3921 matches found
Vulnerability of the MySQL Server component of the database management system: This component allows a hacker to cause a service failure.
The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
Spotify resets some user logins after hacker database found floating online
A team of researchers working for vpnMentor has found a treasure trove in the form of an unsecured Elasticsearch database containing over 380 million records. The trove contained login credentials and other data belonging to Spotify users. So whats Spotify doing leaving its user data hanging arou...
AIX 5.3L /usr/sbin/lquerypv Local Root Privilege Escalation Exploit
/AIX 5.3L /usr/sbin/lquerypv local root privilege escalation =========================================================== AIX5.3L includes a setuid root binary "lquerypv" which contains a stack-based overflow in the handling of -V command line argument. However, prior to the vulnerability being...
Image stock site 123RF hacked; 8.3M user database leaked
By Waqas According to our analysis, 123RF suffered a data breach earlier this year in March and leaked on a hacker forum on November 8th. This is a post from HackRead.com Read the original post: Image stock site 123RF hacked; 8.3M user database leaked...
The Scammer Who Wanted to Save His Country
Last year, a hacker gave Glenn Greenwald a trove of damning messages between Brazil’s leaders. Some suspected the Russians. The truth was far less boring...
Animal Jam data breach – Hacker leaks database with millions of accounts
By Waqas The developer of famous online playground Animal Jam has suffered a data breach that exposed tens of millions of users' data. This is a post from HackRead.com Read the original post: Animal Jam data breach - Hacker leaks database with millions of accounts...
Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the MySQL Server component involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...
Feds Seize $1 Billion in Stolen Silk Road Bitcoins
A hacker identified only as Individual X had been sitting on a cryptocurrency gold mine for seven years before the IRS came knocking...
34M Records from 17 Companies Up for Sale in Cybercrime Forum
A whopping 34 million user records have materialized on an underground sales forum, which cybercriminals claim are gleaned from 17 different corporate data breaches. According to reports, the data appeared late last week, and the theft appears to be the work of a single person or group. The...
US jails Russian hacker for 8 years over botnet, bank fraud
By Deeba Ahmed The hacker participated in a sophisticated scheme to steal, exchange sensitive financial, personal data, causing a loss of $100 million to the victims. This is a post from HackRead.com Read the original post: US jails Russian hacker for 8 years over botnet, bank fraud...
The vulnerability of Microsoft Excel’s spreadsheet editor, related to errors in memory object handling, allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Excel editors is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted document...
'Among Us' Mobile Game Under Siege by Attackers
The meteoric rise of the game Among Us appears to be outpacing its developer’s ability to keep up with malicious actors. On Sunday night, a specific ongoing attack forced InnerSloth, the company behind the game, to hastily roll out an update designed to kick bad actors off the game’s servers —...
Hacker steal $24M, returnes $2.5M to DeFi protocol Harvest Finance
By Deeba Ahmed Harvest Finance is now offering $100,000 as a bug bounty program to identify the hacker. This is a post from HackRead.com Read the original post: Hacker steal $24M, returnes $2.5M to DeFi protocol Harvest Finance...
The Unsinkable Maddie Stone, Google’s Bug-Hunting Badass
The Project Zero reverse engineer shuts down some of the world's most dangerous exploits—along with antiquated hacker stereotypes...
Microsoft Teams Phishing Attack Targets Office 365 Users
Researchers are warning of a phishing campaign that pretends to be an automated message from Microsoft Teams. In reality, the attack aims to steal Office 365 recipients’ login credentials. Teams is Microsoft’s popular collaboration tool, which has particularly risen in popularity among remote...
Windows GravityRAT Malware Now Also Targets macOS and Android Devices
A Windows-based remote access Trojan believed to be designed by Pakistani hacker groups to infiltrate computers and steal users' data has resurfaced after a two-year span with retooled capabilities to target Android and macOS devices. According to cybersecurity firm Kaspersky, the malware — dubbe...
Never Leave Your Cloud Database Publicly Accessible
Introduction In cybersecurity, we often hear about best practices, one of the most important of which is never to open services that should be for internal use to public access. These are best practices for a good reason - when you don’t follow them, you might be hacked! Research we conducted in...
Uber: RCE via npm misconfig -- installing internal libraries from the public registry
The hacker spotted some orphaned references to Uber-branded Node.js library packages and claimed them on the public NPM registry to run their own proof-of-concept code. Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies...
Facebook Debuts Bug Bounty ‘Loyalty Program’
Facebook has lifted the curtain on what it claims is an industry first: A loyalty program as part of its bug-bounty offering, which aims to further incentivize researchers to find vulnerabilities in its platform. The loyalty program, called “Hacker Plus,” offers bonuses on top of bounty awards,...