LabCorp Investigates a Potential Breach that Could Affect Millions

U.S. health diagnostics giant LabCorp has revealed that it detected “suspicious activity” on its network this past weekend, which disrupted its ability to process medical tests. Patient access to testing results was also interrupted. In an SEC filing on Monday, the Fortune 500 company said that i...

CVE-2018-3036

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2018-3094

CVE-2018-3094 covers vulnerabilities in Oracle Outside In Technology’s Outside In Filters component (Oracle Fusion Middleware). IBM bulletin indicates affected products: Rational DOORS Next Generation 6.0.6 with Outside In Technology 8.5.3; remediation for these DOORS versions is to upgrade to 6....

CVE-2018-2934

CVE-2018-2934 affects Oracle E-Business Suite, Oracle Application Object Library (Attachments/File Upload) in 12.1.3. An unauthenticated, network-accessible attacker via HTTP can compromise data, allowing unauthorized update/insert/delete on AOL data. Connected sources corroborate the issue and c...

CVE-2018-2882

CVE-2018-2882 affects the MICROS Retail-J component of Oracle Retail Applications (Interfaces subcomponent). Affected versions are 10.2.x, 11.0.x, 12.0.x, 12.1.x, 12.1.1.x, 12.1.2.x and 13.1.x. An easily exploitable issue allows a low-privilege attacker with network access via HTTP to compromise ...

CVE-2018-2903

CVE-2018-2903 is a vulnerability in the Solaris kernel component of Oracle Solaris (SunOS) affecting Solaris 10 and 11.3. The connected documents confirm it is a local, high-privilege issue that can allow a logon user to compromise Solaris, potentially leading to unauthorized data access or full ...

CVE-2018-2957

The CVE-2018-2957 entry concerns Oracle Hospitality OPERA 5 Property Services (Logging subcomponent) with affected version 5.5.x. The connected documents corroborate a vulnerability that enables an unauthenticated, network-accessible attacker via HTTP to compromise OPERA 5 Property Services, pote...

CVE-2018-3092

CVE-2018-3092 refers to a vulnerability in Oracle Outside In Technology (Outside In Filters) version 8.5.3. Connected sources confirm affected products include IBM Rational DOORS Next Generation (6.0.6) and IBM FileNet Content Manager (5.2.1, 5.5.0, 5.5.1). The issue allows an unauthenticated att...

CVE-2018-2991

CVE-2018-2991 affects Oracle E-Business Suite, specifically the Trade Management UI. Affected versions are 12.1.1–12.2.7. The vulnerability is exploitable over HTTP and does not require authentication, with a prerequisite of user interaction; successful exploitation can grant unauthorized access ...

CVE-2018-2898

CVE-2018-2898 affects Oracle FLEXCUBE Investor Servicing (Infrastructure) with affected versions 12.0.4, 12.1.0, 12.3.0 and 12.4.0. An unauthenticated attacker with network access via HTTP can compromise the component, but attacks require user interaction. Impact includes unauthorized update/inse...

America’s largest diagnostics service LabCorp suffers massive data breach

By Waqas Private records of millions of patients could be at risk following the breach. Security experts have been warning about expected cyber-attacks on healthcare industry since last year’s huge hack-attack on Florida based Medicaid in which private data of nearly 30,000 patients were exposed…...

CVE-2018-11717

CVE-2018-11717 affects Zoho ManageEngine Desktop Central versions prior to 100251. An attacker who can access a log file can leak extensive data from the platform, including Base64-encoded or plaintext credentials (AD accounts, EAS account), recovery_password for Android devices, the plaintext pa...

Sextortionists Shift Scare Tactics to Include Legit Passwords

A fresh take on the classic sextortion scam is making the rounds, with several reports confirming a new wrinkle in approach: The inclusion of a legitimate password in the email for the campaign. Multiple end users have received scam email messages from actors claiming to have taken over the...

Sextortion Scam Uses Recipient’s Hacked Passwords

Here's a clever new twist on an old email scam that could serve to make the con far more believable. The message purports to have been sent from a hacker who's compromised your computer and used your webcam to record a video of you while you were watching porn. The missive threatens to release th...

Incident Response: Do Your Vendor Contracts Have Claws (for Liability)?

In previous blogs, weve discussed some of the struggles organizations have when responding to cyber incidents. For many, it is the recovery aspect, and specifically vendor liability for the data or privacy breach, that poses many questions. In trying to assign liability, the obvious place to star...

Timehop Breach Impacts Personal Data of 21 Million Users

The personal data of millions of Timehop customers has been compromised after a hacker gained access to its cloud-based backend computing environment. Timehop, a service that plugs into users’ social media platforms and shows them memories from the past, disclosed the data breach on Sunday. The...

DomainFactory Hacked—Hosting Provider Asks All Users to Change Passwords

Besides Timehop, another data breach was discovered last week that affects users of one of the largest web hosting companies in Germany, DomainFactory, owned by GoDaddy. The breach initially happened back in last January this year and just emerged last Tuesday when an unknown attacker himself...

Timehop Hacked — Hackers Stole Personal Data Of All 21 Million Users

And the hacks just keep on coming. Timehop social media app has been hit by a major data breach on July 4th that compromised the personal data of its more than 21 million users. Timehop is a simple social media app that collects your old photos and posts from your iPhone, Facebook, Instagram,...

Timehop Hacked — Hackers Stole Personal Data Of All 21 Million Users

And the hacks just keep on coming. Timehop social media app has been hit by a major data breach on July 4th that compromised the personal data of its more than 21 million users. Timehop is a simple social media app that collects your old photos and posts from your iPhone, Facebook, Instagram,...

NHS data breach exposed sensitive health data of 150,000 patients

By Carolina The National Health Service NHS in the United Kingdom has This is a post from HackRead.com Read the original post: NHS data breach exposed sensitive health data of 150,000 patients...