HootSuite technical issue exposed emails of thousands of users

Social Media Management tool HootSuite today face technical issue and expose email address's of thousands of users. Due of error lots of people receive email reminders with warning that their free 60-day HootSuite Pro trial was about to end, but also included the names and email addresses of othe...

Authentication flaw

Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID, which allows remote attackers to bypass authentication and read or modify data about users, customers, and projects via unspecified vectors...

WordPress Cardoza Ajax Search 1.1 SQL Injection

Exploit Title : SQl INJECTION AJAX Post Search --- wordpress plugin--- Author:Marcela Benetrix home:www.girlinthemiddle.net Date: 10/12/12 version: 1.1 software link: http://wordpress.org/extend/plugins/cardoza-ajax-search/ AJAX Post Search wordpress plugin description This plugin will allow your...

A Sample Security Agenda for Obama's Second Term

When Barack Obama was sworn in four years ago for his first term, there was genuine optimism that he would make meaningful improvements to the security of the nation’s critical infrastructure as well as the policies that govern security and privacy in the private sector. After the Bush...

Pizza Hut defaced, Authorities denies theft of 240000 Credit Cards

Yesterday Australian Pizza Hut website was compromised by a hacking group going by the name of 0-Day and Pyknic. Hackers defaced the website and claim that they made off with 260,000 Australian credit card numbers. Hack was 1st noticed by Whirlpool Forum users. But a Pizza Hut spokeswoman said th...

UK Ministry of Defence hacked by NullCrew

The United Kingdom Ministry of Defence website www.qhm.mod.uk hacked by two Null Hacking Crew members @OfficialNull and @Timoxeline and They extracted data published online. The data dump include 3400 email addresses and passwords from Ministry of Defence portal. Hackers trying to trend...

Attorney Adds Security Company, State IT Department to Data Breach Lawsuit

A former South Carolina lawmaker has added the data security firm Trustwave and the state’s technology department to a lawsuit filed in the wake of a massive data breach at the state’s Department of Revenue. The Associated Press reports attorney John Hawkins in an amendment claims Trustwave...

Chinese hackers target Coca-Cola and Files of Chinese Huiyuan acquisition stolen

According to the report from Bloomberg, In 2009, the FBI told Coca-Cola executives that hackers had broken into their computer systems, when a malicious link was emailed to a senior executive, but never revealed the incident. Hackers were able to spend a month operating undetected, logging...

South Carolina Data Breach Casts Spotlight on Lack of Encryption, Stolen Credentials

South Carolina governor Nikki Haley said a mouthful this week when she spilled a dirty industry secret that Social Security numbers are generally not encrypted by state agencies. Reeling from a Department of Revenue data breach that leaked 3.6 million Social Security and credit card numbers as we...

Trouble for Borderlands 2 Players

Some XBOX Live users have violated the online gaming platform’s code of conduct by using a malicious application that allowed them to permanently kill off the characters of other players in the popular ‘Borderlands 2’ video game. On a forum run by the game’s software developer Gearbox, a communit...

3.6 Million South Carolina Taxpayers at Risk of ID Theft

State officials are warning South Carolina taxpayers that 3.6 million Social Security numbers and other personal data was exposed in a recent attack on Department of Revenue servers. Anyone who filed a state return since 1998 are asked to call 866 578-5422 or visit protectmyid.com/scdor. The stat...

Attorneys Warn of Increased Risk of Big Data Breach Lawsuits

Two attorneys for a prominent law firm warn that courts are starting to look more favorably on class-action lawsuits brought by data breach victims, who historically have had trouble proving actual damages from the thefts. “A recent survey of data breach litigation found that the average settleme...

Hackers stole Credit Card details from 63 'Barnes & Noble' stores

Over 60 Barnes & Noble stores have been used by hackers to gain the credit card data, including the PINs, of customers. The New York company is warning customers to check for unauthorized transactions and to change their personal identification numbers or PINs. It hasn't said how many accounts ma...

Judge Rules Against Consumers' Claims in PlayStation Hack Lawsuit

A Southern California judge has rejected several key claims in a class-action lawsuit filed in response to Sony’s handling last year of a data breach that left millions of users at risk. In a ruling released by Courthousenews.com, U.S. District Court Judge Anthony Battaglia ruled users did not ha...

Verizon DBIR Analysis: Opportunistic Attacks Crushing Certain Industries

Regardless of the market or industry, the majority of attacks are financially motivated. Even in data-rich environments such as health care, attackers are still after profits and exploit the same weaknesses and transaction processing systems that are vulnerable in other industries such as hotels...

Capitol Hill Rhetoric Takes Aim at Wrong Cybersecurity Targets

Defense secretary Leon Panetta couldn’t resist, could he? He couldn’t fight the urge to dig deep into the information security cliché handbook and yank out that old chestnut about a Cyber Pearl Harbor. Seriously, is there a more cringe-inducing, FUD-filled phrase than Cyber Pearl Harbor? Never mi...

More than 300,000 at Risk After Major Breach at Florida College

A security breach initially believed contained to about 50 employee records now appears to involve almost 300,000 students, faculty and employees at a Florida college. Officials at Northwest Florida State College in Niceville today confirmed a massive data breach and hundreds of thousands of stol...

Toshiba ConfigFree CF7 File Stack Buffer Overflow (Comment Field

/----------------------------------------------------------------------------------- | Toshiba ConfigFree CF7 File Stack Buffer Overflow Comment Field | -----------------------------------------------------------------------------------/ Summary ======= There is a stack buffer overflow...

100k IEEE site Plain-Text Passwords found on Public FTP

A Romanian researcher - Radu Drăgușin found that 100000 usernames and passwords of the Institute of Electrical and Electronics Engineers IEEE was stored in plaint-text on a publicly accessible FTP server. According to him, on Sept. 18 he first discovered a log with usernames and passwords in...

Researcher Finds 100k IEEE.org Passwords Stored in Plain-Text on Public FTP Server

A Romanian computer scientist discovered that the Institute of Electrical and Electronics Engineers IEEE was storing its members’ usernames and passwords in plaint-text on a publically accessible file transfer protocol FTP server. Radu Drăgușin claims the collection of nearly 100,000 credentials...