Lazarus hackers use Magecart attack to steal card data from EU, US sites

By Deeba Ahmed Lazarus hackers are believed to be backed by the North Korean government. This is a post from HackRead.com Read the original post: Lazarus hackers use Magecart attack to steal card data from EU, US sites...

Looks Like Russian Hackers Are on an Email Scam Spree

A group dubbed Cosmic Lynx uses surprisingly sophisticated methods—and targets big game...

Hackers Are Exploiting a 5-Alarm Bug in Networking Equipment

For companies that haven't patched their BIG-IP products, it may already be too late...

Exploit for Path Traversal in F5 Big-Ip_Access_Policy_Manager

RCE-CVE-2020-5902 BIG-IP F5 Remote Code Execution Descripti...

Verizon Media, PayPal, Twitter Top Bug-Bounty Rankings

Bug-bounty programs have become a popular way for vendors to root out security flaws in their platforms, attracting talented white-hats with the promise of big rewards. According to HackerOne’s 2020 List of the Top 10 Bug Bounty Programs on its platform, Verizon Media, PayPal and Uber are in the...

WikiLeaks Founder Charged With Conspiring With LulzSec & Anonymous Hackers

The United States government has filed a superseding indictment against WikiLeaks founder Julian Assange accusing him of collaborating with computer hackers, including those affiliated with the infamous LulzSec and "Anonymous" hacking groups. The new superseding indictment does not contain any...

Hackers leak 296 GB worth of data from US Police & Fusion centers

By Sudais Asif The data has been published by a group named "Distributed Denial of Secrets DDoSecrets." This is a post from HackRead.com Read the original post: Hackers leak 296 GB worth of data from US Police & Fusion centers...

WebEx vulnerability lets hackers impersonate & download meetings

By Sudais Asif WebEx is a video conferencing tool powered by CISCO. This is a post from HackRead.com Read the original post: WebEx vulnerability lets hackers impersonate & download meetings...

CIA failed to protect its sophisticated hacking tools from hackers

By Sudais Asif CIA report reveals a lack of security measures in its operations. This is a post from HackRead.com Read the original post: CIA failed to protect its sophisticated hacking tools from hackers...

Hackers posing as LinkedIn recruiters to scam military, aerospace firms

By Waqas If you are on LinkedIn, watch out! This is a post from HackRead.com Read the original post: Hackers posing as LinkedIn recruiters to scam military, aerospace firms...

Oracle E-Business Suite Flaws Let Hackers Hijack Business Operations

If your business operations and security of sensitive data rely on Oracle's E-Business Suite EBS , make sure you recently updated and are running the latest available version of the software. In a report released by enterprise cybersecurity firm Onapsis and shared with The Hacker News, the firm...

Zoom Shut Down US-Based Activists at China's Request

Hackers for hire, a particularly ignominious phishing campaign, and more of the week’s top security news...

h1-ctf: [H1-2006 2020] Exploiting multiple vulnerabilities to get hacker's payment ensured

Last week, Hackerone’s CEO Marten lost his credentials for BountyPay. A tweet from hackerone’s official twitter account asked for help from ethical hackers and bounty hunters to help the CEO recover his credentials and insure May’s payments. As an active bug hunter on Hackerone, I decided to take...

Indian IT Company Was Hired to Hack Politicians, Investors, Journalists Worldwide

A team of cybersecurity researchers today outed a little-known Indian IT firm that has secretly been operating as a global hackers-for-hire service or hacking-as-a-service platform. Based in Delhi, BellTroX InfoTech allegedly targeted thousands of high-profile individuals and hundreds of...

h1-ctf: [H1-2006 2020] CTF write-up

Summary: Hello HackerOne team! I finally managed to solve this long but really nice CTF! Here is the flag: ^FLAG^736c635d8842751b8aafa556154eb9f3$FLAG$. You can access my writeup at https://diego95root.github.io/posts/H1-2006-CTF/. It's password protected, the password is the flag. Thank you so...

Hackers using malicious CV files to infect PCs with banking trojan

By Deeba Ahmed Here's why one should never open unknown files sent by anonymous users. This is a post from HackRead.com Read the original post: Hackers using malicious CV files to infect PCs with banking trojan...

cbm-hackers.2304266.n4.nabble.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1184943 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

MAZE hackers hit US Nuclear contractor; steal sensitive documents

By Waqas MAZE hackers have leaked the data on their website which is accessible to the public on the normal web as well as the dark web. The US is perhaps undergoing the most difficult phase in its recent history with riots taking place all over the country. Seems like the government’s woes are f...

h1-ctf: [H1-2006 2020] Multiple vulnerabilities lead to CEO account takeover and paid bounties

Summary: 1. A publicly accessible logfile discloses a user's credentials 2. Weak 2FA implementation allows user account takeover 3. Path injection in user's cookie allows SSRF, bypassing the IP restriction to list available builds on https://software.bountypay.h1ctf.com/ 4. API token leak in...

Hackers disrupt Chicago police radios with anti-cop songs

By Sudais Asif Apparently, Anonymous hackers are behind the attack. This is a post from HackRead.com Read the original post: Hackers disrupt Chicago police radios with anti-cop songs...