Clear Message Sent: Don’t Roll the Dice on Data Privacy Compliance

Last month, two leading companies each received what were then record-setting fines for data breach violations: £183 million for British Airways and then, just two weeks later, $5 billion for Facebook. Regulators sent a clear message to organizations around the world — if you don't treat your...

E3 Website Leaks Private Addresses for Thousands of Journalists

A YouTube content creator said that she has found a spreadsheet with the names and addresses – including private residences – of more than 2,000 journalists and content creators on the popular Electronic Entertainment Expo E3 trade show’s website. E3 2019, which took place this year June 11 to 13...

Security Fundamentals Are Key To Successful Cloud Migration

Earlier I wrote about the importance of patching, or more accurately the importance of transferring the need to patch & the associated risk to someone else by using their cloud security service. While patching definitely falls into the security fundamentals category it remains as relevant as ever...

Capital One breach exposes over 100 million credit card applications

Just as we were wrapping up the aftermath of the Equifax breach—how was that already two years ago?—we are confronted with yet another breach of about the same order of magnitude. Capital One was affected by a data breach in March. The hacker gained access to information related to credit card...

Threat Source newsletter (Aug. 1, 2019)

Newsletter compiled by Jon Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. Are you heading to Vegas next week for Hacker Summer Camp? Talos will. We’ll be at Black Hat and DEFCON holding a series of talks, takin...

Cisco 'Knowingly' Sold Hackable Video Surveillance System to U.S. Government

Cisco Systems has agreed to pay $8.6 million to settle a lawsuit that accused the company of knowingly selling video surveillance system containing severe security vulnerabilities to the U.S. federal and state government agencies. It's believed to be the first payout on a 'False Claims Act' case...

FTC Releases Alert on the Capital One Data Breach

The Federal Trade Commission FTC has released an alert on the Capital One data breach that exposed the personal information of 106 million Capital One credit card customers and applicants. FTC reminds users to check and monitor their credit report to protect against identify theft and to be aware...

CVE-2019-4163

CVE-2019-4163 affects IBM StoreIQ from 7.6.0.0 to 7.6.0.18. Affected component: IBM StoreIQ access control (missing function level access control) that could allow an authenticated user to obtain sensitive information intended for privileged users. Reported CVSS scores: base 4.3 (3.1 vector: CVSS...

Capital One data breach: 106m customers affected; suspected hacker arrested

By Uzair Amir The hacker behind the breach Paige Adele Thompson has been arrested after they bragged about hacking Capital One. This is a post from HackRead.com Read the original post: Capital One data breach: 106m customers affected; suspected hacker arrested...

How to get your Equifax money and stay safe doing it

UPDATE August 2, 2019: The US Federal Trade Commission has warned consumers that, due to the high number of claims made for a cash payout regarding the Equifax data breach, the actual value that will be paid out might be "far less" than the originally-stated $125. You can read the FTC's full...

Former AWS Engineer Arrested as Capital One Admits Massive Data Breach

A massive breach of Capital One customer data has hit more than 100 million people in the U.S. and 6 million in Canada. Thanks to a cloud misconfiguration, a hacker was able to access to credit applications, Social Security numbers and bank account numbers in one of the biggest data breaches to...

Capital One Data Breach Affects 106 Million Customers; Hacker Arrested

Another week, another massive data breach. Capital One, the fifth-largest U.S. credit-card issuer and banking institution, has recently suffered a data breach exposing the personal information of more than 100 million credit card applicants in the United States and 6 million in Canada. The data...

Capital One Data Breach Affects 106 Million Customers; Hacker Arrested

Another week, another massive data breach. Capital One, the fifth-largest U.S. credit-card issuer and banking institution, has recently suffered a data breach exposing the personal information of more than 100 million credit card applicants in the United States and 6 million in Canada. The data...

A Hacker Stole Data From 100 Million Capital One Customers

In a criminal complaint, the FBI detailed how a hacker allegedly stole data from 100 million people—and how she got caught...

How to Get Your Equifax Settlement Money

A settlement with the FTC means Equifax will pay victims of its breach $125 or more. Make sure it pay ups...

This Week in Security News: Unpatched Systems and Lateral Phishing

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about an attack against Elasticsearch that delivers backdoors as its payload. Additionally, read how cybercriminals are turning to...

Oracle PeopleSoft Products PeopleSoft Enterprise PT PeopleTools Component Access Control Error Vulnerability

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle. The products provide human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise PT PeopleTools is one of the tools and technology platform componen...

CVE-2019-2854

CVE-2019-2854 affects IBM Rational DOORS Next Generation 6.0.6.1 (Outside In Filters in Oracle Outside In Technology). The IBM advisory explicitly lists the vulnerable component and provides a fix path: upgrade to Rational DOORS Next Generation 6.0.6.1 iFix004 or later (and for prior versions, up...

CVE-2019-2833

CVE-2019-2833 affects Oracle Hospitality Simphony within Oracle Food and Beverage Applications, with the 18.2.1 release identified as vulnerable. The flaw enables a low-privileged attacker who has Import/Export privileges and network access via HTTP to potentially compromise Simphony and gain una...

CVE-2019-2831

CVE-2019-2831 affects Oracle PeopleSoft Enterprise FIN Project Costing (subcomponent: Projects) with affected version 9.2. The Red Hat/CNVD and CVE records describe an access-control related flaw that allows a low-privileged, unauthenticated or network-access attacker (via HTTP) to perform unauth...