Girl Scouts Issues Data Breach Warning to 2,800 Members

The Orange County, Calif. branch of the Girl Scouts of America has been hacked, potentially exposing personal information for thousands of members. Rest assured though: The cookies are safe, even those of the computing type. According to a letter to members filed with the state PDF, an...

ThreatList: 1 Out of 5 Would Ditch a Business After a Data Breach

About a fifth of Americans would ditch a business in the wake of a major data breach, new research has found. In a survey of 2,000 adult consumers across the United States by PCI Pal, almost half 44 percent of them have personally suffered the negative consequences of a security breach or hack. S...

British Airways Data Breach Takes Off Again with 185K More Victims

British Airways said that the data breach it first reported in September is larger than previously thought. It has added an additional 185,000 victims to the official tally. The airline said that hackers may have stolen personal data connected to an additional 77,000 payment cards, including name...

Cathay Pacific hit by massive data breach; 10 million passengers affected

By Waqas Hong Kong's Cathay Pacific Airways Limited has suffered a massive data breach in which personal data of 9.4 million customers has been stolen by unknown hackers. Cathay Pacific states that the stolen data includes passenger name, date of birth, nationality, email, phone number, frequent...

Huge breach affects 9 million Cathay Pacific customers

Airlines aren’t having a good time of things at the moment. Even if you managed to dodge the recent British Airways fallout, you may well be caught up in the latest breach affecting no fewer than 9 million customers of Cathay Pacific. So what was taken? The impact this time around isn’t so much...

New Relic: Swiftype key stored in JavaScript source

Hi, I am surfing on the newrelic website. I found a sensitive data including authentication key written in public accessible javascript file. Some 3rd party solution SwiftType newrelic using for crawling or search/suggestion. below is the link where you can find the authkey. which would be able t...

Adult Website Hack Exposes 1.2M ‘Wife Lover’ Fans

The database underlying an erotica site known as Wife Lovers has been hacked, making off with user information protected only by a simple-to-crack, outdated hashing technique known as the DEScrypt algorithm. Over the weekend, it came to light that Wife Lovers and seven sister sites, all similarly...

Obamacare Sign-Up Channel Breach Affects 75K Consumers

A hack of the government’s Affordable Care Act-mandated healthcare exchanges has exposed the files of 75,000 individuals. According to the Centers for Medicare and Medicaid Services CMS, its staff detected “anomalous activity” in the Direct Enrollment pathway on Oct. 13 – with a breach declared...

Personal data of 75,000 individuals exposed after HealthCare.gov system hack

By Waqas Centers for Medicare and Medicaid Services CMS experienced a data breach leading to exposure of highly sensitive personal data of nearly 75,000 people. The CMS is a government system linked with healthCare.gov which assists insurance agents and brokers in helping people register for its...

Tumblr Privacy Bug Could Have Exposed Sensitive Account Data

Tumblr on Wednesday disclosed it had fixed a vulnerability that could have exposed sensitive account information including usernames/passwords and individual IP addresses. However, the company stressed there’s no evidence that any data was exposed. The bug existed in the “Recommended Blogs” featu...

Tumblr Patches A Flaw That Could Have Exposed Users' Account Info

Tumblr today published a report admitting the presence of a security vulnerability in its website that could have allowed hackers to steal login credentials and other private information for users' accounts. The affected information included users email addresses, protected hashed and salted...

CVE-2018-3198

The CVE refers to Oracle PeopleSoft Enterprise PeopleTools Portal vulnerability (CVE-2018-3198) affecting PeopleSoft PeopleTools 8.55, 8.56, and 8.57. The issue allows an unauthenticated, network-accessible attacker over HTTP to read a subset of PeopleSoft Enterprise PeopleTools data. The CVSSv3 ...

CVE-2018-3129

The CVE-2018-3129 entry concerns Oracle PeopleSoft Enterprise PeopleTools Portal (PeopleTools component). Affected products/versions are PeopleSoft Portal, versions 8.55, 8.56 and 8.57. The vulnerability allows an unauthenticated, network-accessible attacker to exploit over HTTP, with user intera...

CVE-2018-2887

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Back Office. Supported versions that are affected are 13.0.0 and 12.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS Retail-J. Successf...

CVE-2018-3235

CVE-2018-3235 is a vulnerability in Oracle E-Business Suite’s Oracle Applications Manager (AOM). Affected versions include 12.1.3 and 12.2.3–12.2.7. The issue allows an unauthenticated attacker with network access via HTTP to compromise AOM, with successful attacks potentially granting unauthoriz...

CVE-2018-3189

CVE-2018-3189 affects Oracle E-Business Suite’s Customer Interaction History component (subcomponent Outcome-Result) for versions 12.1.1–12.1.3. It is exploitable over HTTP by an unauthenticated attacker and requires user interaction; impacts include unauthorized disclosure and data modification ...

CVE-2018-3130

CVE-2018-3130 affects Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise Interaction Hub component (subcomponent: Application Portal) with affected version 9.1.0.0. The vulnerability enables a low-privileged, network-accessible attacker over HTTP to compromise data via unauthorize...

CVE-2018-2889

CVE-2018-2889 affects Oracle MICROS Retail-J (Internal Operations) in Oracle Retail Applications, version 12.1.2. The flaw allows an unauthenticated attacker with network access via HTTP to compromise Retail-J, potentially gaining unauthorized access to confidential data. The documents show CVSS ...

PT-2018-16051

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Shipboard Property Management System version 8.0 Description The issue allows a low-privileged attacker with logon to the infrastructure to compromise the system, resulting in unauthorized access to critical data or...

Up to 35 Million 2018 Voter Records For Sale on Hacking Forum

Up to 35 million voter records have been found up for sale on a popular hacking forum from 19 states, researchers discovered. Researchers at Anomali Labs and Intel 471 on Monday said that they discovered Dark Web communications offering a large quantity of voter databases for sale – including...