1123 matches found
Proper File Integrity Monitoring Critical in Light of Big Breaches & Regulatory Pressure
In light of the recent mega data breaches that have plagued our market over the last year, and the continued escalation of attempted cyberattacks against critical systems during peak periods i.e. the retail sector POS and payment systems, reported in the Carbon Black Threat Analysis Unit TAU...
Chris Vickery on the Marriott Breach and a Rash of Recent High-Profile Hacks
The number of recent breaches from Marriott International, the United States Postal Service, Dell EMC and Dunkin’ Donuts have potentially exposed well over a half-billion customer records ranging from passport data, bankcard information to reward program specifics. Why the sudden influx on what h...
500 Million Marriott Guest Records Stolen in Starwood Data Breach
The world's biggest hotel chain Marriott International today disclosed that unknown hackers compromised guest reservation database its subsidiary Starwood hotels and walked away with personal details of about 500 million guests. Starwood Hotels and Resorts Worldwide was acquired by Marriott...
gdpr-uae.com XSS vulnerability
Open Bug Bounty ID: OBB-703860 Description| Value ---|--- Affected Website:| gdpr-uae.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unt...
Uber fined $1.1 million by UK and Dutch regulators over 2016 data breach
British and Dutch data protection regulators Tuesday hit the ride-sharing company Uber with a total fine of $1,170,892 1.1 million for failing to protect its customers' personal information during a 2016 cyber attack involving millions of users. Late last year, Uber unveiled that the company had...
Knuddels Flirt App Slapped with Hefty Fine After Data Breach
Germany has slapped a popular in-region dating, flirting and chat service with a €20,000 fine or around $22,667, after a hack affected more than 1.8 million accounts this summer. The Baden-Württemberg Data Protection Authority announced last week it had issued the fine, which is the country’s fir...
How to help maintain security compliance
This is the last post in our eight-blog series on deploying Intelligent Security scenarios. To read the previous entries, check out the Deployment series page. Your employees need to access, generate, and share organizational information ranging from extremely confidential to informal; you must...
User Confidence in Smartphone Security Abysmal
Smartphone owners are growing worried about data privacy, and will delete apps they don’t trust. And only a quarter feel they are in control of their personal data. Research carried out by the Mobile Ecosystem Forum MEF, a trade body, found that Europeans are among the most wary cellphone users,...
madreshoy.com XSS vulnerability
Open Bug Bounty ID: OBB-703149 Description| Value ---|--- Affected Website:| madreshoy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
Instagram Accidentally Exposed Some Users' Passwords In Plaintext
Instagram has recently patched a security issue in its website that might have accidentally exposed some of its users' passwords in plain text. The company recently started notifying affected users of a security bug that resides in a newly offered feature called "Download Your Data" that allows...
Critical WordPress Plugin Flaw Grants Admin Access to Any Registered Site User
Another day, another critical WordPress plugin vulnerability. The popular AMP for WP plugin, which helps WordPress sites load faster on mobile browsers, has a privilege-escalation flaw that allows WordPress site users of any level to make administrative changes to a website. The plugin, which has...
6 security concerns to consider when automating your business
Automation is an increasingly-enticing option for businesses, especially when those in operations are in a perpetual cycle of "too much to do and not enough time to do it." When considering an automation strategy, business representatives must be aware of any security risks involved. Here are six...
WordPress Plugin 'WP GDPR Compliance' < 1.4.3 Privilege Escalation
The WordPress application running on the remote host has a version of the 'WP GDPR Compliance' plugin that is prior to 1.4.3 and, thus, is affected by a user-input validation error that can allow privilege escalation attacks. Such attacks allow, among other actions, creation of new...
WordPress Van Ons WP GDPR Compliance Plugin Elevation of Privilege Vulnerability
WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.Van Ons WP GDPR Compliance plugin is a data collection plugin used in ... An elevation of privilege vulnerability...
WordPress GDPR Compliance plugin hacked to spread backdoor
By Waqas Update your GDPR Compliance plugin right now. Security researchers have identified a critical vulnerability in the popular WP GDPR Compliance plugin assisting over 100,000 website owners around the world to comply with European privacy regulations known as GDPR that was announced by...
WordPress WP GDPR Compliance plugin <= 1.4.2 - Privilege Escalation vulnerability
Privilege Escalation vulnerability found in WordPress WP GDPR Compliance plugin versions = 1.4.2. Solution Update the WordPress WP GDPR Compliance plugin to the latest available version at least 1.4.3...
WordPress WP GDPR Compliance Plugin < 1.4.3 Privilege Escalation Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.141674";...
CVE-2018-19207
The Van Ons WP GDPR Compliance aka wp-gdpr-compliance plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb-prepare input is mishandled, as exploited in the wild in November 2018...
CVE-2018-19207
The CVE-2018-19207 entry concerns the WordPress WP GDPR Compliance plugin (before 1.4.3). The vulnerability stems from improper handling of input to WordPress database operations (notably $wpdb->prepare()), enabling remote attackers to execute arbitrary code. Multiple sources (NVD, Nuclei temp...
Lawsuits Aim Billions in Fines at Equifax and Ad-Targeting Companies
Equifax, Experian and Oracle are among a slate of companies whose business is consumer information, that could soon face billions of dollars in fines for improper data handling. Privacy International has filed complaints against seven corporations, consisting of data brokers Acxiom and Oracle,...