A Look Back: Reviewing the Worst Cyber Attacks of 2017 and the Lessons Learned

It seems that each year that passes is worse than the last in terms of hacking and cyber attacks, and 2017 was no exception. "Surprising no one, 2017 was marked another 'worst year ever' in data breaches and cyber incidents around the world," said Jeff Wilbur, director of the Internet Society's...

guitar-lessons-brighton.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-359992 Description| Value ---|--- Affected Website:| guitar-lessons-brighton.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

October 5, 2017 – Morning Cyber Coffee Headlines – “Ball-Point Pen” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! October 5, 2017 - Headlines Carbon Black in the News: Advanced Threat Analytics...

FIN10: Anatomy of a Cyber Extortion Operation

FireEye has identified a set of financially motivated intrusion operations being carried out by a threat actor we have dubbed FIN10. FIN10 is known for compromising networks, stealing sensitive data, and directly engaging victim executives and board members in an attempt to extort them into payin...

BWT EP5 - It Has Been 0-days Since This Term was Abused

Beers with Talos Episode 5 "It Has Been 0-days Since This Term was Abused" is now availableListen here:Listen via iTunesListen directly on the Talos Podcasts page.Episode Notes:The crew talks about the potential of Samba echoing WannaCry and blocking SMB ports but you already did that, RIGHT?. We...

This Week in Security News

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...

Overload: Critical Lessons from 15 Years of ICS Vulnerabilities

In the past several years, a flood of vulnerabilities has hit industrial control systems ICS – the technological backbone of electric grids, water supplies, and production lines. These vulnerabilities affect the reliable operation of sensors, programmable controllers, software and networking...

cultus.hk XSS vulnerability

Vulnerable URL: http://www.cultus.hk/latinlessons/declension/adj3a.php?keyword=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3736571 VIP website status:| No Check cultus.hk SSL...

Hack the Pentagon DOD Bug Bounty

MIAMI—Lisa Wiswell’s phone rang off the hook last summer in the throes of the OPM hack. But she wasn’t just answering questions from those whose security clearance and personal data disappeared into the Chinese ether; there were also hackers on the other end of the line offering their help...

Personal Data of 50 Million Turkish Citizens Leaked Online

Personal details of nearly 50 Million Turkish citizens, including the country's President Recep Tayyip Erdogan, have been compromised and posted online in a massive security breach. A database, which contains 49,611,709 records, appeared on the website of an Icelandic group on Monday, offering...

Piano lessons for kids - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Piano lessons for kids published at the 'play' market has multiple vulnerabilities...

How to Draw - Easy Lessons - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application How to Draw - Easy Lessons published at the 'play' market has multiple vulnerabilities...

Piano Lessons: Vivaldi - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Piano Lessons: Vivaldi published at the 'play' market has multiple vulnerabilities...

Learn Guitar Lessons Free - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Learn Guitar Lessons Free published at the 'play' market has multiple vulnerabilities...

Classic Piano Lessons - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Classic Piano Lessons published at the 'play' market has multiple vulnerabilities...

Classic Piano Lesson Beethoven - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Classic Piano Lesson Beethoven published at the 'play' market has multiple vulnerabilities...

Best Piano Lessons Kids - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Best Piano Lessons Kids published at the 'play' market has multiple vulnerabilities...

Piano Lessons: Mozart - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Piano Lessons: Mozart published at the 'play' market has multiple vulnerabilities...

Quick and Easy German Lessons - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Quick and Easy German Lessons published at the 'play' market has multiple vulnerabilities...

German lessons (free & fun) - Corrupted files, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application German lessons free & fun published at the 'play' market has multiple vulnerabilities...