61 matches found
Snapchat Employees Reportedly Spied on Private Snaps
Baltimore ransomware, a Trump golf hack, and more of the week's top security news...
Threat Source newsletter (May 16)
Newsletter compiled by Jonathan Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. We were packed with vulnerabilities this week. For starters, there’s Microsoft Patch Tuesday, which we’ll cover farther down. We al...
A week in security (May 6 – 12)
Last week on Labs, we discussed what to do when you discover a data breach, how 5G could impact cybersecurity strategy, the top six takeaways for user privacy, vulnerabilities in financial mobile apps that put consumers and businesses at risk, and in our series about vital infrastructure, we...
Baltimore City Shuts Down Most of Its Servers After Ransomware Attack
For the second time in just over a year, the city of Baltimore has been hit by a ransomware attack, affecting its computer network and forcing officials to shut down a majority of its computer servers as a precaution. Ransomware works by encryption files and locking them up so users can't access...
Baltimore City Shuts Down Most of Its Servers After Ransomware Attack
For the second time in just over a year, the city of Baltimore has been hit by a ransomware attack, affecting its computer network and forcing officials to shut down a majority of its computer servers as a precaution. Ransomware works by encryption files and locking them up so users can't access...
CyberAegis Aether Competition Team Reflects Bright Future for Young Women in STEM & Cybersecurity
I am always excited to get involved in conversations around getting more young women into STEM earlier. Recently, I was able to catch up with the members of the CyberAegis Aether team, an all-girls, middle school cybersecurity competition team. Here is what they had to say: Tell us a little bit...
baltimore.backonmyfeet.org XSS vulnerability
Open Bug Bounty ID: OBB-674233 Description| Value ---|--- Affected Website:| baltimore.backonmyfeet.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
classifieds.baltimoresun.com XSS vulnerability
Open Bug Bounty ID: OBB-611276 Description| Value ---|--- Affected Website:| classifieds.baltimoresun.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
midatlanticautos.com XSS vulnerability
Open Bug Bounty ID: OBB-598478 Description| Value ---|--- Affected Website:| midatlanticautos.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Baltimore’ 911 CAD system hacked; remained suspended for 17 hours
By Waqas The 911 dispatch system of Baltimore became the target of This is a post from HackRead.com Read the original post: Baltimore’ 911 CAD system hacked; remained suspended for 17 hours...
baltimoreticketsales.com XSS vulnerability
Vulnerable URL: https://www.baltimoreticketsales.com/tickets.php?/Ugly-God/The-Fillmore-Silver-Spring-MD/=1"...
baltimorecitycollege.us XSS vulnerability
Vulnerable URL: https://www.baltimorecitycollege.us/m/album/?dir=users/443627=/m/pages/index.jsp%3FuRECID=443627%26type=u=--%3E%22%3E%3C/a%3E%3C/script%3E%3C/title%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.20...
Two Dozen Zoos Potentially Hit by Data Breach
Anyone who’s visited one of two dozen zoos across America over the last several months may want to check their credit and debit card statements. A third party operator of concessions and retail services at zoos from Hawaii to Florida acknowledged this week that it was hit by a data breach earlier...
CSI: Cyber: We Watched So You Didn't Have To
From the time the first commercials aired during the American pro football championship game last month, CSI: Cyber has been one of the more talked-about and least-anticipated shows in recent memory. At least in tech circles. For normal viewers, it’s one of those shows that you wake up in the...
Silk Road founder Ross Ulbricht Convicted of All 7 Charges; Faces Life In Prison
A jury has found Silk Road founder Ross Ulbricht a.k.a Dread Pirate Roberts guilty on all seven counts and faces Life In Prison for running an underground black market i.e. Silk Road. Ross Ulbricht, a San Francisco 30-year-old web developer was arrested by FBI in a sting operation in October 2013...
Baltimore Technologies WEBsweeper 4.0 DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2465/info Baltimore Technology WEBsweeper is subject to a denial of service condition. Submitting an unusually long HTTP request through WEBsweeper will cause the consumption of all available memory on the server where...
FBI Uses Facebook to Catch Baltimore Terrorist
Gathering evidence on Facebook has become a standard legal practice, so a social sting operation was inevitable. This method led the Federal Bureau of Investigation FBI to apprehend a would-be terrorist in Baltimore. An FBI informant initially contacted 21-year-old Antonio Martinez after he...
CVE-2001-1157
Baltimore Technologies WEBsweeper 4.0 and 4.02 are described as failing to properly filter Javascript from HTML pages, enabling remote bypass of the filter via (1) an extra leading
CVE-2001-1152
Baltimore Technologies WEBsweeper 4.02: A URL blacklist management vulnerability allows remote attackers to bypass restrictions and reach unauthorized web servers by tampering with the requested URL. Exploitation vectors include (1) //, (2) /SUBDIR/.. to access parent directory, (3) /./, or (4) U...
