar gold and, according to the daily order released from the vulnerability box, make up days, dark clouds, and other vulnerabilities platform security...

74cms user_invited.php sql注入

注册企业账户，填写企业信息，然后发布职位。再访问下面的URL。 http://demo.74cms.com/user/userinvited.php?id=1&act=invited 其中id参数可以注入。 由于有安全狗的原因，and会被拦截，我们用&&和||代替吧. http://demo.74cms.com/user/userinvited.php?id=1%20||%201&act=invited 代码/user/userinvited.php:191： $row = $db-getone"select from ".table'companydownresume'." where...

Samsung LoopPay Hacked, but 'Samsung Pay' is Safe

Samsung has been surrounded by a lot of controversies since the past few years, but that has not influenced its productivity. But this report has raised a few eyebrows... Samsung's mobile payment system company, LoopPay, was hacked back in March this year, just a month after Samsung bought it to...

Data Breach Day — Patreon (2.3M), T-Mobile (15M) and Scottrade (4.6M) — HACKED!

This week, three high-profile data breaches took place, compromising personal and sensitive details of millions of people. Telecommunication giant T-Mobile Crowdfunding website Patreon US brokerage firm Scottrade In T-Mobile's case, its credit application processor Experian was hacked, potentiall...

Experian Breach: 15 Million T-Mobile Customers' Data Hacked

If you applied for financing from T-Mobile anytime between 1 September 2013 and 16 September 2015, you have been HACKED! – even if you never had T-Mobile service. T-Mobile’s credit application processor Experian was hacked, potentially exposing the highly personal information of more than 15...

Experian Breach Spills Personal Info of 15 Million T-Mobile Customers

A massive data breach at the credit-reporting agency Experian could wind up having major implications for 15 million T-Mobile customers. The telecom uses the agency, one of the “big three” credit reporting bureaus, to check the credit ratings of its customers. News broke last night however that a...

Gratipay: change bank account numbers

I leaked our bank account numbers for PNC and New Alliance in screenshots on https://github.com/gratipay/inside.gratipay.com/issues/308. They were up for about six days and will have gone out in email to Gratipay contributors and watchers. I've removed the screenshots from the comments, but they'...

5.6 Million Federal Employees' Fingerprints Stolen in OPM Hack

The OPM Data Breach Office of Personnel Management is getting even worse than we thought. We already know more than 21 Million current and former federal employees had their personal and highly sensitive private information hijacked in a massive data breach that affected Defense Department's OPM...

5.6 Million Fingerprints Stolen In OPM Hack

It turns out roughly 5.6 million federal employees may have had their fingerprints stolen as part of this year’s mammoth Office of Personnel Management breach – a figure five times what the agency initially announced in June. OPM press secretary Sam Schumach broke the bad news Wednesday morning,...

2 0 1 5 year 8 on data security vulnerability analysis report-vulnerability warning-the black bar safety net

! Anwar gold and database attack and Defense laboratory DBSec Labs in months, the high-risk vulnerability summary form analysis report, share of the majority of users and partners. 8 monthly report of core ideas 1. The Web is data leakage a major channel 2. The Internet has become a data leak...

CVE-2015-5440

HP UCMDB local information disclosure (CVE-2015-5440) affects HP UCMDB server versions 10.00, 10.01 (pre-10.01CUP12), 10.10, 10.11 (pre-10.11CUP6), and 10.2x (pre-10.21). A local attacker can obtain sensitive information via unspecified vectors; HP lists exact patch versions: 10.01CUP12 for v10.0...

Multiple SQL Injections in Open Source Bike Share

High-Tech Bridge Security Research Lab discovered multiple SQL injection vulnerabilities in Open Source Bike Share. Successful exploitation of these vulnerabilities will enable the attacker to obtain sensitive data from the database such as usernames and passwords, to post fake content or malware...

Code injection

Unspecified vulnerability in IBM WebSphere Commerce 7.0.0.6 through 7.0.0.9 allows remote authenticated users to obtain sensitive personal information via unknown vectors...

Health Insurer Excellus Hacked; 10.5 Million Records Breached

Health Care Hacks — the choice of hackers this year! In a delayed revelation made by Excellus BlueCross BlueShield BCBS, which says that about 10.5 Millions of their clients' data and information has been compromised by hackers. Excellus BCBS headquartered in Rochester, New York, provides finance...