Sensitive source codes exposed in Microsoft Azure Blob account leak

By Habiba Rashid The research team at vpnMentor, who discovered the data, believes that it belongs to Microsoft. Here's what was leaked and what we know so far. This is a post from HackRead.com Read the original post: Sensitive source codes exposed in Microsoft Azure Blob account leak...

Hackers Threaten to Leak D.C. Police Informants' Info If Ransom Is Not Paid

The Metropolitan Police Department MPD of the District of Columbia has become the latest high-profile government agency to fall victim to a ransomware attack. The Babuk Locker gang claimed in a post on the dark web that they had compromised the DC Police's networks and stolen 250 GB of unencrypte...

Apple iOS 安全漏洞

Apple iOS is a set of operating systems developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS that allows local users to view sensitive information in the application switcher. The following products and versions are affected: iPhone 6s and later, iPad Pro all...

CVE-2021-21221

Insufficient validation of untrusted input in Mojo in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page...

DEBIAN-CVE-2021-21211

Inappropriate implementation in Navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2021-21211

Inappropriate implementation in Navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2021-21209

CVE-2021-21209 concerns the Google Chrome storage API: an inappropriate implementation allowed a remote attacker to leak cross-origin data via a crafted HTML page in Chrome versions prior to 90.0.4430.72. The issue is documented across multiple advisories, noting it as an information-disclosure v...

Hackers threaten to leak stolen Apple blueprints if $50 million ransom isn't paid

Prominent Apple supplier Quanta on Wednesday said it suffered a ransomware attack from the REvil ransomware group, which is now demanding the iPhone maker pay a ransom of $50 million to prevent leaking sensitive files on the dark web. In a post shared on its deep web "Happy Blog" portal, the thre...

REvil ransomware gang hits Apple supplier Quanta; warns of data leak

By Waqas REvil ransomware gang claims to be negotiating with 3rd-parties to sell the alleged stolen data. This is a post from HackRead.com Read the original post: REvil ransomware gang hits Apple supplier Quanta; warns of data leak...

CVE-2021-28048

An overly permissive CORS policy in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows a remote attacker to leak cross-origin data via a crafted HTML page...

Indian supply-chain giant Bizongo exposed 643GB of sensitive data

By Habiba Rashid Bizongo did not respond to the researchers when contacted about the data leak. Here's how it happened and what data was leaked. This is a post from HackRead.com Read the original post: Indian supply-chain giant Bizongo exposed 643GB of sensitive data...

CVE-2021-0435

In avrcprocvendorcommand of avrcapi.cc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8....

CVE-2021-0435

In avrcprocvendorcommand of avrcapi.cc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8....

CVE-2021-0435

In avrcprocvendorcommand of avrcapi.cc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8....

CVE-2021-0435

CVE-2021-0435 describes a heap data leak in the Android Bluetooth stack: in avrc_proc_vendor_command within avrc_api.cc, uninitialized data can leak heap data, enabling remote information disclosure with no extra privileges and without user interaction. Affected Android versions include Android-1...

1.3M Clubhouse Users’ Data Dumped in Hacker Forum for Free

Clubhouse, the startup invitation-only chat app, is the latest social-media platform to see mammoth troves of user data collected and posted in underground forums. An SQL file containing the personal data of 1.3 million Clubhouse users has been posted in a hacker forum for free. Names, user IDs,...

Scraped data of 1.3 million Clubhouse users published online

By Waqas Clubhouse, an invitation-only social media app for iOS with more than 10 million users has become a victim of data scraping. Here's what data was published. This is a post from HackRead.com Read the original post: Scraped data of 1.3 million Clubhouse users published online...

Facebook Had Years to Fix Flaw That Leaked 500M Users’ Data

Software makers can’t catch every bug every time, but Facebook had ample warning about the privacy problems with its “contact import” feature...

Code injection

In FreeBSD 13.0-STABLE before n245117, 12.2-STABLE before r369551, 11.4-STABLE before r369559, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-RELEASE before p9, copy-on-write logic failed to invalidate shared memory page mappings between multiple processes allowing an unprivileged process t...

OESA-2021-1096 apr security update

The mission of the Apache Portable Runtime APR project is to create and maintain software libraries that provide a predictable and consistent interface to underlying platform-specific implementations. The primary goal is to provide an API to which software developers may code and be assured of...