Ransomware Is Getting Ugly

Modern ransomware has two dimensions: pay to get your data back, and pay not to have your data dumped on the Internet. The DC police are the victims of this ransomware, and the criminals have just posted personnel records -- "including the results of psychological assessments and polygraph tests;...

200K Veterans’ Med Records May Have Been Stolen by Ransomware Gang

UPDATE A database filled with the medical records of nearly 200,000 U.S. military veterans was exposed online by a vendor working for the Veterans Administration, according to an analyst, who also presented evidence the data might have been exfiltrated by ransomware attackers. The VA for it’s par...

Alleviating ransomware’s legal headaches with Jake Bernstein: Lock and Code S02E08

This week on Lock and Code, we speak to cybersecurity and privacy attorney Jake Bernstein about ransomware attacks that dont just derail a companys reputation and productivity, but also throw them into potential legal peril. In 2020, the cybersecurity community noticed a worrying trend from...

Weak password vulnerability in NETGEAR WGR614v7 router

The NETGEAR WGR614v7 router is a wireless router device. The NETGEAR WGR614v7 router suffers from a weak password vulnerability that can be exploited by an attacker to compromise the device, obtain sensitive information and perform unauthorized operations...

Pax Technology PAXSTORE Information Disclosure Vulnerability (CNVD-2021-34507)

PAX Technology PAXSTORE is an application from China PAX PAX Inc. An ecosystem that connects 2.5 million terminals, thousands of application developers and 180+ markets in 80+ countries worldwide. An information disclosure vulnerability exists in Pax Technology PAXSTORE version v7.0.8202005111715...

ShinyHunters leak database of Indian wedding portal WedMeGood

By Waqas The leaked WedMeGood database contains 41.5 GB worth of data which is another massive data leak from ShinyHunters. ShinyHunters, the notorious hacker known for leaking databases of firms like Animal Jam, Mashable, Upstox, and 123RF, etc., is back with yet another high-profile data breach...

New Qualcomm Chip Bug Could Let Hackers Spy On Android Devices

Cybersecurity researchers have disclosed a new security vulnerability in Qualcomm's mobile station modems MSM that could potentially allow an attacker to leverage the underlying Android operating system to slip malicious code into mobile phones, undetected. "If exploited, the vulnerability would...

Anti-Spam WordPress Plugin Could Expose Website User Data

An SQL-injection vulnerability discovered in a WordPress plugin called “Spam protection, AntiSpam, FireWall by CleanTalk” could expose user emails, passwords, credit-card data and other sensitive information to an unauthenticated attacker. Spam protection, AntiSpam, FireWall by CleanTalk is...

They Told Their Therapists Everything. Hackers Leaked It All

A mental health startup built its business on easy-to-use technology. Patients joined in droves. Then came a catastrophic data breach...

U.S. Dept Of Defense: SSRF due to CVE-2021-27905 in www.████████

Apache Solr is vulnerable to SSRF using the parameter "masterUrl". This issue is registered as CVE-2021-27905. Impact A successful SSRF attack can often result in unauthorized actions or access to data within the organization, either in the vulnerable application itself or on other back-end syste...

Benefits of Building a Multi-prong Mousetrap for WAF Policies with ML

The reason behind buying a market-leading Web Application Firewall WAF is to protect your website and web applications from malicious attacks, plus complying with industry or regional data and privacy standards. In addition to the typical OWASP Top 10 vulnerabilities, WAFs need to address a litan...

COVID-19 Results for 25% of Wyoming Accidentally Posted Online

The Wyoming Department of Health WDH said on Wednesday it accidentally posted COVID test results of state residents onto their public-facing storage buckets. The WDH said in a public advisory that an employee fumbled the health information of about 164,021 Wyoming residents and of people from oth...

Anti-Vaxxer Hijacks QR Codes at COVID-19 Check-In Sites

Quick-response QR codes used by a COVID-19 contact-tracing program were hijacked by a man who simply slapped up scam QR codes on top to redirect users to an anti-vaccination website, according to local police. He now faces two counts of “obstructing operations carried out relative to COVID-19 und...

Password manager hijacked to deliver malware in supply chain attack

In the latest example of a supply chain attack, cybercriminals delivered malware to customers of the business password manager Passwordstate by breaching its developer’s networks and then deploying a fraudulent update last week, said Passwordstate’s maker, Click Studios. Though the number of...

3.2 Billion Leaked Passwords Contain 1.5 Million Records with Government Emails

A staggering number of 3.28 billion passwords linked to 2.18 billion unique email addresses were exposed in what's one of the largest data dumps of breached usernames and passwords. In addition, the leak includes 1,502,909 passwords associated with email addresses from government domains across t...

WordPress: PII of users can be downloaded from export pages

Sensitive personally identifiable information PII of users, including their name, email, phone number, role, and organization, was exposed on the https://doaction.org/ website. The PII was found in CSV files that could be downloaded from various endpoints on the website, which could be enumerated...

CVE-2021-2306

CVE-2021-2306 affects Oracle VM VirtualBox Core before 6.1.20. Multiple connected advisories confirm this vulnerability in VirtualBox, with impacts including arbitrary code execution, information disclosure, and potential filesystem access, primarily for local/privileged attack scenarios. The pub...

CVE-2021-2285

CVE-2021-2285 is a vulnerability in Oracle VM VirtualBox (Core) affecting versions prior to 6.1.20. An unauthenticated attacker with logon to the infrastructure where VirtualBox runs can compromise the VirtualBox instance, potentially exposing data or taking over the VirtualBox data. Public refer...

CVE-2021-2283

CVE-2021-2283 affects Oracle VM VirtualBox (Core) prior to version 6.1.20. Description: an information-disclosure vulnerability that is easily exploitable and allows an unauthenticated attacker with logon to the infrastructure where VirtualBox runs to access sensitive data or all data accessible ...

CVE-2021-2276

CVE-2021-2276 affects Oracle E-Business Suite iSetup, specifically the General Ledger Update Transform and Reports components. Affected versions are 12.1.3 and 12.2.3–12.2.10. The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to compromise iSetup, potentially leadin...