3105 matches found
Tesla sues ex-employee for hacking & sharing GBs of data with 3rd parties
By Carolina The electric car manufacturing giant, Tesla, has filed a lawsuit This is a post from HackRead.com Read the original post: Tesla sues ex-employee for hacking & sharing GBs of data with 3rd parties...
Ex-CIA employee charged with leaking 'Vault 7' hacking tools to Wikileaks
A 29-year-old former CIA computer programmer who was charged with possession of child pornography last year has now been charged with masterminding the largest leak of classified information in the agency's history. Joshua Adam Schulte, who once created malware for both the CIA and NSA to break...
Yahoo! Hacker Sentenced; Coke Opens Up a Can of Data Breach
Fortune 500 breaches seem to be a theme this week. As the Yahoo attacker responsible for the company’s 500 million-account data breach has been sentenced, Coca-Cola disclosed an insider stole the information of 8,000 employees. A Canadian man who pleaded guilty last year to a “hacking-for-hire”...
Cola-Cola breach: ex-employee stole hard drive with 8,000 workers’ data
By Carolina The world-renowned carbonated soft drink producer Cola-Cola has announced that it has This is a post from HackRead.com Read the original post: Cola-Cola breach: ex-employee stole hard drive with 8,000 workers' data...
WordPress SQL Injection Vulnerability (CNVD-2018-10476)
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress suffers from an information disclosure vulnerability. By exploiting this vulnerability, an attacker can perform SQL...
When Your Employees Post Passwords Online
Storing passwords in plaintext online is never a good idea, but it's remarkable how many companies have employees who are doing just that using online collaboration tools like Trello.com. Last week, KrebsOnSecurity notified a host of companies that employees were using Trello to share passwords f...
Uber: Uber employees are sharing information on productforums.google.com
@researcher found an exposed Google spreadsheet on productforums.google.com containing mostly test data. The researcher also found screenshots of Uber tools on Prezi containing driver personal information. This was result of a small research done after https://twitter.com/xKushagra released tip...
Carbon Black: A “Great Place to Work”
I am excited to announce Carbon Black has been certified as a “Great Place to Work” by the Great Place to Work Institute. It’s Carbon Black’s first such accolade on a national level and speaks volumes for our nearly 1,000 employees worldwide who come to work every day to create a world safe from...
HRSALE The Ultimate HRM 1.0.2 - Authenticated Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: HRSALE The Ultimate HRM 1.0.2 - Authenticated Cross Site Scripting Exploit Author: 8bitsec CVE: CVE-2018-10259 Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/hrsale-the-ultimate-hrm/21665619...
HRSALE The Ultimate HRM v1.0.2 - CSV Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: HRSALE The Ultimate HRM 1.0.2 - CSV Injection Exploit Author: 8bitsec CVE: CVE-2018-10257 Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/hrsale-the-ultimate-hrm/21665619 Version: 1.0.2 Tested...
HRSALE The Ultimate HRM v1.0.2 - award_id SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: HRSALE The Ultimate HRM v1.0.2 - 'awardid' SQL Injection Exploit Author: 8bitsec CVE: CVE-2018-10256 Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/hrsale-the-ultimate-hrm/21665619 Version:...
HRSALE The Ultimate HRM 1.0.2 - CSV Injection
Exploit Title: HRSALE The Ultimate HRM 1.0.2 - CSV Injection Date: 2018-04-23 Exploit Author: 8bitsec CVE: CVE-2018-10257 Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/hrsale-the-ultimate-hrm/21665619 Version: 1.0.2 Tested on: Kali Linux 2.0 | Mac OS 10.13...
The Human (Resource) Role in the Journey to GDPR Compliance
Employees are at the center of dealing with the General Data Protection Regulation GDPR, which is the new European regulation that aims to strengthen and standardize the data pricy rights of European citizens. As we’ve discussed throughout this blog series, the GDPR impacts many organizations...
2018 Cyberthreat Defense Report: Where IT Security Is Going
What keeps you awake at night? We asked IT security professionals the same question and found that these issues are top of mind: malware and spear phishing, securing mobile devices, employee security awareness and new technologies that detect threats capable of bypassing traditional signature-bas...
Carbon Black Opens New Research and Development Office in Greater Portland, Oregon
Carbon Black is proud to announce our new office opening in Hillsboro, Oregon – just outside of Portland. The office will serve as a center for research and development, with a focus on bringing new products to market. Hillsboro lies just outside of Portland, a city that experienced a 40-percent...
LocalTapiola: Malicious file upload (secure.lahitapiola.fi)
Basic report information Summary: Malicious file upload Description: Hello! I noticed that when a user sends new message you have restricted pretty strictly the files which is ok to upload. Like .svg: F254353 How ever if a user impersonate another user just a one example and start the conversatio...
Trend Micro: Winning at Wellness Again
In the never-ending race for profits, shareholder value and customer wins, organizations can sometimes forget about their employees. Yet in reality, your workers are your number one asset: if they feel undervalued or disrespected it can rip the heart and soul out of the organization, setting off ...
Biometric Shift Employee Management System Cross-Site Scripting Vulnerability (CNVD-2018-01395)
Biometric Shift Employee Management System is an employee management system. A cross-site scripting vulnerability exists in Biometric Shift Employee Management System. The vulnerability can be exploited via the LastName parameter in the index.php?user=ajax request...
Biometric Shift Employee Management System Cross-Site Scripting Vulnerability (CNVD-2018-01397)
Biometric Shift Employee Management System is an employee management system. A cross-site scripting vulnerability exists in Biometric Shift Employee Management System. The vulnerability can be exploited via the amount parameter in the index.php?user=additiondeduction request...
