Transmission of Pakistani news channel interrupted to display Indian flag

By Zara Khan Prominent Pakistani news channel Dawn had its transmission... This is a post from HackRead.com Read the original post: Transmission of Pakistani news channel interrupted to display Indian flag...

saksham.indianrailways.cloud Cross Site Scripting vulnerability OBB-1249063

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

indiancosmetics.com.bd Cross Site Scripting vulnerability OBB-1241328

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

indianmetalmarket.com Cross Site Scripting vulnerability OBB-1239575

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Exclusive: Any Chingari App (Indian TikTok Clone) Account Can Be Hacked Easily

Following vulnerability disclosure in the Mitron app, another viral TikTok clone in India has now been found vulnerable to a critical but easy-to-exploit authentication bypass vulnerability, allowing anyone to hijack any user account and tamper with their information, content, and even upload...

indianbackpackers.com Cross Site Scripting vulnerability OBB-1205380

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Indian IT Company Was Hired to Hack Politicians, Investors, Journalists Worldwide

A team of cybersecurity researchers today outed a little-known Indian IT firm that has secretly been operating as a global hackers-for-hire service or hacking-as-a-service platform. Based in Delhi, BellTroX InfoTech allegedly targeted thousands of high-profile individuals and hundreds of...

Dark web hacker leaks sensitive Indian defense contractor data

By Waqas Indian defense contactor Bharat Earth Movers Limited BEML has been hacked. This is a post from HackRead.com Read the original post: Dark web hacker leaks sensitive Indian defense contractor data...

Any Indian DigiLocker Account Could've Been Accessed Without Password

The Indian Government said it has addressed a critical vulnerability in its secure document wallet service Digilocker that could have potentially let a remote attacker bypass mobile one-time passwords OTP and sign in as other users. Discovered separately by two independent bug bounty researchers,...

bengali.indianexpress.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1183008 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Alleged data of 47.5 million Truecaller Indian users sold online

By Sudais Asif Truecaller has something to say about the breach. This is a post from HackRead.com Read the original post: Alleged data of 47.5 million Truecaller Indian users sold online...

Hackers leak data of 29 million Indian job seekers for download

By Waqas The trove of Indian job seekers data is being downloaded by threat actors worldwide. This is a post from HackRead.com Read the original post: Hackers leak data of 29 million Indian job seekers for download...

indianwomensworld.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1167582 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

indianembassyoslo.gov.in Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1147500 Security Researcher D3F4ULT Helped patch 10 vulnerabilities Received 0 Coordinated Disclosure badges Received 2 recommendations , found a security vulnerability affecting indianembassyoslo.gov.in website and its users. Following coordinated and responsible...

Man hacks Indian tech support scam call center; leaks CCTV footage

By Sudais Asif The tech support scam call center has now been raided by local police while its entire operation has been shut down. This is a post from HackRead.com Read the original post: Man hacks Indian tech support scam call center; leaks CCTV footage...

indianrivermedicalcenter.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1104914 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

A week in security (February 17 – 23)

Last week on Malwarebytes Labs, we highlighted the benefits and concerns of identity-as-a-service IDaaS, an identity management scheme deployed from the cloud; reported on scammers and squatters taking advantage of Rudy Giuliani’s Twitter typos; and gave a high-level overview of RobbinHood, the...

Dark web hackers selling payment card data of half a million Indians

By Waqas As of today, 16 payment cards have already been bought by unknown parties from the marketplace. This is a post from HackRead.com Read the original post: Dark web hackers selling payment card data of half a million Indians...

3 Google Play Store Apps Exploit Android Zero-Day Used by NSO Group

Watch out! If you have any of the below-mentioned file managers and photography apps installed on your Android phone—even if downloaded from the official Google Store store⁠—you have been hacked and being tracked. These newly detected malicious Android apps are Camero, FileCrypt, and callCam that...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I'm speaking on "Securing a World of Physically Capable Computers" at the Indian Institute of Science in Bangalore, India on December 12, 2019. The list is maintained on this page...