4573 matches found
Securing the International IoT Supply Chain
Together with Nate Kim former student and Trey Herr Atlantic Council Cyber Statecraft Initiative, I have written a paper on IoT supply chain security. The basic problem we try to solve is: how to you enforce IoT security regulations when most of the stuff is made in other countries? And our...
CVE-2020-15085
In Saleor Storefront before version 2.10.3, request data used to authenticate customers was inadvertently cached in the browser's local storage mechanism, including credentials. A malicious user with direct access to the browser could extract the email and password. In versions prior to 2.10.0...
CVE-2020-5583
Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to obtain unauthorized Multi-Report's data via unspecified vectors...
openSIS 7.4 Multiple SQL Injection Vulnerabilties
Exploit for php platform in category web applications ----------------------------------------------------- openSIS = 7.4 Multiple SQL Injection Vulnerabilities ----------------------------------------------------- - Software Link: https://opensis.com/ - Affected Versions: Version 7.4 and prior...
prime.economictimes.indiatimes.com Cross Site Scripting vulnerability OBB-1208914
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Stalker Online data breach: Over 1.2m player records sold on dark web
By Deeba Ahmed The records are now up for sale on the dark web putting millions of Stalker Online players’ security at risk. This is a post from HackRead.com Read the original post: Stalker Online data breach: Over 1.2m player records sold on dark web...
Report: ‘BlueLeaks’ Exposes Sensitive Data From Police Departments
Thousands of sensitive police department files – including police and FBI reports – were published on Friday by DDoSecrets Distributed Denial of Secrets, a self-proclaimed “transparency collective” that publishes covert data. The almost 270 gigabytes of data, dubbed “BlueLeaks,” is reportedly fro...
Hackers leak 296 GB worth of data from US Police & Fusion centers
By Sudais Asif The data has been published by a group named "Distributed Denial of Secrets DDoSecrets." This is a post from HackRead.com Read the original post: Hackers leak 296 GB worth of data from US Police & Fusion centers...
Hackers Leaked 269 GB of U.S. Police and Fusion Centers Data Online
A group of hacktivists and transparency advocates has published a massive 269 GB of data allegedly stolen from more than 200 police departments, fusion centers, and other law enforcement agencies across the United States. Dubbed BlueLeaks, the exposed data leaked by the DDoSecrets group contains...
Hackers Leaked 269 GB of U.S. Police and Fusion Centers Data Online
A group of hacktivists and transparency advocates has published a massive 269 GB of data allegedly stolen from more than 200 police departments, fusion centers, and other law enforcement agencies across the United States. Dubbed BlueLeaks, the exposed data leaked by the DDoSecrets group contains...
The vulnerability of the WW8DopTypography function in the text editor oowriter of the office package OpenOffice allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the WW8DopTypography function in the text editor oowriter of the office suite OpenOffice relates to the creation of certain typographic information in .doc format files. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise...
IT guy from FEMA hacked medical center, sold data on dark web
By Waqas According to prosecutors, the 29-year old Johnson sold it on the dark web. This is a post from HackRead.com Read the original post: IT guy from FEMA hacked medical center, sold data on dark web...
CVE-2016-11078
Mattermost Server prior to 3.0.0 is affected. The issue allows an attacker to obtain sensitive information (credential fields in config.json) through the System Console UI. Root cause: exposure of credentials via the System Console; impact concerns confidentiality (C in CVSS v3.1). No remediation...
When Security Takes a Backseat to Productivity
"We must care as much about securing our systems as we care about running them if we are to make the necessary revolutionary change." -CIA's Wikileaks Task Force. So ends a key section of a report the U.S. Central Intelligence Agency produced in the wake of a mammoth data breach in 2016 that led ...
Foodora suffers data breach 700,000+ users in 14 countries affected
By Deeba Ahmed Berlin-based Delivery Hero, the parent company of Foodora has acknowledged the breach. This is a post from HackRead.com Read the original post: Foodora suffers data breach 700,000+ users in 14 countries affected...
Premier League's Return: A Hat Trick of Cyberthreats?
England’s Premier League is returning this week, with millions of soccer fans around the world looking to stream matches using their online video accounts. Unfortunately, the U.K.’s National Cyber Security Centre NCSC is warning on phishing, fraud and brute-forcing attempts by attackers looking t...
Bank Card "Master Key" Stolen
South Africa's Postbank experienced a catastrophic security failure. The bank's master PIN key was stolen, forcing it to cancel and replace 12 million bank cards. The breach resulted from the printing of the bank's encrypted master key in plain, unencrypted digital language at the Postbank's old...
Theft of CIA's 'Vault 7' Secrets Tied to 'Woefully Lax" Security
A just-released report on the 2016 Central Intelligence Agency CIA data breach, which led to the Vault 7 document dump on WikiLeaks, blames “woefully lax” security by the nation’s top spy agency. The conclusions were part of an internal 2017 Department of Justice DoJ report on the CIA breach. On...
845GB of sensitive explicit data on niche dating apps users exposed online
By Waqas The breach took place due to misconfigured AWS Bucket. This is a post from HackRead.com Read the original post: 845GB of sensitive explicit data on niche dating apps users exposed online...
Court Ruling on Forensic Data Breach Reporting Flying Under the Radar
One thing that may have flown under the radar in recent weeks is that a court has ruled that Capital One must allow plaintiffs to review a cybersecurity firm’s forensic report related to the bank’s 2019 data breach despite the bank’s protests that it is a protected legal document. You can read mo...