Starbucks: Multiple Subdomain takeovers via unclaimed instances

Hacker @benoculars was able to successfully faciliate multiple subdomain takeovers by taking advantage of a process flow to use some of the space provided for germany.openapi.starbucks.com, psv.openapi.starbucks.com, stage-psv.openapi.starbucks.com, and test-psv.openapi.starbucks.com. While we we...

Deloitte breached by hackers for months

On September 25, 2017, Deloitte announced that they detected a breach of the firm’s global email server via a poorly secured admin email in March of this year. Further, the attackers most likely had control of the server since November of 2016. Deloitte’s initial statement indicated that only six...

Apple macOS High Sierra Exploit Lets Hackers Steal Keychain Passwords in Plaintext

Apple yesterday rolled out a new version of its macOS operating system, dubbed High Sierra 10.13—a few hours before an ex-NSA hacker publicly disclosed the details of a critical vulnerability that affects High Sierra as well as all earlier versions of macOS. Patrick Wardle, an ex-NSA hacker and n...

Threat Outbreak Alert RuleID30702: Email Messages Distributing Malicious Software on September 21, 2017

Medium Alert ID: 55364 First Published: 2017 September 21 17:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30702 may contain the following files: Name ...

bartelldrugs.com XSS vulnerability

Open Bug Bounty ID: OBB-300331 Description| Value ---|--- Affected Website:| bartelldrugs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Insights into Iranian Cyber Espionage: APT33 Targets Aerospace and Energy Sectors and has Ties to Destructive Malware

When discussing suspected Middle Eastern hacker groups with destructive capabilities, many automatically think of the suspected Iranian group that previously used SHAMOON – aka Disttrack – to target organizations in the Persian Gulf. However, over the past few years, we have been tracking a...

Tor: Tor Project - Full Path Disclosure

Vulnerability description not provided...

Android Message APP denial of service ddos vulnerability flaws bug(CVE-2017-0780)the use of the research-vulnerability warning-the black bar safety net

0×01 flaws vulnerabilities in the bug description 9 on 7, Trend Micro announced a review of the CVE-2017-0780: rebuff-do flaws vulnerability bug can be incurred Android Message App the collapse of the articles. This morning had confirmed that the flaws vulnerabilities bug on the latest version of...

Become A Certified Hacker – 5 Online Learning Courses for Beginners

Hacking is not a trivial process, but it does not take too long to learn. If you want to learn Ethical Hacking and Penetration testing, you are at right place. We frequently receive emails from our readers on learning how to hack, how to become an ethical hacker, how to break into computers, how ...

Hacker Who Hacked US Spy Chief, FBI & CIA Director Gets 5-Year in Prison

Remember "Crackas With Attitude"? The hacking group behind a series of embarrassing hacks that targeted personal email accounts of senior officials at the FBI, the CIA, and the White House, among other United States federal agencies in 2015. A member of Crackas With Attitude, who was arrested las...

Who Is Marcus Hutchins?

In early August 2017, FBI agents in Las Vegas arrested 23-year-old British security researcher Marcus Hutchins on suspicion of authoring and/or selling "Kronos," a strain of malware designed to steal online banking credentials. Hutchins was virtually unknown to most in the security community unti...

Taringa: Over 28 Million Users' Data Exposed in Massive Data Breach

Exclusive — If you have an account on Taringa, also known as "The Latin American Reddit," your account details may have compromised in a massive data breach that leaked login details of almost all of its over 28 million users. Taringa is a popluar social network geared toward Latin American users...

Hacker Charged for Crashing Businesses Using Millions of Mirai botnet

By Waqas Daniel ‘BestBuy’ Kaye Extradited to the UK Hacker Charged for This is a post from HackRead.com Read the original post: Hacker Charged for Crashing Businesses Using Millions of Mirai botnet...

Not all treasure is silver or gold

How Bug Bounty Programs Help Improve SaaS and Web Security By Captain Jack Sparrow, CC BY-SA 3.0, As many companies who have found themselves victims of a debilitating ransomware attack or major data breach have found out; an ounce of prevention is worth a pound of cure. The same is true for...

Instagram Suffers Data Breach! Hacker Stole Contact Info of High-Profile Users

Instagram has recently suffered a possibly serious data breach with hackers gaining access to the phone numbers and email addresses for many "high-profile" users. The 700 million-user-strong, Facebook-owned photo sharing service has currently notified all of its verified users that an unknown...

Your iPhone7 jailbreak? iOS10 reproduce the vulnerability, the no jailbreak hack said count-vulnerability warning-the black bar safety net

In iOS10 official version released soon after, we saw many third party features on the iPhone can be achieved, the original closed Apple system more and more humanized, once with Cydia developers, announced that iOS no longer need to jailbreak, it can be said that Apple is the perennial stick wit...

August 24, 2017 – Morning Cyber Coffee Headlines – “Mount Vesuvius” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! August 24, 2017 - Headlines Carbon Black in the News: Attacking Critical...

faker.js - Generate Massive Amounts of Fake Data

Generate massive amounts of fake data in Node.js and the browser. Demo https://cdn.rawgit.com/Marak/faker.js/master/examples/browser/index.html Hosted API Microservice http://faker.hook.io Supports all Faker API Methods Full-Featured Microservice Hosted by hook.io curl...

Blowing the Whistle on Bad Attribution

The New York Times this week published a fascinating story about a young programmer in Ukraine who'd turned himself in to the local police. The Times says the man did so after one of his software tools was identified by the U.S. government as part of the arsenal used by Russian hackers suspected ...

Hacker Sells 2FA bypass flaw in Poloniex exchange after 2 months wait

By Waqas The sold vulnerability facilitates Bypassing 2FA on Poloniex The This is a post from HackRead.com Read the original post: Hacker Sells 2FA bypass flaw in Poloniex exchange after 2 months wait...