FBI arrests cyber fraud prevention startup NS8’s CEO for fraud

By Deeba Ahmed NS8s ex-CEO Adam Rogas is charged with securities fraud, wire fraud, and fraud in the offer and sale of securities. The Southern District of New Yorks Acting US Attorney, Audrey Strauss, and the FBIs New York Field Offices Assistant Director-in-Charge, William F. Sweeney Jr...

US Criminal Court hit by Conti ransomware; critical data at risk

By Waqas Conti ransomware operators attacked the Fourth District Court of Louisiana and posted proof of attack on the Dark Web. This is a post from HackRead.com Read the original post: US Criminal Court hit by Conti ransomware; critical data at risk...

Gansu Xiusen Network Information Technology Co., Ltd. website building system has SQL injection vulnerabilities

Gansu Xiusen Network Information Technology Co., Ltd abbreviation: Xiusen Network, located in Anning District, Lanzhou, Gansu, the company is engaged in software development, website development and other high-tech. Gansu Xiusen Network Information Technology Co., Ltd. website building system has...

southerndhb.govt.nz Cross Site Scripting vulnerability OBB-1216011

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Command Execution Vulnerability in Shenyang Huanggu District Ainong Network Technology Service Center 162100 Website Navigation

162100 website navigation is a php + MySQL development of the site navigation class website source code. Shenyang Huanggu District Ainong Network Technology Service Center 162100 URL navigation command execution vulnerabilities, attackers can use the vulnerability to obtain server privileges...

Changsha Tianxin District Bin.com Network Technology Service Department's Website Building System Exists SQL Injection Vulnerabilities

Changsha Tianxin District Binnet Network Technology Service Department is a company engaged in corporate website construction, website promotion and other projects. Changsha Tianxin District Bin.com Network Technical Services Department website building system has a SQL injection vulnerability,...

FBI Arrests Alleged Owner of Deer.io, a Top Broker of Stolen Accounts

FBI officials last week arrested a Russian computer security researcher on suspicion of operating deer.io, a vast marketplace for buying and selling stolen account credentials for thousands of popular online services and stores. Kirill V. Firsov was arrested Mar. 7 after arriving at New York's Jo...

monroe.k12.or.us Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1094020 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

southshore.albany.k12.or.us Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1093986 Security Researcher MrRain1996 Helped patch 952 vulnerabilities Received 4 Coordinated Disclosure badges Received 9 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting southshore.albany.k12.or....

sam-case.lincoln.k12.or.us Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1093983 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Scammers Dupe Texas School District Out of $2.3M

A Texas school district, based outside of Austin, Tex., has lost $2.3 million after falling victim to an email scam. The Manor Independent School District encompasses 8,000 students from elementary to high school. Police told local news outlets that the incident started in early November and...

CVE-2019-12720

AUO SunVeillance Monitoring System before v1.1.9e is vulnerable to mvcsendmail.aspx MailAdd parameter SQL Injection. An Attacker can carry a SQL Injection payload to the server, allowing the attacker to read privileged data. This also affects the picturemanagemvc.aspx plantno parameter, the...

No Jail Time for “WannaCry Hero”

Marcus Hutchins, the "accidental hero" who helped arrest the spread of the global WannaCry ransomware outbreak in 2017, will receive no jail time for his admitted role in authoring and selling malware that helped cyberthieves steal online bank account credentials from victims, a federal judge rul...

Intercept SaaS Services with the Akamai EAA Client

I was quite fortunate to visit Tokyo for the first time last year, and it was an unforgettable experience to explore all the sights and sounds around the Ginza district and to interact with the very friendly Japanese people. It wasn't all play, though -- and I had to get some real work done as...

Debian: Security Advisory (DSA-4470-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

This Week in Security News: Trickbots and Infected Containers

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn how a Trickbot attacked a school district’s networks and how infected cryptocurrency-mining containers target docker hosts with expose...

'GozNym' Banking Malware Gang Dismantled by International Law Enforcement

In a joint effort by several law enforcement agencies from 6 different countries, officials have dismantled a major global organized cybercrime network behind GozNym banking malware. GozNym banking malware is responsible for stealing nearly $100 million from over 41,000 victims across the globe,...

districtadministration.com XSS vulnerability

Open Bug Bounty ID: OBB-718214 Description| Value ---|--- Affected Website:| districtadministration.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

bleckley.k12.ga.us XSS vulnerability

Open Bug Bounty ID: OBB-715588 Description| Value ---|--- Affected Website:| bleckley.k12.ga.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...

tmms.mcduffie.k12.ga.us XSS vulnerability

Open Bug Bounty ID: OBB-715548 Description| Value ---|--- Affected Website:| tmms.mcduffie.k12.ga.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...