FTC Releases Alert on the Capital One Data Breach

The Federal Trade Commission FTC has released an alert on the Capital One data breach that exposed the personal information of 106 million Capital One credit card customers and applicants. FTC reminds users to check and monitor their credit report to protect against identify theft and to be aware...

CVE-2019-4163

CVE-2019-4163 affects IBM StoreIQ from 7.6.0.0 to 7.6.0.18. Affected component: IBM StoreIQ access control (missing function level access control) that could allow an authenticated user to obtain sensitive information intended for privileged users. Reported CVSS scores: base 4.3 (3.1 vector: CVSS...

Capital One data breach: 106m customers affected; suspected hacker arrested

By Uzair Amir The hacker behind the breach Paige Adele Thompson has been arrested after they bragged about hacking Capital One. This is a post from HackRead.com Read the original post: Capital One data breach: 106m customers affected; suspected hacker arrested...

How to get your Equifax money and stay safe doing it

UPDATE August 2, 2019: The US Federal Trade Commission has warned consumers that, due to the high number of claims made for a cash payout regarding the Equifax data breach, the actual value that will be paid out might be "far less" than the originally-stated $125. You can read the FTC's full...

Former AWS Engineer Arrested as Capital One Admits Massive Data Breach

A massive breach of Capital One customer data has hit more than 100 million people in the U.S. and 6 million in Canada. Thanks to a cloud misconfiguration, a hacker was able to access to credit applications, Social Security numbers and bank account numbers in one of the biggest data breaches to...

Capital One Data Breach Affects 106 Million Customers; Hacker Arrested

Another week, another massive data breach. Capital One, the fifth-largest U.S. credit-card issuer and banking institution, has recently suffered a data breach exposing the personal information of more than 100 million credit card applicants in the United States and 6 million in Canada. The data...

Capital One Data Breach Affects 106 Million Customers; Hacker Arrested

Another week, another massive data breach. Capital One, the fifth-largest U.S. credit-card issuer and banking institution, has recently suffered a data breach exposing the personal information of more than 100 million credit card applicants in the United States and 6 million in Canada. The data...

A Hacker Stole Data From 100 Million Capital One Customers

In a criminal complaint, the FBI detailed how a hacker allegedly stole data from 100 million people—and how she got caught...

How to Get Your Equifax Settlement Money

A settlement with the FTC means Equifax will pay victims of its breach $125 or more. Make sure it pay ups...

This Week in Security News: Unpatched Systems and Lateral Phishing

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about an attack against Elasticsearch that delivers backdoors as its payload. Additionally, read how cybercriminals are turning to...

Oracle PeopleSoft Products PeopleSoft Enterprise PT PeopleTools Component Access Control Error Vulnerability

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle. The products provide human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise PT PeopleTools is one of the tools and technology platform componen...

CVE-2019-2854

CVE-2019-2854 affects IBM Rational DOORS Next Generation 6.0.6.1 (Outside In Filters in Oracle Outside In Technology). The IBM advisory explicitly lists the vulnerable component and provides a fix path: upgrade to Rational DOORS Next Generation 6.0.6.1 iFix004 or later (and for prior versions, up...

CVE-2019-2833

CVE-2019-2833 affects Oracle Hospitality Simphony within Oracle Food and Beverage Applications, with the 18.2.1 release identified as vulnerable. The flaw enables a low-privileged attacker who has Import/Export privileges and network access via HTTP to potentially compromise Simphony and gain una...

CVE-2019-2831

CVE-2019-2831 affects Oracle PeopleSoft Enterprise FIN Project Costing (subcomponent: Projects) with affected version 9.2. The Red Hat/CNVD and CVE records describe an access-control related flaw that allows a low-privileged, unauthenticated or network-access attacker (via HTTP) to perform unauth...

CVE-2019-2786

CVE-2019-2786 affects Oracle Java SE/Java SE Embedded Security component (and related Utilities) with affected Java versions including Java 7/8/11 lines and embedded variants. The CVE describes an unauthenticated network-based vulnerability that can lead to read access to a subset of Java data, w...

CVE-2019-2750

The CVE-2019-2750 entry concerns the MICROS Retail-J component of Oracle Retail Applications (Internal Operations). Affected versions are 12.1.0, 12.1.1, 12.1.2 and 13.1. The vulnerability is exploitable over network via HTTP by an unauthenticated attacker and can lead to unauthorized data access...

CVE-2019-2599

CVE-2019-2599 concerns a vulnerability in Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise PT PeopleTools component (subcomponent: Pagelet Wizard). Affected are versioned releases 8.55, 8.56 and 8.57. The issue allows a low-privileged attacker with network access via HTTP to pot...

CVE-2019-2561

CVE-2019-2561 is a vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications (Internal Operations). Affected versions are 7.0 and 7.1. The issue enables an unauthenticated attacker with network access over HTTP to access or modify Oracle Retail Xstore Office data, p...

CVE-2019-2666

CVE-2019-2666 affects Oracle E-Business Suite One-to-One Fulfillment, Print Server subcomponent, versions 12.1.1–12.1.3 and 12.2.3–12.2.8. An unauthenticated attacker with network access via HTTP can compromise the component; however, successful attacks require user interaction. The vulnerability...

Equifax to Pay up to $700 Million in 2017 Data Breach Settlement

Equifax, one of the three largest credit-reporting firms in the United States, has to pay up to $700 million in fines to settle a series of state and federal investigations into the massive 2017 data breach that exposed the personal and financial data of nearly 150 million Americans—that's almost...