Fat Finger Error Lands Welsh Health Board $114K Fine

An e-mail gaffe and a spelling mistake by a doctor led to a breach of the UK’s Data Protection Act last year, according to a press release by the Information Commissioner’s Office today. The Aneurin Bevan Health Board ABHB in South Wales was fined £70,000 about $114,000 USD after it mistakenly se...

UK Govt. Investigating London Marathon Data Breach That Spilled Info On 38,000

The UK Information Commissioner’s Office ICO said it is looking into a possible data breach of the Website used by organizers of the London Marathon – major, international sporting event that attracted more than 37,000 runners for the 37th running on April 22nd. According to a BBC report, the hom...

VMWare Source Code leaked by Anonymous Hackers

VMware on Tuesday announced that a single file from its ESX server hypervisor source code has been posted online, and it held out the possibility that more proprietary files could be leaked in the future. "The fact that the source code may have been publicly shared does not necessarily mean that...

A CISO's Guide To Application Security – Part 2: The Growing Threat to Applications

Editor’s Note: This post is the second in a multi-part series on Application Security, or “AppSec” prepared by our friends over at application testing firm Veracode. The series will define the components of a sound AppSec program, delineate the growing threats to software, weigh the costs of a da...

Employee Sends Medicaid Info of 228K To His Yahoo! Account

A South Carolina man was arrested yesterday on charges stemming from a data breach that may have leaked personal information on more than 200,000 Medicaid beneficiaries in the state, including their names, phone numbers, addresses, birth dates and Medicare ID numbers according to a report in the...

MediaXxx Adult Video / Media Script SQL Injection

Exploit Title: MediaXxx Adult Video / Media Script SQL Injection Date: 19/05/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: MediaXxx http://www.mediaxxxscript.com/ Tested on: Linux Dork: "Powered by MediaXxx Mobile"...

Utah Medicaid Hack Now Affecting Half a Million, 280K SSNs Stolen

The number of victims involved in the recent Utah Department of Health hack has climbed once again with the state health agency announcing yesterday that the breach has affected approximately 500,000 Utah residents, while an additional 280,000 residents had their Social Security numbers stolen. T...

A CISO's Guide To Application Security – Part 1: Defining AppSec

Editor’s Note: This post is the first in a multi-part series on Application Security, or “AppSec” prepared by our friends over at application testing firm Veracode. The series will define the components of a sound AppSec program, delineate the growing threats to software, weigh the costs of a dat...

Utah Data Breach of 181,000 Records Blamed on Configuration Error

Nearly 200,000 people who receive benefits from the Medicaid and Child Health Insurance Plan in Utah have had their personal information–including Social Security numbers in some cases–compromised as part of an intrusion on the network at the Utah Department of Technology Services. The 181,000...

discuz! X1. 0 – X1. 5 Blind SQL injection exploit & Get Shell-vulnerability warning-the black bar safety net

Exploit Title: discuz! X1. 0 - X1. 5 Blind SQL injection exploit &Get Shell Date: 06-04-2012 Author: Hacker-Fire Category:: webapps Google dork: Powered by Discuz Tested on: Windows 7 P0c : ? Php printr ' + ------------------------------------------------- -------------------------- + Discuz! 1-1...

British Paypal hacker jailed for stealing millions Identities

British Paypal hacker jailed for stealing millions Identities A UK cybercrook has been jailed for 26 months following his conviction for stealing millions of banking and PayPal identities. According to Report, Southwark Crown Court heard how Edward Pearson, 23, could have made about £834,000 if h...

Anonymous Exposes data of 10,000 Civic Democrats from Czech

Anonymous Exposes data of 10,000 Civic Democrats from Czech Last week, Hackers posted on the internet the private data of Czech Prime Minister Petr Necas, including the numbers of his three mobile telephones, after a series of cyber attacks on government web sites. Hacker groups Anonymous and...

Symantec Experiment: Half Of Those Who Find Smartphones Don't Return Them

Good Samaritans are few and far between when it comes to lost cell phones, according to the conclusions of a social experiment conducted by security firm Symantec. Smart phones are unlikely to be returned by those who find them, but very likely to be perused for sensitive data including photos,...

How to Make a Data Breach Disappear

For companies that are in the business of collecting, storing or monetizing user data or processing large numbers of transactions, it’s a matter of when, not if, they will suffer a major compromise or data loss. Most recently the giant wheel of pain stopped on Global Payments, but a weird thing...

SA-CONTRIB-2012-056 - Janrain Engage - Sensitive Data Protection Vulnerability

CVE: CVE-2012-2296 Using Janrain Engage, Drupal sites can authenticate new and existing users with popular social networks, map user profile data from these websites to Drupal fields, and share Drupal content with a user's friends on their social networks. The module permanently retains the...

Global Payments Says 1.5 Million Cards May Be Affected By Breach

UPDATED–Global Payments, the payment-processing company that was the victim of a massive data breach revealed last week, said that the attack appears to have compromised something less than 1.5 million credit card numbers and that the attack looks to have been isolated to the network in North...

50K Cards Compromised using Credit Card Processor

50K Cards Compromised using Credit Card Processor Some 50,000 credit and debit cardholders may have their information exposed following a security breach at Global Payments. The breach occurred sometime between between Jan. 21, 2012 and Feb. 25, 2012. Both Visa and MasterCard have confirmed they...

Visa, MasterCard Warn Of Breach At Card Processor

UPDATE–MasterCard and Visa have confirmed that they are investigating a potentially huge data breach at one of the companies’ payment processors, which the Wall Street Journal has identified as Global Payments Inc. The credit card giants are alerting banks about a breach at a U.S. based card...

Tapes Containing Information On 800K Lost From California Child Support Agency

Backup cartridges containing records on 800,000 individuals belonging to the California Department of Child Support Services DCCS were lost in transit between an IBM facility in Colorado and DCCS’s headquarters in California On March 12, according to a statement from DCCS. PDF The records in...

FBI Cyber Chief Says U.S. Losing War Against Hackers

FBI Cyber Chief Says U.S. Losing War Against Hackers FBI is struggling to combat cyberattacks by hackers. "We're not winning," FBI executive assistant director Shawn Henry said. Four top government cybersecurity officials have basically come out to say America is getting her hiney kicked in...