Data Breach Exposes 1.6 Million Jobless Claims Filed in the Washington State

The Office of the Washington State Auditor SAO on Monday said it's investigating a security incident that resulted in the compromise of personal information of more than 1.6 million people who filed for unemployment claims in the state in 2020. The SAO blamed the breach on a software vulnerabilit...

Wind River ‘Security Incident’ Affects SSNs, Passport Numbers

Wind River Systems, which develops embedded system software, on Friday warned of a “security incident” that had exposed personnel records. One or more files were downloaded from the company’s network on or around September 29, it said. Affected data included information maintained within the...

CVE-2021-2032

Vulnerability in the MySQL Server product of Oracle MySQL component: Information Schema. Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

BYKEA data breach: Pakistani ride-hailing app exposed 400m records

By Waqas According to researchers, BYKEA's 200 GB worth of database was exposed on an Elasticsearch server. This is a post from HackRead.com Read the original post: BYKEA data breach: Pakistani ride-hailing app exposed 400m records...

Why Data Security and Privacy in the digital age are crucial

Privacy is considered a basic human right but, with so much of our personal data now ‘out there’ in cyberspace, how private can it really be? Data is everywhere, and with rising internet usage, an increase in cloud technologies, and our growing reliance on IoT devices, it continues to grow...

Database of 176 million Pakistani mobile phone users sold online

By Waqas The database contains personal data including full names, physical addresses, and phone numbers. This is a post from HackRead.com Read the original post: Database of 176 million Pakistani mobile phone users sold online...

In the Wake of the SolarWinds Hack, Here's How Businesses Should Respond

Throughout 2020, businesses, in general, have had their hands full with IT challenges. They had to rush to accommodate a sudden shift to remote work. Then they had to navigate a rapid adoption of automation technologies. And as the year came to a close, more businesses began trying to assemble th...

23M Gamer Records Exposed in VIPGames Leak

VIPGames.com, a free platform with a total of 56 available classic board and card games like Hearts, Crazy Eights, Euchre, Dominoes, Backgammon and others, has exposed the personal data of tens of thousands of users. In all, more than 23 million records for more than 66,000 users were left expose...

Massive Brazilian Data Breach

I think this is the largest data breach of all time: 220 million people. Lots more stories are in Portuguese...

Targeted Phishing Attacks Strike High-Ranking Company Executives

An evolving phishing campaign observed at least since May 2020 has been found to target high-ranking company executives across manufacturing, real estate, finance, government, and technological sectors with the goal of obtaining sensitive information. The campaign hinges on a social engineering...

2.28M MeetMindful Daters Compromised in Data Breach

More than 2.28 million members of the online dating site MeetMindful have reportedly been caught up in a wide-ranging data breach that exposes everything from Facebook tokens to physical characteristics. The ShinyHunters hacking group has stolen and published the personally identifiable PII data ...

Weak Password Vulnerability in Deepsix Firewall Management System

DeepService Technology Co., Ltd. is a product and service provider specializing in enterprise-class security, cloud computing and infrastructure. A weak password vulnerability exists in the Firewall Management System of DeepSignal, which can be exploited by an attacker to log in to the backend to...

Einstein Healthcare Network Announces August Breach

Einstein Health Network, a Pennsylvania-based company operating medical rehab, outpatient and primary care centers, announced a breach of its employee email system, which exposed patient personal and medical information. The company waited more than five months to make the compromise public...

Kartpay: Duplicate Entry of email leads to 500 Server Error which disclosing the SQL Database table information

The Issue was with the process of Deletion of the merchant data from the admin Dashboard. The Admin has rights to delete the merchant email ID and further, it gets deleted as Soft delete, not the full delete but there was no Validation to the codes which can detect the re-registration of the same...

CVE-2021-2100

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Print Server. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2021-2083

Vulnerability in the Oracle iSupport product of Oracle E-Business Suite component: User Responsibilities. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2021-2120

CVE-2021-2120 affects Oracle VM VirtualBox (Core) with vulnerable versions before 6.1.18. The issue allows a high-privilege attacker with local logon to compromise the VirtualBox instance, potentially leading to unauthorized access to confidential data and broader impact on connected products. Th...

CVE-2021-2106

CVE-2021-2106 affects Oracle E-Business Suite, Oracle Customer Interaction History (Outcome-Result). Affected versions: 12.1.1–12.1.3 and 12.2.3–12.2.10. It is an easy-to-exploit, network-access vulnerability that allows an unauthenticated attacker with HTTP access to compromise Oracle Customer I...

CVE-2021-2083

CVE-2021-2083 affects Oracle E-Business Suite iSupport (component: User Responsibilities). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability allows unauthenticated, network-accessible attacks over HTTP that require a user interaction (UI:R), potentially leading to unauthor...

CVE-2021-2077

CVE-2021-2077 affects Oracle E-Business Suite’s Oracle iStore (Shopping Cart). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. It is an easily exploitable, unauthenticated remote vulnerability over HTTP that requires user interaction to exploit and can lead to unauthorized access to sensi...