News Wrap: Which Companies Are Doing Privacy Right and Which Aren't?

The Threatpost team breaks down the top data privacy-related news this week, including: Google’s acknowledgement that G Suite passwords had been stored in plaintext – since 2005. The database of golfing app Game Golf left misconfigured, exposing millions of data points on games played plus...

Millions of Golfers Land in Privacy Hazard After Cloud Misconfig

Finding cloud databases with sensitive information left open to the internet has become par for the course these days – as a new exposure of millions of sensitive data points for the users of a golf app demonstrates. Millions of golfer records from the Game Golf app, including GPS details from...

scottsdalegolf.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-717710 Description| Value ---|--- Affected Website:| scottsdalegolf.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

PGA Golf Championship hit with Bitcoin ransomware

By Waqas Hackers Demand Ransom to Unlock Hijacked Files of Upcoming PGA Golf Championship. Hackers seem to have a penchant for targeting high-profile events. After successfully attempting to make American presidential elections questionable, now cybercriminals have their eyes set on key PGA...

rockcreekgolf.com XSS vulnerability

Open Bug Bounty ID: OBB-651665 Description| Value ---|--- Affected Website:| rockcreekgolf.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

aws.golf-club-baden-baden.de XSS vulnerability

Open Bug Bounty ID: OBB-594340 Description| Value ---|--- Affected Website:| aws.golf-club-baden-baden.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

korea.taylormadegolf.com XSS vulnerability

Open Bug Bounty ID: OBB-565128 Description| Value ---|--- Affected Website:| korea.taylormadegolf.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

newportgolfclub.org.uk XSS vulnerability

Open Bug Bounty ID: OBB-455837 Description| Value ---|--- Affected Website:| newportgolfclub.org.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

homegrassgroup.nl XSS vulnerability

Open Bug Bounty ID: OBB-441996 Description| Value ---|--- Affected Website:| homegrassgroup.nl Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

v-golf-ev.de XSS vulnerability

Open Bug Bounty ID: OBB-359668 Description| Value ---|--- Affected Website:| v-golf-ev.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

link.callawaygolf.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-355465 Description| Value ---|--- Affected Website:| link.callawaygolf.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

bletchingleygolf.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-322100 Description| Value ---|--- Affected Website:| bletchingleygolf.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

July 20, 2017 – Morning Cyber Coffee Headlines – “British Open” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! July 20, 2017 - Headlines Carbon Black in the News: The dark web goes corporate...

golf.de IFRAME Injection vulnerability

Vulnerable URL: https://www.golf.de/publish/suche?searchFor='"--! XANY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 103667 VIP website status:| No Check golf.de SSL connection:| Grade: F Coordinat...

intercarsofcarlisle.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-246150 Description| Value ---|--- Affected Website:| intercarsofcarlisle.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Hackers stole $800,000 from ATMs using Fileless Malware

Hackers targeted at least 8 ATMs in Russia and stole $800,000 in a single night, but the method used by the intruders remained a complete mystery with CCTV footage just showing a lone culprit walking up to the ATM and collecting cash without even touching the machine. Even the affected banks coul...

kawaguchi-green-golf.jp Open Redirect vulnerability

Open Bug Bounty ID: OBB-220065 Description| Value ---|--- Affected Website:| kawaguchi-green-golf.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

englandgolf.org XSS vulnerability

Vulnerable URL: http://www.englandgolf.org/golfcentral/golf-clubs/merseyside/Default.asp?page=2%27"--!confirmOPENBUGBOUNTY%3C/script /K/' Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 588203 VIP website status:...

Eyes-free Golf (BFG) - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Eyes-free Golf BFG published at the 'play' market has multiple vulnerabilities...

Tilt Golf: Free Tournament - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Tilt Golf: Free Tournament published at the 'play' market has multiple vulnerabilities...