262 matches found
Watch out for this triple threat PayPal phish
ZDNet reports an interesting form of PayPal scam sent to one of their own writers. The scam is a so-called "triple threat" phish, in that it gives the scammer three different ways to potentially collect some ill gotten gains from potential victims. The idea is that if one of the three tactics...
This Malicious App Abused Hacked Devices to Create Fake Accounts on Multiple Platforms
A malicious Android SMS application discovered on the Google Play Store has been found to stealthily harvest text messages with the goal of creating accounts on a wide range of platforms like Facebook, Google, and WhatsApp. The app, named Symoo com.vanjan.sms, had over 100,000 downloads and...
Signal Phone Numbers Exposed in Twilio Hack
Twilio was hacked earlier this month, and the phone numbers of 1,900 Signal users were exposed: Heres what our users need to know: All users can rest assured that their message history, contact lists, profile information, whom theyd blocked, and other personal data remain private and secure and...
Nearly 1,900 Signal Messenger Accounts Potentially Compromised in Twilio Hack
Popular end-to-end encrypted messaging service Signal on Monday disclosed the cyberattack aimed at Twilio earlier this month may have exposed the phone numbers of roughly 1,900 users. "For about 1,900 users, an attacker could have attempted to re-register their number to another device or learned...
Malicious code in azure-communication-phone-numbers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eebc84b85319ed6d2f36c9fc902fe8dbf16a721c397be33473db4cca00811c8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1303 Malicious code in azure-communication-phone-numbers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eebc84b85319ed6d2f36c9fc902fe8dbf16a721c397be33473db4cca00811c8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2137 Malicious code in communication-phone-numbers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 042005d1096efded1c16660b5fb79cbbcc30d3782802bd7f49fb55bb56737c41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in communication-phone-numbers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 042005d1096efded1c16660b5fb79cbbcc30d3782802bd7f49fb55bb56737c41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1304 Malicious code in azure-communication-phone-numbers-samples-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8429bebe06e34edb061ea6b59997e622bda91773c604839ae8159676029df670 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Twitter Used Two-Factor Login Details for Ad Targeting
Twitter was fined $150 million for using phone numbers and email addresses collected for two-factor authentication for ad targeting...
Samsung Account 安全漏洞
Samsung Account is a comprehensive free membership to Samsung services for Samsung mobile devices that can be used on smartphones, tablets, websites, TVs and other devices.An information disclosure vulnerability exists in versions prior to Samsung Account 13.2.00.6, which stems from the exposure ...
LMS Doctor 2 Factor Authentication for Moodle 安全漏洞
LMS Doctor 2 Factor Authentication for Moodle is a Moodle plugin for secondary authentication from LMS Doctor. A security vulnerability exists in LMS Doctor 2 Factor Authentication for Moodle that stems from the presence of an insecure direct object reference IDOR. A remote attacker could exploit...
WordPress plugin Amelia 安全漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Amelia plugin is vulnerable to an...
Ukraine Leaks Personal Details of 620 Alleged FSB Agents
By Deeba Ahmed The Ukrainian Defense Ministrys Directorate of Intelligence claims the personal data includes names, phone numbers, addresses, vehicle license… This is a post from HackRead.com Read the original post: Ukraine Leaks Personal Details of 620 Alleged FSB Agents...
CVE-2022-0720
The Amelia WordPress plugin before 1.0.47 does not have proper authorisation when managing appointments, allowing any customer to update other's booking, as well as retrieve sensitive information about the bookings, such as the full name and phone number of the person who booked it...
CVE-2021-25009
The CorreosExpress WordPress plugin through 2.6.0 generates log files which are publicly accessible, and contain sensitive information such as sender/receiver names, phone numbers, physical and email addresses...
CVE-2021-25009
The CorreosExpress WordPress plugin through 2.6.0 generates log files which are publicly accessible, and contain sensitive information such as sender/receiver names, phone numbers, physical and email addresses...
Design/Logic Flaw
The CorreosExpress WordPress plugin through 2.6.0 generates log files which are publicly accessible, and contain sensitive information such as sender/receiver names, phone numbers, physical and email addresses...
Another Israeli Firm, QuaDream, Caught Weaponizing iPhone Bug for Spyware
A now-patched security vulnerability in Apple iOS that was previously found to be exploited by Israeli company NSO Group was also separately weaponized by a different surveillance vendor named QuaDream to hack into the company's devices. The development was reported by Reuters, citing unnamed...
