NordVPN Breach FAQ – What Happened and What's At Stake?

NordVPN, one of the most popular and widely used VPN services out there, yesterday disclosed details of a security incident that apparently compromised one of its thousands of servers based in Finland. Earlier this week, a security researcher on Twitter disclosed that "NordVPN was compromised at...

U.S. Dept Of Defense: [Partial] SSN & [PII] exposed through iPERMs Presentation Slide.

Hello @deptofdefense, when performing reconnaissance, I came across a presentation slide that displayed live data since the data is blocked out & is formatted with XXX-XX with the last 4 digits. The exposed data contains the following: UPC, Division/Brigade, Rank, Soldier Name, Last 4 digits of...

This Week in Security News: Trend Micro Launches its XDR Center in India and EU Reports 5G Cybersecurity Risks

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about Trend Micro’s new XDR Center in India that will help solve data sovereignty issues. Also, read about 5G network software use bei...

Zappos Offers Users 10% Discount in 2012 Breach Settlement

Online retailer Zappos will give customers a 10 percent discount to its online store as settlement for a 2012 data breach that affected 24 million customers, while lawyers in the case will win $1.6 million in fees. The news shows customers once again getting the short end of the stick when it com...

Hacking Back? BriansClub Dark Web Attack a Boon for Banks

UPDATE A Dark Web “carding store” called BriansClub, which specializes in selling stolen payment card information, has itself become a victim, with thieves making off with 26 million credit- and debit-card records. The site appears to be a target of roundabout “hacking back” by a competitor , who...

CVE-2019-3000

CVE-2019-3000 affects Oracle E-Business Suite Marketing Administration. Affected versions: 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing; attacker interaction is required. Consequences include unau...

CVE-2019-2990

CVE-2019-2990 is an Oracle E-Business Suite iStore vulnerability in the Order Tracker component. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. An unauthenticated attacker with network access over HTTP can compromise iStore, with human interaction required for exploit delivery, potentiall...

CVE-2019-2996

CVE-2019-2996 is documented in IBM security advisories as affecting IBM SDK Java Technology Edition (OpenJDK/OpenJ9) deployments used by IBM products. IBM Bulletins list the vulnerability under Java SE Deployment, affecting IBM SDK Java 7/8 (IBM Tivoli Application Dependency Discovery Manager, CI...

CVE-2019-2976

CVE-2019-2976 affects Oracle Primavera P6 Enterprise Project Portfolio Management (P6 EPPM) Web Access. Connected sources confirm vulnerable versions are 17.1.0–17.12.12. The flaw enables a low-privileged attacker with network access via HTTP to compromise P6 EPPM; exploitation is described as ea...

CVE-2019-2923

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are 5.6.45 and prior and 5.7.27 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2019-2884

CVE-2019-2884 affects Oracle Retail Applications’ Retail Customer Management and Segmentation Foundation, specifically the Segment component, with the affected version being 17.0. The Red Hat and NVD records describe an unauthenticated, network-access vulnerability over HTTP that can lead to unau...

CVE-2018-3300

CVE-2018-3300 affects Oracle Retail Xstore Office (Internal Operations) in Oracle Retail Applications, version 7.1. It is a remote, HTTP-accessible vulnerability exploitable by a low-privilege attacker that can lead to unauthorized read, update, insert, or delete operations on data and limited co...

iCal calendar software Buffer Overflow

The vulnerability of the icalmemorystrdupanddequote function in the iCal calendar software for Thunderbird email processing is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cau...

iCal calendar software Buffer Overflow

The vulnerability of the parsergetnextchar function in iCal calendar software for email processing in Thunderbird is related to buffer overflows in dynamic memory during message processing. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...

MediaWiki Auth Bypass

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to the possibility of bypassing the repeated authentication process. Exploiting this vulnerability can allow an intruder operating remotely to compromise data integrity, gain unauthorized access to...

Instagram clamps down on fake messages with anti-phishing tool

Instagram accounts will always be a popular target for scammers. You might not think it’s a big deal if someone has their account swiped, but it’s often the vanguard of many online businesses. A takeover, or a deletion, can be absolutely devastating. Smart hacking crews are always in the...

A week in security (October 7 – 13)

Last week on Malwarebytes Labs, we peered into the possible future of cybersecurity insurance, described the process for securing today’s managed service provider, and provided an in-depth explainer on the business espionage tactic known as “war shipping.” Further, in considering the intersection...

PT-2019-6196 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: Ffmpeg version 4.2.1 Description: The issue is related to an Integer Overflow vulnerability in the filter16 prewitt function within the libavfilter/vf convolution.c component of the Ffmpeg library. This vulnerability can be exploited by a...

Imperva: Data Breach Caused by Amazon Cloud Misconfiguration

Imperva, the security vendor, said this week that a misconfiguration of an Amazon Web Services AWS cloud instance allowed hackers to exfiltrate information on customers using its Cloud Web Application Firewall WAF product. Formerly known as Incapsula, the Cloud WAF analyzes requests coming into...

CVE-2010-5335

IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. The issue arises from inadequate sanitisation of input passed to a parameter in script to basic/minimizer/index.php, allowing an attacker to read arbitrary files on the IceWarp Mailserver or potentially the underlying OS. Mu...