833 matches found
Internet Security Threats at the Olympics
There are a lot: The cybersecurity company McAfee recently uncovered a cyber operation, dubbed Operation GoldDragon, attacking South Korean organizations related to the Winter Olympics. McAfee believes the attack came from a nation state that speaks Korean, although it has no definitive proof tha...
Apple’ iBoot Baseband Code for Various iPhone Models Leaked on GitHub
By Uzair Amir Apple has been going through a rough phase lately and This is a post from HackRead.com Read the original post: Apple’ iBoot Baseband Code for Various iPhone Models Leaked on GitHub...
Apple's iBoot Source Code for iPhone Leaked on Github
Apple source code for a core component of iPhone's operating system has purportedly been leaked on GitHub, that could allow hackers and researchers to discover currently unknown zero-day vulnerabilities to develop persistent malware and iPhone jailbreaks. The source code appears to be for iBoot—t...
Cabinet of Secret Documents from Australia
This story of leaked Australian government secrets is unlike any other I've heard: It begins at a second-hand shop in Canberra, where ex-government furniture is sold off cheaply. The deals can be even cheaper when the items in question are two heavy filing cabinets to which no-one can find the...
Multiple CPUs - Information Leak Using Speculative Execution
== INTRODUCTION == This is a bug report about a CPU security issue that affects processors by Intel, AMD and to some extent ARM. I have written a PoC for this issue that, when executed in userspace on an Intel Xeon CPU E5-1650 v3 machine with a modern Linux kernel, can leak around 2000 bytes per...
Ancestry.com’ RootsWeb breach: 300,000 plaintext accounts leaked
By Waqas Another day another data breach, this time it is Ancestry.com, the This is a post from HackRead.com Read the original post: Ancestry.com RootsWeb breach: 300,000 plaintext accounts leaked...
Massive Breach Exposes Keyboard App that Collects Personal Data On Its 31 Million Users
In the digital age, one of the most popular sayings is—if you're not paying, then you're not the customer, you're the product. While downloading apps on their smartphones, most users may not realize how much data they collect on you. Believe me; it’s way more than you can imagine. Nowadays, many...
November 13, 2017 – Morning Cyber Coffee Headlines – “Eric O’ Neill” Edition
Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! November 13, 2017 - Headlines Carbon Black in the News: Why we need to stop...
International Islamic University Chittagong: Admin access on http://119.18.148.140/iiuc/ through leaked credentials
The researcher was able to access admin panel using admin credential that leaked as a plain text through error message...
Tweep - An Advanced Twitter Scraping Tool
Tweep is an advanced Twitter scraping tool written in python that allows for scraping Tweets and pictures from Twitter profiles without using Twitter's API. Benefits Some of the benefits of using Tweep vs Twitter API: Fast initial setup Can be used anonymously No rate limitations Can fetch all...
Mail.ru: [health.mail.ru] Раскрытие SSI сценариев
SSI template content leaked on invalid HTTP request in health.mail.ru and few more projects. On the moment of reporting, health.mail.ru was in Main scope of bug bounty program...
Hacker Hijacks CoinHive's DNS to Mine Cryptocurrency Using Thousands of Websites
When yesterday I was reporting about the sudden outbreak of another global ransomware attack 'Bad Rabbit,' I thought what could be worse than this? Then late last night I got my answer with a notification that Coinhive has been hacked — a popular browser-based service that offers website owners t...
Default credentials
salt before 2015.5.5 leaks git usernames and passwords to the log...
Medium: openssh
Issue Overview: A covert timing channel flaw was found in the way OpenSSH handled authentication of non-existent users. A remote unauthenticated attacker could possibly use this flaw to determine valid user names by measuring the timing of server responses. CVE-2016-6210 It was found that OpenSSH...
Deloitte breached by hackers for months
On September 25, 2017, Deloitte announced that they detected a breach of the firm’s global email server via a poorly secured admin email in March of this year. Further, the attackers most likely had control of the server since November of 2016. Deloitte’s initial statement indicated that only six...
Verizon Wireless Internal Credentials, Infrastructure Details Exposed in Amazon S3 Bucket
Organizations continue to leak data through publicly accessible Amazon S3 buckets, pointing a harsh finger at continued lax attitudes toward the custodianship of sensitive data. Verizon is the latest business affected by this epidemic, leaking in this case files marked confidential from an intern...
Zomato: [www.zomato.com] IDOR - Leaking all Personal Details of all Zomato Users through an endpoint
Hacker is able to get the PIPersonal Information of any Zomato user...
Microsoft Windows Kernel - 'win32k!NtGdiDoBanding' Stack Memory Disclosure
/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1304 We have discovered that the win32k!NtGdiDoBanding system call discloses portions of uninitialized kernel stack memory to user-mode clients. More specifically, exactly 8 bytes of uninitialized kernel stack memory are copied t...
Vevo Music Video Service Hacked — 3.12TB of Internal Data Leaked
OurMine is in headlines once again—this time for breaching the popular video streaming service Vevo. After hunting down social media accounts of HBO and defacing WikiLeaks website, the infamous self-proclaimed group of white hat hackers OurMine have hacked Vevo and leaked about 3.12 TB worth of...
