4574 matches found
Facebook and Instagram passwords were stored in plaintext, Meta fined
Ireland’s privacy watchdog Data Protection Commission DPC has fined Meta €91M $101M after the discovery in 2019 that Meta had stored 600 million Facebook and Instagram passwords in plaintext. The DPC ruled that Meta was in violation of GDPR on several occasions related to this breach. It determin...
CVE-2024-8632
The KB Support – WordPress Help Desk and Knowledge Base plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'kbsajaxloadfrontendreplies' and 'kbsajaxmarkreplyasread' functions in all versions up to, and including, 1.6.6. This...
Facial DNA provider leaks biometric data via WordPress folder
ChiceDNA exposed 8,000 sensitive records, including biometric images, personal details, and facial DNA data in an unsecured WordPress…...
Meta Fined €91 Million for Storing Millions of Facebook and Instagram Passwords in Plaintext
The Irish Data Protection Commission DPC has fined Meta €91 million $101.56 million as part of a probe into a security lapse in March 2019, when the company disclosed that it had mistakenly stored users' passwords in plaintext in its systems. The investigation, launched by the DPC the next month,...
MAL-2024-9012 Malicious code in lodasher (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08b73faea89567454093d1817401e11424bb581f04b34625535c369fd513c5b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
100 million+ US citizens have records leaked by background check service
A background check left a huge database unprotected online containing 2.2TB of people's data, according to research by Cybernews. The database was left passwordless and easily accessible to anyone on the internet by background check firm MC2 Data. MC2 Data gathers publicly available data to provi...
SpaceX, CNN, and The White House internal data allegedly published online. Is it real?
A cybercriminal has released internal data online that they say has come from leaks at several high-profile sources, including SpaceX, CNN, and the White House. However, there are some questions around the reliability and usefulness of the released data, so we took a closer look. When it comes to...
A week in security (September 16 – September 22)
Last week on Malwarebytes Labs: "Simply staggering" surveillance conducted by social media and streaming services, FTC finds Tor anonymity compromised by law enforcement. Is it still safe to use? Walmart customers scammed via fake shopping lists, threatened with arrest Snapchat wants to put your...
The vulnerability of the HTMLDOC document conversion tool, related to pointer assignment errors, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the HTMLDOC document conversion tool is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and even cause service failures through a specially created HTML page...
The vulnerability of the communication protocol between the client and the composer, Wayland, is related to a potential overflow of data. This allows attackers to access confidential information, compromise its integrity, and cause service failures.
The vulnerability of the Wayland communication protocol between the client and the composer is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
Hackers Claim Second Dell Data Breach in One Week
Another day, another claim of Dell data breach!...
Hacker Claims “Minor” Data Breach at DELL; Leaks Over 10,000 Employee Details
A hacker claims Dell suffered a "minor" breach, exposing over 10,000 employee records. The incident raises cybersecurity concerns…...
Chrome Introduces One-Time Permissions and Enhanced Safety Check for Safer Browsing
Google has announced that it's rolling out a new set of features to its Chrome browser that gives users more control over their data when surfing the internet and protects them against online threats. "With the newest version of Chrome, you can take advantage of our upgraded Safety Check, opt out...
iOS 18 is out. Here are the new privacy and security features
On September 16, 2024, Apple released iOS 18. Besides a lot of exciting new features, iOS 18 comes with some privacy and security enhancements. One of the most promising new features is the new Passwords app. Built on the foundation of Apple's password management system Keychain, Passwords makes ...
23andMe to pay $30 million in settlement over 2023 data breach
Genetic testing company 23andMe will pay $30 million to settle a class action lawsuit over a 2023 data breach which ended in some customers having information like names, birth years, and ancestry information exposed. In October 2023, we reported on how information belonging to as many as seven...
Fortinet Confirms Limited Data Breach After Hacker Leaks 440 GB of Data
A hacker claims to have stolen 440 GB of data from cybersecurity firm Fortinet, exploiting an Azure SharePoint…...
Top 3 Threat Report Insights for Q2 2024
Cato CTRL Cyber Threats Research Lab has released its Q2 2024 Cato CTRL SASE Threat Report. The report highlights critical findings based on the analysis of a staggering 1.38 trillion network flows from more than 2,500 of Cato's global customers, between April and June 2024. Key Insights from the...
Payment provider data breach exposes credit card information of 1.7 million customers
Payment provider Slim CD has disclosed a security incident that may have exposed the full credit card information of anyone paying at a merchant that uses Slim CD’s services. The Florida-based gateway system, which allows merchants to take any kind of electronic payment, said on June 15 it notice...