Online exam tool ProctorU admits breach after hackers leak its database

By Waqas ProctorU database containing 444,267 accounts was leaked by ShinyHunters. This is a post from HackRead.com Read the original post: Online exam tool ProctorU admits breach after hackers leak its database...

Hackers Dump 20GB of Intel's Confidential Data Online

More than 20 gigabytes of proprietary data and source code from chipmaker Intel Corp. was dumped online by a third party, likely the result of a data breach from earlier this year. The announcement of the “first 20gb release in a series of large Intel leaks” was made by user and IT consultant...

Augmenting AWS Security Controls

Has the onslaught of lackluster webinars over the past few months left you wanting more? Are you seeking practical, relevant, and usable information and advice on how to stay secure in the cloud? Well, you’re in luck! DivvyCloud, the leading provider of cloud and container security and compliance...

Capital One Fined $80 Million for 2019 Data Breach Affecting 106 Million Users

A United States regulator has fined the credit card provider Capital One Financial Corp with $80 million over last year's data breach that exposed the personal information of more than 100 million credit card applicants of Americans. The fine was imposed by the Office of the Comptroller of the...

Capital One Fined $80 Million for 2019 Data Breach Affecting 106 Million Users

A United States regulator has fined the credit card provider Capital One Financial Corp with $80 million over last year's data breach that exposed the personal information of more than 100 million credit card applicants of Americans. The fine was imposed by the Office of the Comptroller of the...

Chinese Hackers Have Pillaged Taiwan's Semiconductor Industry

A campaign called Operation Skeleton Key has stolen source code, software development kits, chip designs, and more...

Sensitive data of 900 Pulse Secure VPN servers leaked on hacker forum

By Sudais Asif The team behind Pulse Secure VPN had a year to fix the flaw but it did not get a fix. This is a post from HackRead.com Read the original post: Sensitive data of 900 Pulse Secure VPN servers leaked on hacker forum...

SQL Injection Vulnerability in Online Appointment Registration System of Shandong Bailing Health Consulting Co.

Shandong Bailing Health Consulting Co., Ltd. is a high-tech software enterprise with independent research and development capabilities in the main business areas of health consulting, and software research and development, design, development, sales, training and service integration of informatio...

CVE-2020-2077

CVE-2020-2077 concerns SICK Package Analytics. The vulnerability arises from incorrect default permissions in SICK Package Analytics software, affecting versions up to and including V04.0.0, allowing an unauthorized remote attacker to read sensitive data via REST API queries. Some sources indicat...

Crypto wallet Ledger data breach; hackers steal 1m emails & other data

By Sudais Asif Ledger has acknowledged that hackers also gained access to 9500 Phone... This is a post from HackRead.com Read the original post: Crypto wallet Ledger data breach; hackers steal 1m emails & other data...

OkCupid Security Flaw Threatens Intimate Dater Details

Researchers have discovered a slew of issues in the popular OkCupid dating app, which could have allowed attackers to collect users’ sensitive dating information, manipulate their profile data or even send messages from their profile. OkCupid is one of the most popular dating platforms worldwide,...

Hackers leak 7m Dave.com accounts; 17m Couchsurfing accounts for sale

By Sudais Asif Leaked and For Sale - Dave.com and Couchsurfing.com in trouble. This is a post from HackRead.com Read the original post: Hackers leak 7m Dave.com accounts; 17m Couchsurfing accounts for sale...

Zomato: Availing Zomato gold by using a random third-party `wallet_id`

We received a report from @pandaaaa wherein he demonstrated a way to avail Zomato Gold membership using random Zomato User's wallet. The report was triaged and rewarded with critical severity with a CVSS score of 9.3. It was considered critical since a random user's wallet could have been used fo...

Chris Vickery: AI Will Drive Tomorrow’s Data Breaches

From malicious hacks to accidental misconfigurations, Chris Vickery has seen it all. But as cybercriminals continue to innovate, Vickery, the director of risk research with UpGuard, said one emerging security threat will “blindside” the world: “fakeable” voices. More bad actors using artificial...

Software firm leaks 25GB worth of subscription & Ancestry.com user data

By Waqas Here's how Ancestry.com users were implacted. This is a post from HackRead.com Read the original post: Software firm leaks 25GB worth of subscription & Ancestry.com user data...

gotowereklamy.eu Cross Site Scripting vulnerability OBB-1232188

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Google funded delivery service Dunzo hacked; 11GB worth of data leaked

By Waqas The exact date of Dunzo data breach is unclear however its database was leaked last week. This is a post from HackRead.com Read the original post: Google funded delivery service Dunzo hacked; 11GB worth of data leaked...

Twitter Hack Update: What We Know (and What We Don't)

UPDATED 7/18 at 12:50 p.m. ET Earlier this week, Twitter locked down thousands of verified accounts, including the accounts of Joe Biden, Bill Gates, Elon Musk, Apple, Uber and others, after it became clear that hackers had been able to compromise them. The tip-off? Suddenly these high-profile...

Enterprise Data Security: It’s Time to Flip the Established Approach

There’s an old saying when it comes to big undertakings: Don’t boil the ocean. Well, there’s hardly any bigger project in information security than trying to protect corporate data. But the reality is that too many organizations today are, in fact, “boiling the ocean” when it comes to their...

CVE-2020-3450

Cisco Vision Dynamic Signage Director is affected by CVE-2020-3450 via the web-based management interface. The issue is a SQL injection caused by improper validation of user-submitted parameters, exploitable by an authenticated attacker with administrative credentials. Successful exploitation cou...