19-Year-Old Hacker Arrested Over Making Hoax School and Flight Bomb Threats

British police have arrested a 19-year-old teen who is an alleged member of Apophis Squad cybercriminal group responsible for making hoax bomb threats to thousands of schools and airlines; and DDoSing ProtonMail and Tutanota secure email services. George Duke-Cohan was arrested in his bedroom at...

Sizing Up The Scourge of Credential Stuffing

Last year, 2.3 billion credentials were stolen from 51 different organizations, including Ancestry.com, Imgur and Virgin America. Where do all those user names go? In Shape Security’s second annual Credential Spill Report, it found that billions of stolen digital IDs are contributing to an epidem...

World Cup, Vacation Scams Lead in Phishing Trips this Summer

Summer is one of the traditional seasons of scamming, and this summer is shaping up to be a hot one on that front, with active campaigns swirling around supposed “security incidents,” vacation bookings and, of course, the World Cup. Scammers, for instance, recently targeted Booking.com customers...

datcrawler.panzerairlines.nl XSS vulnerability

Open Bug Bounty ID: OBB-524458 Description| Value ---|--- Affected Website:| datcrawler.panzerairlines.nl Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

china-airlines.com XSS vulnerability

Vulnerable URL: https://www.china-airlines.com/us/en/contact-us/index?q='a'.constructor.prototype.charAt=.join;$eval'x=1 ;alert'XSSPOSED'//'; Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 07.01.2018 Vulnerability type:| XSS Vulnerability status:|...

americanairlines.de XSS vulnerability

Open Bug Bounty ID: OBB-322813 Description| Value ---|--- Affected Website:| americanairlines.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

calec.china-airlines.com XSS vulnerability

Vulnerable URL: https://calec.china-airlines.com/echeckint/echeckine.asp?country=--"=en Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure...

Why It’s Still A Bad Idea to Post or Trash Your Airline Boarding Pass

An October 2015 piece published here about the potential dangers of tossing out or posting online your airline boarding pass remains one of the most-read stories on this site. One reason may be that the advice remains timely and relevant: A talk recently given at a Czech security conference...

crm.lingua-airlines.ru XSS vulnerability

Vulnerable URL: https://crm.lingua-airlines.ru/user/login Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check crm.lingua-airlines....

americanairlines.com Open Redirect vulnerability

Vulnerable URL: https://www.americanairlines.com/utilities/AACruises.jsp?path=http:openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 55611 VIP website...

Hacker Demonstrates How Easy In-flight Entertainment System Can Be Hacked

Next time when you hear an announcement in the flight, “Ladies and gentlemen, this is your captain speaking…," the chances are that the announcement is coming from a hacker controlling your flight. Dangerous vulnerabilities in an in-flight entertainment system used by the leading airlines,...

United Airlines - Base64 encoded String, Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application United Airlines published at the 'play' market has multiple vulnerabilities...

2 Hackers Win Over 1 Million Air Miles each for Reporting Bugs in United Airlines

Two computer hackers have earned more than 1 Million frequent-flyer miles each from United Airlines for finding and reporting multiple security vulnerabilities in the Airline's website. Olivier Beg, a 19-year-old security researcher from the Netherlands, has earned 1 Million air miles from United...

ffp.mahan.aero XSS vulnerability

Open Bug Bounty ID: OBB-172285 Description| Value ---|--- Affected Website:| ffp.mahan.aero Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

eosairlines.com XSS vulnerability

Vulnerable URL: http://eosairlines.com/bh.php?dm=homero.com.mx";;alert'OPENBUGBOUNTY';function zif0// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

book.austrian.com XSS vulnerability

Vulnerable URL: https://book.austrian.com/app/fb.fly?origin='-alert'OPENBUGBOUNTY'-' Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check book.austrian.com SSL...

SAS Scandinavian Airlines - Base64 encoded String, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application SAS Scandinavian Airlines published at the 'play' market has multiple vulnerabilities...

Aegean Airlines - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Aegean Airlines published at the 'play' market has multiple vulnerabilities...

KLM - Royal Dutch Airlines - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application KLM - Royal Dutch Airlines published at the 'play' market has multiple vulnerabilities...

Turkish Airlines - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Turkish Airlines published at the 'play' market has multiple vulnerabilities...