Collating Hacked Data Sets

Two Harvard undergraduates completed a project where they went out on the dark web and found a bunch of stolen datasets. Then they correlated all the information, and combined it with additional, publicly available, information. No surprise: the result was much more detailed and personal. "What w...

250 million Microsoft customer support records leaked in plain text

By Waqas So Microsoft Customer Service and Support CSS records have been leaked online. Here's what's in the leaked data... This is a post from HackRead.com Read the original post: 250 million Microsoft customer support records leaked in plain text...

Kubernetes: Sensitive Information disclosure Through Config File

Report Submission Form Summary: hello Team while Exploring Your Site.I found Config File Is leaked In Your Site Where Contains Sensitive Information,Credentials ETc Vulnerable URL:- https://prow.k8s.io/config Impact Attacker Is Able To Gain sensitive Information About target and Also might Get...

Starbucks: China - Leaked credentials permitted a limited ability to create Starbucks coupons and cards

neweq discovered a Github repository exposing credentials with which they could obtain an access token. The access token permitted limited access to generate Starbucks coupons and cards. @neweq — thank you for reporting this vulnerability...

Reddit Says Influence Campaign is Behind Leaked U.S.-U.K. Trade Documents

Reddit has revealed that key U.S.-U.K. trade documents posted on its site were likely done so as part of a broader political-influence campaign that first appeared on Facebook and tied to Russia-based operatives. The online media aggregator says it has linked documents that were leaked on its sit...

Private details of Palo Alto Networks employees leaked online

By Waqas Palo Alto Networks, the renowned cyber security firm, has suffered an unusual data breach. Here's what happened... This is a post from HackRead.com Read the original post: Private details of Palo Alto Networks employees leaked online...

HackerOne: Account takeover via leaked session cookie

Summary: You are disclose for me you session Description: you are gevi me your session on last report I am can use your sessionsorry ███ ████████ █████████ Impact HackerOneStaff Access, i can read all reports @security and more program...

The Likely Reason Disney\+ Accounts Are Getting 'Hacked'

Credential stuffing, where names and passwords leaked in previous breaches are reused, strikes again...

RHEL 8 : osinfo-db and libosinfo (RHSA-2019:3387)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3387 advisory. The osinfo-db package contains a database that provides information about operating systems and hypervisor platforms to facilitate the automated...

CVE-2019-13419

Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:2155-1 Rating: important References: 1150425 Cross-References: CVE-2019-13659 CVE-2019-13660 CVE-2019-13661 CVE-2019-13662 CVE-2019-13663 CVE-2019-13664 CVE-2019-13665 CVE-2019-13666 CVE-2019-13667...

Unsecured database leaks phone numbers of 419 million Facebook users

By Sudais The unsecured database contained 133 million records from the US, 18 million in the UK and 50 million in Vietnam - All from Facebook users. This is a post from HackRead.com Read the original post: Unsecured database leaks phone numbers of 419 million Facebook users...

EMAGNET - Tool For Find Leaked Databases With 97.1% Accurate To Grab Mail + Password Together From Pastebin Leaks

Emagnet is a very powerful tool for it's purpose wich is to capture email addresses and passwords from leaked databases uploaded on pastebin. It's almost impossible to find leaked passwords when they are out of list on pastebin.com. Either they have been deleted by pastebin's techs or the uploads...

XKCD Forum Hacked – Over 562,000 Users' Account Details Leaked

XKCD —one of the most popular webcomic platforms known for its geeky tech humor and other science-laden comic strips on romance, sarcasm, math, and language—has suffered a data breach exposing data of its forum users. The security breach occurred two months ago, according to security researcher...

The lucrative business of Bitcoin sextortion scams (updated)

Update 2019-09-04: A new wave of sextortion emails purporting to have originated from a group of hackers called ChaosCC—a play on the legitimate European white hat hacking community, Chaos Computer Club CCC—has recently caught the attention of the security world. Below is a sample email we captur...

Dodging bad passwords with Google’s new tool

By Sudais Google's new Password checkup extension checks for leaked credentials and informs whether they have been leaked before in a data breach. In 2019, more than 20 million unique passwords among other credentials were leaked and available online for sale. This fact represents only one year...

CVE-2019-13377

The implementations of SAE and EAP-pwd in hostapd and wpasupplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache access patterns when Brainpool curves are used. An attacker may be able to gain leaked information from a side-channel...

CVE-2019-13419

Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked...

GitLab: Head pipeline leaked to unauthorized users via blocking merge request feature

Summary GitLab allows for public and internal projects to restrict the visibility of pipelines to project members only. Then, only project members should have access to the pipeline information. GitLab recently added the blocking merge request feature. This feature can be used to leak the head...

Honda's Security 'Soft Spots' Exposed in Unsecured Database

An unsecured database belonging to Honda Motor Company was found leaking crucial information about its global systems, including which devices aren’t up-to-date or protected by security solutions. The exposed ElasticSearch database contained approximately 134 million documents, and amounted to...