Widespread Scans Underway for RCE Bugs in WordPress Websites

Millions of malicious scans are rolling across the internet, looking for known vulnerabilities in the Epsilon Framework for building WordPress themes, according to researchers. According to the Wordfence Threat Intelligence team, more than 7.5 million probes targeting these vulnerabilities have...

epsilon-publi.net Cross Site Scripting vulnerability

Security Researcher Implosion Helped patch 1641 vulnerabilities Received 7 Coordinated Disclosure badges Received 29 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting epsilon-publi.net website and its users. Following...

epsilon-uitgaven.nl XSS vulnerability

Open Bug Bounty ID: OBB-575524 Description| Value ---|--- Affected Website:| epsilon-uitgaven.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2015-4049

Unisys Libra 43xx, 63xx, and 83xx, and FS600 class systems with MCP-FIRMWARE 40.0 before 40.0IC4 Build 270 might allow remote authenticated users to cause a denial of service data corruption or system crash via vectors related to using program operators during EPSILON level 5 based codefiles at...

epsilon.com XSS vulnerability

Vulnerable URL: http://www.epsilon.com/a-brand-new-view/?s=1%27%22%3E%3CScRiPt%20%3Eprompt%28/OPENBUGBOUNTY/%29%3C/ScRiPt%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 25193 VIP website status:| Yes Check...

Malware Swipes Rocket Data from Japanese space agency

Japan's space agency says it is investigating a possible leak of data about its Epsilon rocket due to a computer virus. Malware Case : The Japan Aerospace Exploration Agency said the virus, in a computer at its Tsukuba Space Centre, north-east of Tokyo, was found to be secretly collecting data an...

Data Breach Affects Two Million NY Customers, State Commission to Investigate

The New York State Public Service Commission announced yesterday they’ll be looking into a data breach that may have exposed the personal information of almost two million customers to unknown attackers. An employee from a software consulting firm contracted by New York State Electric & Gas NYSEG...

Whoops! Cancellation E-Mail Meant For 300 Rattles 8 Million New York Times Subscribers

An errant e-mail campaign has rattled subscribers to the New York Times with false cancellation notices. The e-mail blast meant for 300 subscribers was instead sent to 8 million current subscribers, raising speculation that the paper suffered a data breach. The e-mail, which was widely received,...

Data Breaches for All

Sony’s online gaming platform, The PlayStation Network PSN, disappeared for more than a month starting in April, and no amount of double X and O-ing or right joysticking could save it. The reason? A massive attack on PSN’s network knocked the gaming giant offline and exposed the data of more than...

Attackers Targeting Email Marketing Firms, Using Them to Spam

Attackers are finding it more lucrative than ever to compromise e-mail marketing firms and exploit their resources to send out spam, often containing malware, according to a new report from Websense. Attackers are reportedly targeting corporate webmail accounts and compromising them via phishing...

Washington Post Hacked, 1.27M IDs and E-mail Addresses Stolen

Over a million user IDs and e-mail addresses of job applicants were taken from the Washington Post’s Web site after being hacked late last week, according to a statement posted on the Post’s Web site. The jobs section of the newspaper’s site was hit by two separate “brief” attacks by “an...

Epsilon Ups Ante on Security Following Breach

Nearly three months after marketing services firm Epsilon had its system breached, the company has begun to rebuild the security of its e-mail marketing platform. The firm has unveiled an array of enhancements they claim will mitigate “electronic crimes in motion” according to a press release...

High-Profile Attacks Drive Renewed Push For Breach Notification Law

With each new day bringing news of another intrusion at a high-profile company or government agency, lawmakers are considering a number of legislative responses to the problem, including a potential bill that would require companies to report breaches within 48 hours and establish penalties for...

Forget Epsilon, Fear the Angry Bird

No doubt you read about the huge email security breach Epsilon announced earlier this month. You may have received letters from companies that use Epsilon services about the possible loss of your email information. A lot of people are justifiably concerned that spear phishing and other nefarious...

Attackers taking advantage of Epsilon !

We blogged about the Epsilon data breach to give our customers a heads-up on the situation. Recently, our ThreatSeeker® Network discovered a Web attack that takes advantage of the unfortunate news. As with anything our ThreatSeeker Network discovers, Websense customers are protected by ACE, our...

How Phishers Will Use Epsilon Data Against You

By B.K. DeLong There has been a lot of online venting and hand-wringing in the week since customers of email services provider Epsilon began informing millions of individuals in North America and Europe that their name and e-mail address had been stolen in a massive data breach. In the week since...

Customers Say Scammers Calling, Texting in Wake of Email Breach

As the first phishing attacks begin to emerge targeting the millions of customers affected by the email data breach at Epsilon, there are indications that more than just email addresses and names may have been taken during the attack. Some customers whose email addresses were compromised as part ...

Hackers steal Dell 1000's customer information !

Hackers steal Dell 1000's customer information ! The personal information of thousands of Australians has been stolen by hackers who raided a US-based database company, in what some experts are calling the biggest data theft in US history. Dell Australia says customer data was "exposed" by an...

Stolen data may be sold on cyber black market !

Hackers behind what computer security experts believe could be the biggest data theft in US history may be planning to sell the information to cyber criminals for targeted scams. And while the tens of millions of names and email addresses swiped from online marketing firm Epsilon do not appear to...

Rich Mogull on the RSA Attack and the Epsilon Breach

Dennis Fisher talks with Rich Mogull of Securosis about the fallout from the RSA attack, the way that the communications with the public and customers are being handled and the effects of the email breach at Epsilon. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast ...