Countrywide Hit By Suit on Data Breach

Customers of Countrywide Financial have filed a class-action lawsuit over the 2008 data breach that enabled company insiders to steal and sell their personal information. Read the full article. Dark Reading...

J.C. Penney Was 'Company A' in Breach Case

Retailer JC Penney fought to keep its name secret during court proceedings related to the largest breach of credit card data on record, according to documents recently unsealed. Read the full article. Computerworld...

CyberCMS - SQL Injection

CyberCMS - SQL Injection Exploit Title: CyberCMS Remote SQL Injection Vuln. Date: 26/11/2009 Author: hc0de | hc0de.blogspot.com Software Link: http://cyberfusion.ramx.org/cyber-cms Version: app version Tested on: Ubuntu Linux 9.04 CVE : PoC: +Target: http://server/faq.php?id=SQLCODE -MySQL Versio...

Wyndham Hotels Hit Again By Hackers

Hackers broke into computer systems at Wyndham Hotels & Resorts recently, stealing sensitive customer data. The break-in occurred between late October 2009 and January 2010, when it was finally discovered. This is the third data breach reported by Wyndham in the past year. Read the full article...

Ero Auktion 2.0 - 'news.php' SQL Injection

----------------------------Information---------------------------------------- +Autor : Easy Laster +Date : 21.10.2010 +Script : Ero Auktion V.2.0 SQL Injection news.php +Download : ----- +Price : 34,90€ +Language :PHP +Discovered by Easy Laster +Security Group 4004-Security-Project +Greetz to...

Cost of Data Breaches Rose in 2009

The cost of a data breach increased last year to $204 per compromised customer record, according to the Ponemon Institute’s annual study. The average total cost of a data breach rose from $6.65 million in 2008 to $6.75 million in 2009. Read the full article. IDG News...

Connecticut Sues Health Net On Data Breach

Attorney General Richard Blumenthal has sued Health Net of Connecticut for failing to secure private patient medical records and financial information involving 446,000 Connecticut enrollees and is fighting for encryption on medical records. Read the full article. Office of Inadequate Security...

Data Breach Numbers In 09 Down From 08

In 2009, the Identity Theft Resource Center recorded 498 breaches, less than the 657 in 2008, more than the 446 in 2007. Are data breaches increasing or decreasing? That is the question no one can answer. Read the full article. Help Net Security...

Heartland to Pay Visa $60 Million for Breach

Heartland Payment Systems on Jan. 8 announced that it has agreed to pay up to $60 million to Visa to cover losses to credit and debit cardholders affected by the massive data breach Heartland suffered in 2008. Read the full article. eWEEK...

discuz 6.1.0 Sql注入漏洞

No description provided by source...

Sniffing Programmer Gets 2 Years Jail for TJX

Stephen Watt, a 25-year-old former Morgan Stanley software engineer, pleaded guilty last December to creating a custom sniffing program dubbed “blabla” that Albert Gonzalez and other hackers used to siphon millions of credit and debit card numbers from TJX’s network; Watt received a 2 year Federa...

Heartland Pays $3.6 Mil to Amex for Breach

Heartland Payment Systems will pay American Express $3.6 million to settle charges relating to the 2008 hacking of its payment system network. Read the full article. Computerworld...

CVE-2009-4303

CVE-2009-4303 affects Moodle 1.8 (before 1.8.11) and 1.9 (before 1.9.7). The issue: sensitive data, including password hashes and unspecified “secrets,” can be stored in backup files, potentially exposing them to an attacker who can access backups. In the connected documents, Debian/SUSE advisori...

Notre Dame Data Breach Number at 24K

Notre Dame University, who originally discovered a data breach back in early November 2009, said 24,000 NDU employees were affected. Read the full article. The Observer...

CVE-2009-4236

EC-CUBE information disclosure vulnerability (CVE-2009-4236) affects EC-CUBE Ver2 Version 2.4.0 RC1 through 2.4.1 and EC-CUBE Community Edition r18068 through r18428. The issue enables remote attackers to obtain sensitive customer data via unknown vectors related to sessions. Root cause is descri...

HSBC Warns of Exposed Customer Info

HSBC Bank says a bug in its imaging software inadvertently exposed sensitive data about some of its customers going through bankruptcy proceedings. Read the full article. Computerworld...

PhpShop 0.8.1 SQL Injection / XSS / XSRF

Application: PhpShop Version affected: 0.8.1 Website: http://www.phpshop.org/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Vuln: Multiple Vulnerabilities SQL INJECTION http://localhost/phpshop-0.8.1/?page=admin/functionlist&moduleid=111111' union...

Heartland CEO Talks Lessons Learned

A Cyber Forensics panel at the U.S Spy Museum discussed data breaches and the effects one bad hacking event can have; The panel discussion included the CEO of Heartland Payment Systems, whose company was the victim of a very large, very publicized data breach in 2008. Read the full article. Dark...

Major D.C. Construction Co. Fooled by Phishing

Nigel Parkinson, president of Parkinson Construction who built the D.C Convention Center and Nationals baseball stadium, fell victim to phony SSN email site that stole passwords, including those to the company’s bank account where money mules were used to steal funds. Read the full article...

Python < 2.5.2 Imageop Module 'imageop.crop()' Buffer Overflow Vulnerability

No description provided by source. Python's 'imageop' module is prone to a buffer-overflow vulnerability. Successful exploits may allow attackers to execute arbitrary code in the context of applications using the vulnerable Python module. This may result in a compromise of the underlying system...