ExxonMobil Lobbyist Caught Hacking Climate Activists

The Department of Justice is investigating a lobbying firm representing ExxonMobil for hacking the phones of climate activists: The hacking was allegedly commissioned by a Washington, D.C., lobbying firm, according to a lawyer representing the U.S. government. The firm, in turn, was allegedly...

exxonmobil.eu Cross Site Scripting vulnerability OBB-3860652

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

exxonmobil.com.hk Cross Site Scripting vulnerability OBB-3509446

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pngpartnership.exxonmobil.com Cross Site Scripting vulnerability OBB-3424493

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

exxonmobil.co.mz Cross Site Scripting vulnerability OBB-3320211

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in @exxonmobil/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07cbce5057646ec034af51e508b9f7df4b0956de2210c13e7dd4b254d4b00b79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-261 Malicious code in @exxonmobil/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07cbce5057646ec034af51e508b9f7df4b0956de2210c13e7dd4b254d4b00b79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Scanning for Flaws, Scoring for Security

Is it fair to judge an organization's information security posture simply by looking at its Internet-facing assets for weaknesses commonly sought after and exploited by attackers, such as outdated software or accidentally exposed data and devices? Fair or not, a number of nascent efforts are usin...

ExxonMobil Bungles Rewards Card Debut

Energy giant ExxonMobil recently sent snail mail letters to its Plenti rewards card members stating that the points program was being replaced with a new one called Exxon Mobil Rewards+. Unfortunately, the letter includes a confusing toll free number and directs customers to a parked page that...

energyfactor.exxonmobil.com XSS vulnerability

Open Bug Bounty ID: OBB-624853 Description| Value ---|--- Affected Website:| energyfactor.exxonmobil.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ExxonMobil, Others Attacked Via Email

At least three US oil companies were victims of highly targeted, email-borne attacks designed to siphon valuable data from their corporate networks and send it abroad, according to a published report citing unnamed people and government documents. Read the full article. The Register...