NETGEAR ReadyNAS LAN dbbroker 6.2.4 - Credential Disclosure

NETGEAR ReadyNAS LAN dbbroker 6.2.4 - Credential Disclosure !/usr/bin/env python Exploit Title: NETGEAR ReadyNAS LAN /dbbroker Credential Stealing Date: 25/07/2015 Exploit Author: St0rn Vendor Homepage: www.netgear.fr/business/products/storage/readynas Software Link:...

Moonpig Warns Customers of 'Security Issue'

Moonpig has warned customers that some of their email addresses, passwords, and account balances have been published after what it calls a “security issue”. The company, which sells custom greeting cards, said in a message to users that attackers were not able to get any credit card information, ...

United Airlines Hacked by Sophisticated Hacking Group

A group of China-backed hackers believed to be responsible for high-profile data breaches, including the U.S. Office of Personnel Management and the insurance giant Anthem, has now hit another high-profile target – United Airlines. United detected a cyber attack into its computer systems in May o...

New Hammertoss Espionage Tool Tied to MiniDuke Gang

The espionage gang behind the MiniDuke backdoor uncovered by Kaspersky Lab and CrySys Lab in 2013 has surfaced again with a new backdoor and attack platform that is used sparingly against only high-value targets. The new data theft tool, called Hammertoss, is a study not only in espionage...

Census Bureau Says Breach Didn't Compromise Sensitive Data

Officials at the United States Census Bureau say that the attackers who compromised one of the bureau’s databases last week did not get access to any confidential information, but only data such as names and phone numbers of organizations that submit information to the Federal Audit Clearinghouse...

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the samba-client-3.0.33 package of the Red Hat Enterprise Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

600TB MongoDB Database 'accidentally' exposed on the Internet

System administrators have reportedly exposed almost 600 Terabytes TB of MongoDB database due to running outdated and unpatched versions of the NoSQL MongoDB database. The open source MongoDB is the most popular NoSQL database used by companies of all sizes, from eBay and Sourceforge to The New...

wirelessmobile-jobsboard.com XSS vulnerability

Vulnerable URL: http://www.wirelessmobile-jobsboard.com/jobboard/cands/jobresults.asp?c=1=1=1=4919--==asd=search+jobs Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 13:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Class Action Suit Against Neiman Marcus Data Breach Revived

It turns out that Neiman Marcus, one of many retailers that announced it suffered a data breach last year, will indeed face a class action lawsuit that claims the upscale department store failed to protect its system from hackers. A decision on the case, which was initially argued in the Northern...

Possible Breach Results in Shutdown of Many Retail Photo Services

A potential data breach at a third-party provider has resulted in the shut down of retail photo-printing services at a number of chains, including CVS, Costco, Rite Aid, and several others. The breach reportedly hit PNI Digital Media, a Canadian company that provides the online photo platform for...

Lessons We Learned From Ashley Madison Data Breach

Do you use your Real Identity online and think about being private? If yes, then you are insane. Ashley Madison, the popular online dating website with tagline "Life is short. Have an affair", recently got hacked, reportedly exposing a sample of its users' account information and other personal...

Oops! Adult Dating Website Ashley Madison Hacked; 37 Million Accounts Affected

"Life is short. Have an affair," but always remember "Cheaters never prosper." AshleyMadison.com, an American most prominent dating website, that helps married people cheat on their spouses has been hacked, potentially putting very private details of Millions of its users at risk of being exposed...

New Bill Would Grant Lifetime Credit Monitoring to OPM Victims

A group of lawmakers are proposing victims of last month’s expansive Office of Personnel Management hack receive lifetime fraud protection and credit monitoring. Democratic lawmakers on Monday presented the Reducing the Effects of the Cyberattack on OPM Victims Emergency Response, or RECOVER Act...

Cloudminr Bitcoin Hack Exposes Data on 80,000

Attackers were able to break into servers belonging to Bitcoin cloud-mining platform Cloudminr.io last week and harvest the site’s entire database. Now hackers are attempting to sell the information, which includes thousands of unencrypted usernames, email addresses, and passwords. Cloudminr, a...

Two Dozen Zoos Potentially Hit by Data Breach

Anyone who’s visited one of two dozen zoos across America over the last several months may want to check their credit and debit card statements. A third party operator of concessions and retail services at zoos from Hawaii to Florida acknowledged this week that it was hit by a data breach earlier...

OPM Hack Expands to Include Data of 21.5M People

UPDATE–The ever-expanding data breach at the Office of Personnel Management has now spread to include the Social Security numbers and other personal data of a total of 21.5 million people, and the toll also now includes the agency’s director, Katherine Archuleta, who resigned Friday morning...

Hacking Team Flash Zero-Day Linked to Cyber Attacks on South Korea and Japan

The corporate data leaked in the recent cyber attack on the infamous surveillance software firm Hacking Team has revealed that the Adobe Flash zero-day CVE-2015-5119 exploit has already been added to several exploit kits. Security researchers at Trend Micro have discovered evidences of the Adobe...

Hacking Team Plans to Continue Operations

UPDATE–It has been absolutely brutal week for Hacking Team. All of the company’s documents, internal communications, emails with customers, and invoices have been published, including its dealings with oppressive regimes and customers in sanctioned countries. But even with all that, company...

Adobe to Patch Hacking Team Flash Zero Day

Adobe tomorrow is expected to release an updated version of Flash Player that will patch a zero-day vulnerability uncovered among the 400 GB of data stolen from Hacking Team. The controversial Italian intrusion and surveillance software vendor was breached and on Sunday, private documents,...

'Hacking Team' Gets Hacked! 500GB of Data Dumped Over the Internet

Yes, sometimes even the Hackers get Hacked. Hacking Team, one of the most controversial spyware and malware providers to governments and law enforcement agencies all around the world, allegedly been hacked, with some 500 gigabytes of internal data leaked over the Internet. The leaked data indicat...