CVE-2020-2849: Undefined Security Weakness

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: Estimate and Actual Charges. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Depot...

CVE-2020-2844: Undefined Security Weakness

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: Estimate and Actual Charges. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Depot...

PT-2020-2311

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access control in the Estimate and Actual Charges component of Oracle Depot Repair, allowing an unauthenticated attacker with network access...

PT-2020-2306

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access controls in the Estimate and Actual Charges component of Oracle Depot Repair. It allows an unauthenticated attacker with network acces...

PT-2020-2308

Name of the Vulnerable Software and Affected Versions Oracle Depot Repair versions 12.1.1 through 12.1.3 Description The issue is related to insufficient access control in the Estimate and Actual Charges component of Oracle Depot Repair, allowing a remote attacker to gain unauthorized access to...

PT-2020-2310

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access control in the Estimate and Actual Charges component of Oracle Depot Repair, allowing an unauthenticated attacker with network access...

PT-2020-2307

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access control in the Estimate and Actual Charges component of Oracle Depot Repair, allowing an unauthenticated attacker with network access...

PT-2020-2309

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access controls in the Estimate and Actual Charges component of Oracle Depot Repair. It allows an unauthenticated attacker with network acces...

PT-2020-2305

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access controls in the Estimate and Actual Charges component of Oracle Depot Repair, allowing an unauthenticated attacker with network access...

PT-2020-2313

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access control in the Estimate and Actual Charges component of Oracle Depot Repair. It allows an unauthenticated attacker with network access...

Apple App Store Riddled With Money-Sucking Fleeceware Apps

Researchers are warning iPhone users of fleeceware apps after finding more than 30 examples of them on Apple’s App Store. Fleeceware is jargon for apps that trick users into paying excessive fees for basic applications and functionality that is available free elsewhere. Many of these fleeceware...

U.S. Charges Huawei with Stealing Trade Secrets from 6 Companies

The US Department of Justice DoJ and the Federal Bureau of Investigation FBI charged Huawei with racketeering and conspiring to steal trade secrets from six US firms, in a significant escalation of a lawsuit against the Chinese telecom giant that began last year. Accusing Huawei and its affiliate...

Equifax Breach: Four Members of Chinese Military Charged with Hacking

U.S. authorities have charged four Chinese military officers in the 2017 Equifax data breach, which compromised the data of nearly 150 million. The four, Wu Zhiyong, Wang Qian, Xu Ke and Liu Lei, are believed to be members of the 54th Research Institute of the Chinese People’s Liberation Army PLA...

Iowa Prosecutors Drop Charges Against Men Hired to Test Their Security

On Sept. 11, 2019, two security experts at a company that had been hired by the state of Iowa to test the physical and network security of its judicial system were arrested while probing the security of an Iowa county courthouse, jailed in orange jumpsuits, charged with burglary, and held on...

Brazil Charges Glenn Greenwald with Cybercrimes

Glenn Greenwald has been charged with cybercrimes in Brazil, stemming from publishing information and documents that were embarrassing to the government. The charges are that he actively helped the people who actually did the hacking: Citing intercepted messages between Mr. Greenwald and the...

‘Fleeceware’ Apps Downloaded 600M Times from Google Play

Google has made a concerted effort in recent months to try to eliminate bad apps for its Android mobile platform on the Google Play store—something the company historically has battled. However, fleeceware apps—which trick users into paying excessive amounts of money for simple apps with...

Hacker Who Tried to Blackmail Apple for $100,000 Sentenced in London

A 22-year-old man who claimed to have access to more than 300 million iCloud accounts00 million iCloud accounts—and threatened to wipe them unless Apple paid a ransom—has pleaded guilty in London to attempting to blackmail the company. In March 2017, the attacker from North London said he was a...

Hackers Stole Customers' Payment Card Details From Over 700 Wawa Stores

Have you stopped at any Wawa convenience store and used your payment card to buy gas or snacks in the last nine months? If yes, your credit and debit card details may have been stolen by cybercriminals. Wawa, the Philadelphia-based gas and convenience store chain, disclosed a data breach incident...

This Alleged Bitcoin Scam Looked a Lot Like a Pyramid Scheme

Five men face federal charges of bilking investors of $722 million by inviting them to buy shares in bitcoin mining pools...

News Wrap: Authorities Target Evil Corp., Imminent Monitor, Money Mules

In this week’s Threatpost news wrap, editors Tara Seals and Lindsey O’Donnell break down the top infosec news, including: Authorities crack down on cybercrime group Evil Corp. with sanctions and charges against its leader, known for his lavish lifestyle. The developers behind a commodity...