4666 matches found
Logic Flaw Vulnerability in Water Resources Information System of Siltronic Ltd.
Siltronic Ltd. is an information service provider for disaster reduction and profitability. There is a logic flaw vulnerability in the water information system of Sicron Technology Limited, which can be exploited by an attacker to log in to any account and obtain sensitive information...
Embryology Data Breach Follows Fertility Clinic Ransomware Hit
A fertility clinic serving the Atlanta area has been hit with a ransomware attack that also exposed private health information for 38,000 of its patients. Reproductive Biology Associates RBA, along with its affiliate My Egg Bank North America, is a well-known pioneer in in-vitro fertilization IVF...
Cybersecurity firm exposes 5 billion data breach records
By Habiba Rashid Cybersecurity firm Cognyte fails to secure its database exposing 5 billion records comprise of previous data breaches. This is a post from HackRead.com Read the original post: Cybersecurity firm exposes 5 billion data breach records...
Carnival Cruise Cyber-Torpedoed by Cyberattack
Carnival Corp., the world’s largest cruise-ship operator, has sprung another leak: For the second time in a year, attackers have breached email accounts and accessed personal, financial and health information belonging to guests, employees and crew. Carnival has quite the armada: Its cruise brand...
First American Financial Pays Farcical $500K Fine
In May 2019, KrebsOnSecurity broke the news that the website of mortgage settlement giant First American Financial Corp. NYSE:FAF was leaking more than 800 million documents -- many containing sensitive financial data -- related to real estate transactions dating back 16 years. This week, the U.S...
CVS Health Records for 1.1 Billion Customers Exposed
More than 1 billion records for CVS Health customers were left in the database of a third-party, unnamed vendor – exposed, unprotected, online. Researchers said the data points revealed could be strung together to create an extremely personal snapshot of someones’s medical situation. The glitch i...
5 Tips to Prevent and Mitigate Ransomware Attacks
Ransomware attacks cost companies over $100 billion a year. Making matters worse, the overwhelming majority of ransomware attacks now include a threat to leak stolen data if the ransom isn’t paid, a technique called “double extortion.” Cybercriminals like ransomware because the entry barrier is...
Revil ransomware gang claims breaching US nuclear weapons contractor
By Deeba Ahmed The REvil ransomware gang have said that they will auction the data belonging to Sol Oriens, a US-based nuclear weapons contractor. This is a post from HackRead.com Read the original post: Revil ransomware gang claims breaching US nuclear weapons contractor...
Instagram Bug Allowed Anyone to View Private Accounts Without Following Them
Instagram has patched a new flaw that allowed anyone to view archived posts and stories posted by private accounts without having to follow them. "This bug could have allowed a malicious user to view targeted media on Instagram," security researcher Mayur Fartade said in a Medium post today. "An...
Volkswagen Vendor Exposed Data of 3.3m Drivers
One of Volkswagen’s vendors left one of its systems open for nearly two years, exposing the personal data of 3.3 million customers – nearly all of them owners or wannabe owners of the automaker’s luxury brand of Audis – Volkswagen America said last week. The breach took place between August 2019...
Chinese Hackers Believed to be Behind Second Cyberattack on Air India
Even as a massive data breach affecting Air India came to light the previous month, India's flag carrier airline appears to have suffered a separate cyber assault that lasted for a period of at least two months and 26 days, new research has revealed, which attributed the incident with moderate...
Game giant Electronic Arts is the latest victim of massive data breach
By Deeba Ahmed Electronic Arts EA has confirmed that hackers have stolen valuable information from the company, and around 780GB of data was compromised. This is a post from HackRead.com Read the original post: Game giant Electronic Arts is the latest victim of massive data breach...
Baby Clothes Giant Carter’s Leaks 410K Customer Records
Baby clothes retailer Carter’s inadvertently exposed the personal data of hundreds of thousands of its customers, dating back years, according to a new disclosure. The issue started with Linc, which is a vendor the company used to automate purchases online, according to analysts with vpnMentor wh...
Cyberpunk 2077 Hacked Data Circulating Online
New data from the February hack of CD Projekt Red, the videogame-development company behind Cyberpunk 2077 and the Witcher series, is circulating online. Earlier this year, the company suffered a ransomware attack in which a cyberattack group believed by some to be the HelloKitty gang “gained...
CVE-2021-25425
CVE-2021-25425 affects Samsung Health (prior to v6.17). The vulnerability is an improper check in Samsung Health that allows an attacker to read internal cache data via an exported component. Public writeups in connected documents corroborate the issue and reference Samsung’s advisory page; no ex...
Monumental Supply-Chain Attack on Airlines Traced to State Actor
A monster cyberattack on SITA, a global IT provider for 90 percent of the world’s airline industry, is slowly unfurling to reveal the largest supply-chain attack on the airline industry in history. The enormous data breach, estimated to have already impacted 4.5 million passengers, has potentiall...
Hackers Steal FIFA 21 Source Code, Tools in EA Breach
Hackers have breached computer game maker Electronic Arts EA and stolen source code and related tools for the company’s extensive game library, the company has confirmed. EA said it’s investigating “a recent incident of intrusion into our network where a limited amount of game source code and...
Hackers Can Exploit Samsung Pre-Installed Apps to Spy On Users
Multiple critical security flaws have been disclosed in Samsung's pre-installed Android apps, which, if successfully exploited, could have allowed adversaries access to personal data without users' consent and take control of the devices. "The impact of these bugs could have allowed an attacker t...
CVE-2021-28805
CVE-2021-28805 affects QNAP QSS on certain QSW switches: QSW-M2108-2C/2S and QSW-M2108R-2C (pre-1.0.3 build 20210505) and QSW-M408 (pre-1.0.12 build 20210506). Root cause: inclusion of sensitive information in the QSS source code, enabling attackers to read application data. Impact is defined in ...
