40 matches found
A week in security (September 23 – September 29)
Last week on Malwarebytes Labs: Millions of Kia vehicles were vulnerable to remote attacks with just a license plate number Privacy watchdog files complaint over Firefox quietly enabling its Privacy Preserving Attribution Telegram will hand over user details to law enforcement Don’t share the vir...
larchmontchronicle.com Cross Site Scripting vulnerability OBB-3834762
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
VirusTotal Data Leak Exposes Some Registered Customers' Details
Data associated with a subset of registered customers of VirusTotal, including their names and email addresses, were exposed after an employee inadvertently uploaded the information to the malware scanning platform. The security incident, which comprises a database of 5,600 names in a 313KB file,...
Google Cloud Introduces Security AI Workbench for Faster Threat Detection and Analysis
Google's cloud division is following in the footsteps of Microsoft with the launch of Security AI Workbench that leverages generative AI models to gain better visibility into the threat landscape. Powering the cybersecurity suite is Sec-PaLM, a specialized large language model LLM that's...
deccanchronicle.com Cross Site Scripting vulnerability OBB-3188106
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
preview.houstonchronicle.com Cross Site Scripting vulnerability OBB-2132049
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Zodiac Killer Cipher Solved
The SF Chronicle is reporting more details here, and the FBI is confirming, that a Melbourne mathematician and team has decrypted the 1969 message sent by the Zodiac Killer to the newspaper. Theres no paper yet, but there are a bunch of details in the news articles. Heres an interview with one of...
profile.democratandchronicle.com Cross Site Scripting vulnerability OBB-1259431
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
RSA Wrap Up: It’s All About The People
RSA 2019 just finished and -- as always -- what a week it was. This year was a personal milestone for me, with the week culminating in my presentation with Gary Hayslip, CISO at WebRoot, titled: “Why the Role of the CISO Sucks and What We Should Do about It.” But, before we get to Friday morning ...
Google Launches Backstory — A New Cyber Security Tool for Businesses
Google's one-year-old cybersecurity venture Chronicle today announced its first commercial product, called Backstory , a cloud-based enterprise-level threat analytics platform that has been designed to help companies quickly investigate incidents, pinpoint vulnerabilities and hunt for potential...
Backstory: An Alphabet Moon Shot Wants to Store the Security Industry's Data
Alphabet-owned Chronicle has announced Backstory, an effort to store network intelligence data and help trace cybersecurity incidents back to their roots...
chronicle-tribune.com XSS vulnerability
Open Bug Bounty ID: OBB-620816 Description| Value ---|--- Affected Website:| chronicle-tribune.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
hampshirechronicle.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-618617 Description| Value ---|--- Affected Website:| hampshirechronicle.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
deccanchronicle.com XSS vulnerability
Open Bug Bounty ID: OBB-617290 Description| Value ---|--- Affected Website:| deccanchronicle.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...
chronicle-tribune.com XSS vulnerability
Open Bug Bounty ID: OBB-602022 Description| Value ---|--- Affected Website:| chronicle-tribune.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Chronicle: A Meteor Aimed At Planet Threat Intel?
Alphabet Inc., the parent company of Google, said today it is in the process of rolling out a new service designed to help companies more quickly make sense of and act on the mountains of threat data produced each day by cybersecurity tools. Countless organizations rely on a hodgepodge of securit...
austinchronicle.com XSS vulnerability
Vulnerable URL: https://www.austinchronicle.com/gyrobase/calendar/search?string=xs%22--!%3E%3CSvg/Onload=confirm/OPENBUGBOuNTY/%3E%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
chronicle-express.com XSS vulnerability
Open Bug Bounty ID: OBB-251084 Description| Value ---|--- Affected Website:| chronicle-express.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
austinchronicle.com XSS vulnerability
Vulnerable URL: http://www.austinchronicle.com/gyrobase/Archive/search?Search=No-Tell+Motel=1=%22%3E%3Csvg/onload=alert%28%27XSSPOSED%27%29%3E1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...
austinchronicle.com XSS vulnerability
Vulnerable URL: http://www.austinchronicle.com/gyrobase/Archive/search?Search=xss=4"=1=73675= Details: Description| Value ---|--- Patched:| Yes, at 25.09.2016 Latest check for patch:| 25.09.2016 17:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 55749 Google...