LY Corporation: Improper Access Control in LINE Timeline API that returns a list of hidden friends

Due to an insufficient access control check in an API endpoint for LINE Timeline function, it was possible for an attacker to retrieve a hidden list of any LINE users. Users can configure the hidden list not to show someone's post on their Timeline. Using this vulnerability, an attacker can get a...

Hackers selling 267 million Facebook records on hacker forum

By Waqas Currently, the trove of 267 million Facebook records are being sold for around $600 on the hacker forum. This is a post from HackRead.com Read the original post: Hackers selling 267 million Facebook records on hacker forum...

Russian Hackers Went After San Francisco International Airport

Plus: Windows zero days, Covid-19 spam, and more of the week's top security news...

Hackers use typosquatting to trojanize 700 libraries in Ruby Repository

By Sudais Asif In the traditional sense, we usually come across typosquatting in the form of attackers creating misspelled domain names... This is a post from HackRead.com Read the original post: Hackers use typosquatting to trojanize 700 libraries in Ruby Repository...

Hackers steal 10 TB of data in ransomware attack on energy giant

By Sudais Asif The hackers are demanding 1,580 Bitcoins amounting to $10.9M/€9.9M or from the victim of their ransomware attack. This is a post from HackRead.com Read the original post: Hackers steal 10 TB of data in ransomware attack on energy giant...

Report: Hackers Selling Zoom Zero-Days for Windows, MacOS

Hackers claim they have discovered two zero-day vulnerabilities for the Zoom video conferencing platform that would allow threat actors to spy on people’s private video conferences and further exploit a target’s system. Flaws target Zoom clients for the Windows and the MacOS operating system,...

Hackers Made the Snoo Smart Bassinet Shake and Play Loud Sounds

The now-patched flaws found in the popular internet-connected baby bed underscore the importance of getting security right...

U.S. Offers Rewards up to $5 Million for Information on North Korean Hackers

The United States agencies today released a joint advisory warning the world about the 'significant cyber threat' posed by North Korean state-sponsored hackers to the global banking and financial institutions. Besides a summary of recent cyberattacks attributed to North Korean hackers, the...

U.S. Offers Rewards up to $5 Million for Information on North Korean Hackers

The United States agencies today released a joint advisory warning the world about the 'significant cyber threat' posed by North Korean state-sponsored hackers to the global banking and financial institutions. Besides a summary of recent cyberattacks attributed to North Korean hackers, the...

Travelex Pays $2.3M in Bitcoin to Hackers Who Hijacked Network in January

Travelex has paid out $2.3 million in Bitcoin to hackers to regain access to its global network after a malware attack at the new year knocked the global currency exchange offline and crippled its business during the month of January. The move—reported by the Wall Street Journal—may seem...

Bugs allowed hackers to hijack & activate Mac, iPhone cameras

By Deeba Ahmed There are two main types of hackers, Black Hat Hackers are the bad guys who perform hacking with malicious objectives, and White Hat Hackers are the good guys. This is a post from HackRead.com Read the original post: Bugs allowed hackers to hijack & activate Mac, iPhone cameras...

A Notorious Spyware Vendor Wants to Track Coronavirus Spread

Plus: An evacuated aircraft carrier, Iranian hackers, and more of the week's top security news...

This Week in Security News: More Than 8,000 Unsecured Redis Instances Found in the Cloud and Wiper Malware Called “Coronavirus” Spreads Among Windows Victims

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about 8,000 Redis instances running unsecured in different parts of the world, even deployed in public clouds. Also, read about a new...

With IoT, common devices pose new threats

For Instance… Hackers Setting Your 3D Printer on Fire The world is careening toward the reality that almost all electronics in your home and business are connected to the internet. Many of these devices contain things like heating elements, batteries, and motors that are entirely...

Hackers mining Monero on Microsoft SQL databases for last 2 years

By Sudais Asif Microsoft has been doing a tremendous job in tackling cybercrime but lately... This is a post from HackRead.com Read the original post: Hackers mining Monero on Microsoft SQL databases for last 2 years...

Marriott hacked AGAIN – Millions of guests’ data accessed by hackers

By Waqas Marriott International has been hacked again and this time millions of customer data has been stolen just like in 2018. This is a post from HackRead.com Read the original post: Marriott hacked AGAIN - Millions of guests' data accessed by hackers...

Working from home? Hackers can drop malware with fake Zoom apps

By Sudais Asif There has been a drastic rise in phishing attempts against Zoom and now, hackers are using different techniques... This is a post from HackRead.com Read the original post: Working from home? Hackers can drop malware with fake Zoom apps...

Hackers sending malware infected USBs with Best Buy Gift Cards

By Waqas Researchers maintain that this USB drive is an Arduino microcontroller ATMEGA32U4 and infected with GRIFFON malware. This is a post from HackRead.com Read the original post: Hackers sending malware infected USBs with Best Buy Gift Cards...

Hackers exploiting vulnerable routers to drop malicious “WHO” COVID-19 app

By Sudais Asif In the wake of the Coronavirus or COVID-19 pandemic, we've seen cybercriminals take full advantage and launch different attacks as we covered them recently on HackRead.com. This is a post from HackRead.com Read the original post: Hackers exploiting vulnerable routers to drop...

Chinese Hackers Exploit Cisco, Citrix Flaws in Massive Espionage Campaign

Researchers warn that APT41, a notorious China-linked threat group, has targeted more than 75 organizations worldwide in “one of the broadest campaigns by a Chinese cyber-espionage actor observed in recent years.” Between Jan. 20 and March 11, researchers observed APT41 exploiting vulnerabilities...