Following Breach of 283K, Honda Canada Faces Lawsuit

Honda Canada Inc. has announced it was the victim of an attack in March that exposed the records of over 283,000 car owners, potentially putting them at risk of targeted scams. Data such as the owners’ names, addresses and even their Vehicle Identification Numbers VINs were leaked when attackers...

It's Time to Start Sharing Attack Details

With not even half of the year gone, 2011 is becoming perhaps the ugliest year on record for major attacks, breaches and incidents. Lockheed Martin, one of the larger suppliers of technology and weapons systems to the federal government, has become the latest high-profile target of a serious...

HB eCommerce - SQL Injection

HB eCommerce - SQL Injection ------------- HB ECOMMERCE SQL Injection Vulnerability --------------- ------------------------------------------------------------------------ ------------------------------------------------------------------------ + Exploit Title: HB ECOMMERCE SQL Injection...

HB Ecommerce SQL Injection

------------- HB ECOMMERCE SQL Injection Vulnerability --------------- ------------------------------------------------------------------------ ------------------------------------------------------------------------ + Exploit Title: HB ECOMMERCE SQL Injection Vulnerability + Google Dork:...

Comodo Hacked - Reseller private data exposed !

Comodo Hacked - Reseller private data exposed ! Another official reseller of SSL certificate authority Comodo has suffered a security breach that allowed attackers to gain unauthorized access to data. Brazil-based ComodoBR is at least the fourth Comodo partner to be compromised this year. Custome...

Session hacking via authentication cookie on Oracle CRM on Demand

Vulnerability Title: Session hacking via authentication cookie on Oracle CRM on Demand Date: 20/05/2011 Vendor: Oracle Product: Oracle CRM on Demand Software Link: https://sso.crmondemand.com/ Summary: Oracle CRM on Demand is a web application to manage Customer information. Desc: On login proces...

Sony Adds New Chapter to Data Breach Response Manual

In the course of the last five or six years, there has come to be a fairly well-established and familiar cycle for data breaches. Company X discovers an attack that compromised some customer data; it investigates and assesses the damage; it reports the breach to the relevant authorities and...

Keyfax Customer Response Management 3.2.2.6 - Multiple Cross-Site Scripting Vulnerabilities

Keyfax Customer Response Management 3.2.2.6 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/47772/info Keyfax Customer Response Management is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input...

( #SOE ) Sony hit with second attack, loses 12,700 credit card numbers !

SOE Sony hit with second attack, loses 12,700 credit card numbers ! Sony loses 12,700 credit card account numbers, 24.6 million accounts compromised Following up on this morning's news that Sony Online Entertainment servers were offline across the board, Sony Online Entertainment announced that i...

US Congress wants answers from Sony on PlayStation hack !

US Congress wants answers from Sony on PlayStation hack ! A U.S. congressional committee has asked Sony Computer Entertainment to explain several issues surrounding the massive potential leak of information on customers of its PlayStation Network. The network, which serves as an e-commerce and...

PSN Breach: Sony Says Credit Card Data Was Encrypted

Sony officials are now saying that while they’re still unsure whether the attackers behind the recent breach of the PlayStation Network stole customers’ credit-card data, the data itself was indeed encrypted n the database. In its initial communications about the PSN attack, Sony did not make any...

[security bulletin] HPSBMA02665 SSRT100185 rev.1 - HP Virtual Server Environment for Windows, Remote Privilege Elevation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02749050 Version: 1 HPSBMA02665 SSRT100185 rev.1 - HP Virtual Server Environment for Windows, Remote Privilege Elevation NOTICE: The information in this Security Bulletin should be acted upon as...

Important: Red Hat Security Advisory: JBoss Enterprise SOA Platform 4.3.0.CP04 and 5.1.0 security update

An updated jboss-seam.jar file for JBoss Enterprise SOA Platform 4.3.0.CP04 and 5.1.0 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring Syste...

German software developer Ashampoo Hit by Data Breach !

German software developer Ashampoo Hit by Data Breach ! German software developer Ashampoo has notified its customers about a data breach incident that resulted in the exposure of their names and email addresses. According to an announcement posted on the company's website, unidentified hackers...

Stolen data may be sold on cyber black market !

Hackers behind what computer security experts believe could be the biggest data theft in US history may be planning to sell the information to cyber criminals for targeted scams. And while the tens of millions of names and email addresses swiped from online marketing firm Epsilon do not appear to...

Epsilon Data Breach Expands to Include Capital One, Disney, Others

The compromise of a system at online marketing company Epsilon Data Management that came to light last week and involves the email addresses and names of customers at companies such as Citibank, Kroger and Disney expanded over the weekend to include a slew of other companies. The attack does not...

Kroger Customer Database Hacked !

Kroger Customer Database Hacked ! The company announced in an e-mail to customers their system has been hacked by someone outside the company. This means the hacker had access to customer names and e-mail addresses contained in the Kroger database. Kroger stresses only the names and e-mail...

Epsilon's (Marketing services firm) Customer Lists of Major Brands Compromised !

Epsilon's Marketing services firm Customer Lists of Major Brands Compromised ! Due to the growing list of brands disclosing that they have been compromised as a result of this breach, I'm going to go ahead and tag this as a massive breach. And I only expect it to get bigger as more announcements...

Keyloggers in Samsung Laptops, Officials says - Samsung laptops are in fact secure !

Keyloggers in Samsung Laptops, Officials says - Samsung laptops are in fact secure ! We'll start by saying that we've reached out to Samsung for a response here, but as of now, no reply has been given -- neither a confirmation nor a refusal of truth. Why bother mentioning that? If this here story...

TripAdvisor Warns Customers of Data Breach

TripAdvisor, the popular travel-planning site, is warning customers that some portion of the company’s customer email database was stolen recently by attackers. The company is not saying how many customers are affected or how the breach occurred. TripAdvisor posted a message on its site warning...