Apache Kylin server request forgery vulnerability

Versions 4.0.0 through 5.0.4 of Apache Kylin contain a server-side request forgery vulnerability. This vulnerability stems from Server-Side Request Forgery SSRF and may affect Kylin job services that are directly exposed to the public internet...

Promising Jobs at the U.S. Postal Service, ‘US Job Services’ Leaks Customer Data

A sprawling online company based in Georgia that has made tens of millions of dollars purporting to sell access to jobs at the United States Postal Service USPS has exposed its internal IT operations and database of nearly 900,000 customers. The leaked records indicate the networks chief technolo...