4590 matches found
CVE-2020-6271
CVE-2020-6271 affects SAP Solution Manager (Problem Context Manager) version 7.2. The issue arises from insufficient authentication, enabling an attacker to cause memory exhaustion, potentially crash the system and read restricted data (files visible to diagnostics agent admins). Documents consis...
CVE-2020-6271
SAP Solution Manager Problem Context Manager, version 7.2, does not perform the necessary authentication, allowing an attacker to consume large amounts of memory, causing the system to crash and read restricted data files visible for technical administration users of the diagnostics agent...
snappville.com Cross Site Scripting vulnerability OBB-1191361
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Lock and Code S1Ep8: Securely working from home (WFH) with John Donovan and Adam Kujawa
This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to John Donovan, head of security at Malwarebytes, and Adam Kujawa, director of Malwarebtyes Labs, about securely working from home WFH. With shelter-in-pla...
U.S. Nuclear Contractor Hit with Maze Ransomware, Data Leaked
A U.S. military contractor involved in the maintenance of the country’s Minuteman III nuclear arsenal has been hit by the Maze ransomware, according to reports – with the hackers making off with reams of sensitive information. The company, Westech International, has a range of contracts with the...
Joomla Resources Directory Users Exposed in Leaky AWS Bucket
An Amazon Web Services AWS cloud storage bucket that was left open to the public internet has exposed thousands of Joomla users’ personal information. About 2,700 individuals who signed up to use the Joomla Resources Directory JRD – a community forum for finding developers and service providers...
8Belts exposes personal data of 100,000 e-learners globally
By Deeba Ahmed 8Belts database was hosted on a misconfigured Amazon Web Services AWS S3 bucket. This is a post from HackRead.com Read the original post: 8Belts exposes personal data of 100,000 e-learners globally...
Minneapolis Police Department Hack Likely Fake, Says Researcher
As protests continue to proliferate across the globe in the wake of George Floyd’s death, the Minneapolis Police Department is making news for something else: A supposed hack, perpetrated at the hands of the Anonymous hacktivist group. According to Troy Hunt at Have I Been Pwned HIBP, the group o...
A week in security (May 25 – 31)
Last week on Malwarebytes Labs, we published our most recent episode of our podcast Lock and Code, providing an in-depth discussion on web browser privacy, looked at the membership bump for the Coalition against Stalkerware, and dug into EDR solutions. We also looked at twists added to the threat...
Joomla Resources Directory (JRD) Portal Suffers Data Breach
Joomla, one of the most popular Open-source content management systems CMS, last week announced a new data breach impacting 2,700 users who have an account with its resources directory JRD website, i.e., resources.joomla.org. The breach exposed affected users' personal information, such as full...
Joomla Resources Directory (JRD) Portal Suffers Data Breach
Joomla, one of the most popular Open-source content management systems CMS, last week announced a new data breach impacting 2,700 users who have an account with its resources directory JRD website, i.e., resources.joomla.org. The breach exposed affected users' personal information, such as full...
Minted confirms data breach as Shiny Hunters sell its database
By Deeba Ahmed The group of hackers ShinyHunters is behind Minted breach. This is a post from HackRead.com Read the original post: Minted confirms data breach as Shiny Hunters sell its database...
NTT Communications Data Breach Affects Customers, Threatens Supply Chain
Japan-based systems integrator NTT Communications has disclosed a recent data breach that it said impacted hundreds of customers. The total affected comes to as many as 621 customers, the company said, but security experts worry about the impacts of the data breach due to the company’s positionin...
The Bank of America is the latest victim of a data breach
By Deeba Ahmed The Data Breach Impacts Paycheck Protection Program Applications Processing. This is a post from HackRead.com Read the original post: The Bank of America is the latest victim of a data breach...
ordering.burgeration.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1176131 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Alleged data of 47.5 million Truecaller Indian users sold online
By Sudais Asif Truecaller has something to say about the breach. This is a post from HackRead.com Read the original post: Alleged data of 47.5 million Truecaller Indian users sold online...
Hackers Sell Data from 26 Million LiveJournal Users on Dark Web
A database containing credentials from more than 26 million LiveJournal accounts has been leaked online and is being sold on the Dark Web and hacker forums. The data contained in the files appears to be from a 2014 incident in which 33 million accounts were hacked, according to a published report...
katalogstron.dozafinanse.pl Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1173382 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
ThreatList: People Know Reusing Passwords Is Dumb, But Still Do It
More than half of people haven’t changed their password in the last year – even after they’ve heard about a data breach in the news. That’s according to a recent survey, “Psychology of Passwords: The Online Behavior That’s Putting You At Risk,” that examined the online security and password...