Biggest American Bank 'JPMorgan Chase' hacked; 465,000 card users' data stolen

JPMorgan Chase, one of the world's biggest Banks has recently announced that it was the victim of a cyber attack and warned round 465,000 of its holders of prepaid cash cards on the possible exposure of their personal information. In the Security Breach that took place on the bank's website...

Biggest American Bank 'JPMorgan Chase' hacked; 465,000 card users' data stolen

JPMorgan Chase, one of the world’s biggest Banks has recently announced that it was the victim of a cyber attack and warned round 465,000 of its holders of prepaid cash cards on the possible exposure of their personal information. In the Security Breach that took place on the bank’s website...

CVE-2012-5810

The Chase mobile banking application for Android does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, relat...

Design/Logic Flaw

The Chase mobile banking application for Android does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, relat...

CVE-2012-5810

The Chase mobile banking application for Android does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, relat...

CVE-2012-5810

The CVE describes a TLS hostname verification flaw in the Chase mobile banking app for Android: the app does not verify that the server hostname matches the CN/subjectAltName in the X.509 certificate, enabling MITM with arbitrary certificates. Root cause cited as overriding the default X509TrustM...

PT-2012-6122 · Jpmorgan Chase · Chase Mobile Banking Application

Name of the Vulnerable Software and Affected Versions: Chase mobile banking application for Android affected versions not specified Description: The issue concerns a failure to verify the server hostname against the domain name in the X.509 certificate's Common Name CN or subjectAltName field. Th...

'Historic' DDoS Attacks Against Major U.S. Banks Continue

PNC Bank appears, as promised, to be the latest victim of hacktivists carrying out denial-of-service attacks against major U.S. financial services institutions. PNC, out of Pittsburgh, joins Wells Fargo, J.P. Morgan Chase & Co. and Bank of America on a list of banks taken offline reportedly by a...

FBI busts $465,000 credit card scam !

Federal investigators arrested and indicted a former Bridgeport resident who they say orchestrated a scam in which foreign nationals applied for and received credit cards on which they charged up to $465,000 worth of goods before leaving the country with the banks holding the tab. A federal grand...

iPhone Springboard Malformed Character Crash PoC

Exploit for hardware platform in category dos / poc ================================================ iPhone Springboard Malformed Character Crash PoC ================================================ !/usr/bin/python iPhone Springboard crash PoC by Chase Higgins. Devices tested: iPhone 2G @ OS 3.1...

iPhone Springboard - Malformed Character Crash (PoC)

!/usr/bin/python iPhone Springboard crash PoC by Chase Higgins. Devices tested: iPhone 2G @ OS 3.1, iPhone 3GS @ 3.1.3 this script acts as webserver, and causes Safari, as well as Mail and Springboard to crash all these apps crash after running this exploit on the iPhone. Unable to debug any of...

Southern California Man Gets 11 Years in Slammer for ID Theft Ring

Martin Quoc Pham, 28, of Garden Grove was sentenced by a judge to 11 years in Federal prison for spearheading an identity theft ring targeting home equity lines. The compromised accounts of JP Morgan Chase customers were fraudulently accessed and lines of credit were stolen including nearly $1...

chase.online.banking.txt

Date: Thu, 06 May 1999 12:40:08 GMT From: [email protected] Daniel Norton Subject: Security/privacy hole in Chase Online Banking Here's an excerpt from a letter I faxed to Chase Online Banking www.chase.com the other day. Not only have they not fixed the problem, they apparently didn't...