Social Site Formspring Says 420k User Password Hashes Posted Online

Hackers broke into a development server at Formspring, a social Q&A site, and made off with the password hashes for 420,000 users and later posted them online. The company has reset all of the users’ passwords and said it also has changed the way that it handles passwords. Formspring officials sa...

Indian Navy Computers hacked by Chinese Hackers

Chinese hackers allegedly plant bug via flash drives on India navy's computers, which relayed sensitive data to China IP addresses. The sniffing tool was found in the naval computers exactly as INS Arihant, India's first nuclear missile submarine, was in trials at the targeted facility in...

用友俱乐部SQL注入漏洞

简要描述： 前几天提交的漏洞http://www.wooyun.org/bugs/wooyun-2012-08484，被忽略，想想觉得没意思，可能这是废弃的用友应用，今天有看了看下载的代码，里面的数据库链接虽然已经失效，不过看代码发现了SQL注入漏洞，可以爆库，里面10几万用户数据，就算废弃的应用也不能这样不管不顾用户的个人信息安全 详细说明： 目录遍历漏洞已经报了 WooYun: 用友俱乐部目录遍历至源文件打包下载 ，这个算续集， 注入点：http://tclub.ufida.com.cn/adduser/chkuuid.asp?uuid=1...

Federal Commission Phished, Employees' Information Leaked

The U.S. Commodity Futures Trading Commission CFTC, an independent federal agency that helps regulate futures and option markets, was hit with a data breach last month according to an e-mail statement from the Commission that circulated online late last week. The e-mail confirmed an attacker was...

Woman Sues LinkedIn for $5 Million Over Data Breach

Less than two weeks after learning more than 6 million stolen LinkedIn passwords were posted online, an Illinois woman is leading a class-action lawsuit against the professional networking site for using inadequate security tools to protect its members’ data. Katie Szpyrka, who registered for a...

Face.com Fixes Flaw to Prevent Facebook and Twitter Hijacks

A significant flaw in the Face.com mobile application KLIK has been fixed to prevent Facebook and Twitter users from having their accounts hijacked. KLIK is a camera app that uses face recognition to tag friends in Facebook photos in real time. It also apparently granted access to KLIK users’...

Claims Of Attack On Visa, Mastercard Fizzle

One day after a hacker using the handle “Reckz0r” claims to have infiltrated 79 different banks and leaked information allegedly belonging to Visa and MasterCard customers, there are questions about whether a hack actually occurred. According to a post yesterday on Pastebin, the hacker Reckz0r...

Personal Data Belonging to New Mexico Retirees at Risk After Laptop Theft

The personal information of some 100,000 members of the New Mexico Public Employees Retirement Association PERA is at risk after a thief broke into a truck belonging to an employee working for the company hired to perform PERA’s annual audit and stole a laptop containing the sensitive data. The...

LinkedIn Victims Do Not Connect With Legitimate Notifications

The company sent an important e-mail notification with special coding DKIM and addressed the recipient by name. It also didn’t include any links in the actual message. And yet LinkedIn did not connect with some 250,000 of its users, who flagged the legitimate alert as spam. Some thought it was a...

NYT: When Hackers Strike, Small Business Owners Hit Hard

Independent business owners may find themselves deep in debt after hackers wipe out their bank accounts, with banks reluctant to recoup losses caused by online attacks, according to a report in the New York Times. The article, in the Thursday edition of the Times, details several so-called...

Global Payments Hack May Have Exposed Information On Individuals, Also

Payment processor Global Payments acknowledged Tuesday that a breach at the company announced in early March may have affected individual consumers, as well as merchants. In an update to its 2012infosecurityupdate.com site, the Atlanta-based company wrote that an ongoing investigation “revealed...

Employees Admit They'd Walk Out With Stolen Data If Fired

Privileged accounts have become an important attack vector, and if a recent survey of mostly IT managers and executives is any indication that threat will continue to grow. According to results of ID management provider Cyber-Ark’s sixth annual global “Trust, Security and Passwords Survey,” just...

Survey Shows 85 Percent of Small Business Owners Convinced a Data Breach Unlikely

If a newly released survey is any indication, publicized data breaches aren’t enough to prompt small businesses to better protect their customer or employee data. A survey released this week by The Hartford found 85 percent of small business owners believe a data breach is unlikely and often lack...

Last.fm, Mum On Breach, Adopts 'More Rigorous' Password Security

Last.fm, the online music streaming service, said it has implemented ‘more rigorous’ security for customer account passwords in the wake of reports that some of those passwords had been leaked online. In a post on the company’s Website, Last.fm said that its investigation of reports that hashed o...

eHarmony, Last.fm Emerge as Latest Victims in Wake of LinkedIn Hack

The online dating site eHarmony announced Wednesday that passwords for some of its members have been leaked, making it the second major social network site to announce the theft of user passwords in the last 24 hours. According to an entry posted on the eHarmony Blog, the company reset the affect...

UGNazi hackers attack on CloudFlare via a flaw in Google

UGNazi hackers attack on CloudFlare via a flaw in Google After the FBI arrested Cosmo, the alleged leader of the UGNazi hacking group, the hackers attacked CloudFlare via a flaw in Google's two-factor authentication system. The CloudFlare hack allowed UGNazi to change the DNS for 4chan, so visito...

Student Suspected in University Hack That Leaked Info of 654K Cornhuskers

Officials at the University of Nebraska suspect a current undergraduate student is behind a hack earlier this month that appears to have spilled the sensitive information of tens of thousands of past and present students. According to a report from the Omaha World-Herald today, Police Chief Owen...

Serco: 'Sophisticated' Attack On U.S. Govt. Pension Plan Nets Info On 123k

Serco Inc., a well-known contractor working with the U.S. government, announced that it was the target of a sophisticated attack that exposed data on 123,000 civil employees of the Federal government and their families, including names, addresses and social security numbers taken from the company...

phpCollab 2.5 - Direct Request Multiple Protected Page Access

source: https://www.securityfocus.com/bid/53675/info phpCollab is prone to an unauthorized-access and an arbitrary-file-upload vulnerabilities. Attackers can leverage these issues to gain unauthorized access to application data and to upload and execute arbitrary code in the context of the...

Anonymous hacks Bureau of Justice and leaks 1.7GB of data

Anonymous hacks Bureau of Justice and leaks 1.7GB of data Anonymous has apparently hacked the United States Bureau of Justice Statistics and posted 1.7GB of data belonging to the agency on The Pirate Bay. This is a Monday Mail Mayhem release. Online statements attributed to Anonymous said they we...