Western Digital WD Discovery Cross-Site Request Forgery Vulnerability

Western Digital MyCloud Home is a personal storage device from Western Digital.Western Digital WD Discovery is a remote connectivity management tool for Western Digital personal storage devices. A cross-site request forgery vulnerability exists in Western Digital WD Discovery versions prior to...

Texas Courts Won't Pay Up in Ransomware Attack

A ransomware attack has hit the information technology office that supports Texas appellate courts and judicial agencies, leading to their websites and computer servers being shut down. The office said that it will not pay the ransom requested by the cybercriminals. Specifically affected is the...

Healthcare Giant Magellan Struck with Ransomware, Data Breach

UPDATE Magellan Health, the Fortune 500 insurance company, has reported a ransomware attack and a data breach. The company, which says it “empowers 1 in 10 Americans to lead healthier, more vibrant lives” according to its website, said the incident was discovered on April 11. It also said that it...

REvil Ransomware Attack Hits A-List Celeb Law Firm

A popular law firm that works with several A-list celebrities, including Lady Gaga, Drake and Madonna, has been hit by a ransomware attack. Hackers are now threatening to release the 756 gigabytes of data allegedly stolen – including non-disclosure agreements, client contracts and personal...

Chatbooks Confirms Breach After ‘Shiny Hunters’ Sell Data

Photo-print service Chatbooks has confirmed a data breach, a week after cybercriminals listed a database containing customer email addresses, passwords and more for sale on an underground forum. The Utah-based company allows users to create customized photo books. Nate Quigley, CEO of Chatbooks,...

agent.fsa-1.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1159493 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Thunderbolt Flaws Expose Millions of PCs to Hands-On Hacking

The so-called Thunderspy attack takes less than five minutes to pull off with physical access to a device, and it affects any PC manufactured before 2019...

DigitalOcean suffers data breach after leaving internal document online

By Deeba Ahmed DigitalOcean has millions of customers worldwide. Here's what happened... This is a post from HackRead.com Read the original post: DigitalOcean suffers data breach after leaving internal document online...

Hackers Breach 3.5 Million MobiFriends Dating App Credentials

The credentials of 3.5 million users of MobiFriends, a popular dating app, have surfaced on a prominent deep web hacking forum, according to researchers. MobiFriends is an online service and Android app designed to help users worldwide meet new people online. The Barcelona-based developer of...

Report: Microsoft’s GitHub Account Gets Hacked

Hackers have broken into Microsoft’s GitHub account and stolen 500 GB of data from the tech giant’s own private repositories on the developer platform, according to published reports. A group that calls itself Shiny Hunters claims it stole and then leaked the data, which did not appear to include...

Hackers claim to breach Microsoft’s GitHub account; steal 500GB of data

By Sudais Asif In October 2018, Microsoft acquired GitHub... This is a post from HackRead.com Read the original post: Hackers claim to breach Microsoft's GitHub account; steal 500GB of data...

Data privacy law updates eyed by Singapore

In early 2019, Singapore’s data privacy regulators proposed that the country’s data privacy law could use two new updates—a data breach notification requirement and a right of data portability for the country’s residents. The proposed additions are commonplace in several data privacy laws around...

Code injection

In certain situations, all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020, allow unauthenticated attackers to access the documents and folders of ShareFile users. NOTE: unlike most CVEs, exploitability depends on th...

The vulnerability of the WordPress website content management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the integrity of data.

The vulnerability of the WordPress content management system’s functions is related to an error in the execution of XSS attacks during shortcode rendering. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

CVE-2020-3312

CVE-2020-3312 affects Cisco Firepower Threat Defense (FTD) Software. The vulnerability stems from insufficient application identification in the FTD policy configuration, enabling an unauthenticated, remote attacker to read sensitive data by sending specifically crafted traffic to an affected dev...

GoDaddy suffers data breach after hackers access SSH accounts

By Deeba Ahmed GoDaddy Admits Data Breach Affecting Web Hosting Account Credentials of Unknown Number of Customers. This is a post from HackRead.com Read the original post: GoDaddy suffers data breach after hackers access SSH accounts...

GoDaddy Hack Breaches Hosting Account Credentials

UPDATE GoDaddy, the world’s largest domain name registrar, is warning customers that attackers may have obtained their web hosting account credentials. An “unauthorized individual” was able to access users’ login details in an intrusion that the company said took place back in October — the compa...

France’s largest newspaper exposed 8 TB of data with 7.4 billion records

By Sudais Asif Data breaches today still remain one of the most common security issues for companies judging by their frequency but... This is a post from HackRead.com Read the original post: France's largest newspaper exposed 8 TB of data with 7.4 billion records...

cartridgecollectors.org Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1155536 Security Researcher Tanzil Helped patch 187 vulnerabilities Received 2 Coordinated Disclosure badges Received 7 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting cartridgecollectors.org websi...

Tokopedia hacked – Login details of 91 million users sold on dark web

By Waqas Another day, another data breach - This time hackers have targeted Tokopedia and stole login data of 91 million user accounts. This is a post from HackRead.com Read the original post: Tokopedia hacked - Login details of 91 million users sold on dark web...