Report: Microsoft’s GitHub Account Gets Hacked

Hackers have broken into Microsoft’s GitHub account and stolen 500 GB of data from the tech giant’s own private repositories on the developer platform, according to published reports. A group that calls itself Shiny Hunters claims it stole and then leaked the data, which did not appear to include...

Hackers claim to breach Microsoft’s GitHub account; steal 500GB of data

By Sudais Asif In October 2018, Microsoft acquired GitHub... This is a post from HackRead.com Read the original post: Hackers claim to breach Microsoft's GitHub account; steal 500GB of data...

Data privacy law updates eyed by Singapore

In early 2019, Singapore’s data privacy regulators proposed that the country’s data privacy law could use two new updates—a data breach notification requirement and a right of data portability for the country’s residents. The proposed additions are commonplace in several data privacy laws around...

Code injection

In certain situations, all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020, allow unauthenticated attackers to access the documents and folders of ShareFile users. NOTE: unlike most CVEs, exploitability depends on th...

WordPress Content Management System Data Compromise

The vulnerability of the WordPress content management system’s functions is related to an error in the execution of XSS attacks during shortcode rendering. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

CVE-2020-3312

CVE-2020-3312 affects Cisco Firepower Threat Defense (FTD) Software. The vulnerability stems from insufficient application identification in the FTD policy configuration, enabling an unauthenticated, remote attacker to read sensitive data by sending specifically crafted traffic to an affected dev...

GoDaddy suffers data breach after hackers access SSH accounts

By Deeba Ahmed GoDaddy Admits Data Breach Affecting Web Hosting Account Credentials of Unknown Number of Customers. This is a post from HackRead.com Read the original post: GoDaddy suffers data breach after hackers access SSH accounts...

GoDaddy Hack Breaches Hosting Account Credentials

UPDATE GoDaddy, the world’s largest domain name registrar, is warning customers that attackers may have obtained their web hosting account credentials. An “unauthorized individual” was able to access users’ login details in an intrusion that the company said took place back in October — the compa...

France’s largest newspaper exposed 8 TB of data with 7.4 billion records

By Sudais Asif Data breaches today still remain one of the most common security issues for companies judging by their frequency but... This is a post from HackRead.com Read the original post: France's largest newspaper exposed 8 TB of data with 7.4 billion records...

cartridgecollectors.org Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1155536 Security Researcher Tanzil Helped patch 187 vulnerabilities Received 2 Coordinated Disclosure badges Received 7 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting cartridgecollectors.org websi...

Tokopedia hacked – Login details of 91 million users sold on dark web

By Waqas Another day, another data breach - This time hackers have targeted Tokopedia and stole login data of 91 million user accounts. This is a post from HackRead.com Read the original post: Tokopedia hacked - Login details of 91 million users sold on dark web...

emacs, git, gitk, gitweb, perl security update

CentOS Errata and Security Advisory CESA-2020:1511 An update for git is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Join Us for the Virtual Connect 2020 Conference

Every year, VMware Carbon Black Connect brings together some of the best and brightest in security to collaborate on solving today’s most pressing problems and to learn about the future of endpoint security. While 2020 marks the first year that Connect will be held in a virtual setting, it does n...

Hackers Leak Biopharmaceutical Firm's Data Stolen in Ransomware Attack

The Clop ransomware group attacked biopharmaceutical company ExecuPharm and reportedly leaked some of the company’s compromised data on underground forums. ExecuPharm, a Pennsylvania-based subsidiary of the U.S. biopharmaceutical giant Parexel, provides clinical trial management tools for...

PT-2020-5576 · Sophos · Sophos Sfos +1

Name of the Vulnerable Software and Affected Versions: Sophos XG Firewall versions 17.0, 17.1, 17.5 Sophos XG Firewall versions 18.0 through 2020-04-25 Description: A SQL injection vulnerability exists in Sophos XG Firewall, allowing for potential remote code execution and data exfiltration. The...

Pwned - Simple CLI Script To Check If You Have A Password That Has Been Compromised In A Data Breach

Pwned is a simple command-line python script to check if you have a password that has been compromised in a data breach. This script uses haveibeenpwned API to check whether your passwords were leaked during one of the many breaches of online services. This API uses k-Anonymity model that allows ...

Nintendo accounts hacked: 160,000 accounts accessed by hackers

By Waqas Nintendo suffered a massive data breach in which upto 160,000 Nintendo accounts were accessed by hackers. This is a post from HackRead.com Read the original post: Nintendo accounts hacked: 160,000 accounts accessed by hackers...

CVE-2019-4735

Summary: CVE-2019-4735 affects IBM MaaS360 for iOS. The vulnerability could allow an attacker with physical access to obtain sensitive information from the MaaS360 agent outside the container on devices running 3.96.62 (and prior) when on iOS 13 or greater. Root cause / affected scope (as stated)...

Symfony Input Validation Data Compromise

The vulnerability of the Symfony software development and management platform is related to an application error where unvalidated user input is passed as a file. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

Small Businesses Tapping COVID-19 Loans Hit with Data Exposure

A data breach at the agency in charge of providing financial relief to small businesses during the COVID-19 crisis may have exposed sensitive information of 8,000 business that applied, and may delay payouts, a government official said. The Small Business Administration SBA, which oversees the...