Police arrests man for selling massive combolists on hacker forums

By Deeba Ahmed According to police, the hacker also compiled Collection 1, 2, 3, 4, 5, and Antipublic combolist. This is a post from HackRead.com Read the original post: Police arrests man for selling massive combolists on hacker forums...

EA Sports down – Gaming giant hit by massive DDoS attacks

By Waqas The DDoS attack has affected EA Sport's Origin platform which lets customers purchase and playing video games. This is a post from HackRead.com Read the original post: EA Sports down - Gaming giant hit by massive DDoS attacks...

CompanyHub: No Rate Limit On forgot Password Leading To Massive Email Flooding

Summary: No rate limit check on forgot password which can lead to mass mailing and spamming of users and possible employees A little bit about Rate Limit: A rate limiting algorithm is used to check if the user session or IP-address has to be limited based on the information in the session cache. ...

Unauthorized Access Vulnerability in Massive Coworking System

Positive Collaboration Office System is an online office system designed and developed specifically for college offices. An unauthorized access vulnerability exists in CZF Coworking System, which can be exploited by attackers to obtain sensitive user information...

Every Ecuadorian has been compromised in massive data breach

By Sudais Data of Julian Assange, founder of Wikileaks was also found in this breach who lived in the Ecuadorian embassy in London since 2012 till April this year after being granted asylum initially. This is a post from HackRead.com Read the original post: Every Ecuadorian has been compromised i...

How Facebook Catches Bugs in Its 100 Million Lines of Code

For the past four years, Facebook has quietly used a homegrown tool called Zoncolan to find bugs in its massive codebase...

Corporate IoT - a path to intrusion

Several sources estimate that by the year 2020 some 50 billion IoT devices will be deployed worldwide. IoT devices are purposefully designed to connect to a network and many are simply connected to the internet with little management or oversight. Such devices still must be identifiable,...

"Collection #1" Data Dump Hacker Identified

UPDATE Researchers say they have identified the threat actor behind the massive “Collection 1” data dump which exposed hundreds of millions of credentials on a hacking forum in January. Recorded Future researchers said this weekend that an individual using the monikor “C0rpz” has claimed as early...

HR software firm suffers massive data breach after malware attack

By Waqas The Australia-based SaaS provider firm PageUp has confirmed discovering ‘unusual This is a post from HackRead.com Read the original post: HR software firm suffers massive data breach after malware attack...

The data breach epidemic: no info is safe

By now it’s obvious that data security technology and protocols haven’t kept pace with the needs of consumers. Even as more people trust their most sensitive personal information to online apps and services, databases are routinely exposed. In 2017 alone, we learned about massive data breaches fr...

Week in security (February 26 – March 4)

Last week on Malwarebytes Labs, we explained how to protect your computer from malicious cryptomining, we gave an encryption 101 lesson using ShiOne ransomware as a case study, and we offered an explanation about SQL injection. We also released a report on the state of malicious cryptomining from...

Mirai IoT Botnet Co-Authors Plead Guilty

The U.S. Justice Department on Tuesday unsealed the guilty pleas of two men first identified in January 2017 by KrebsOnSecurity as the likely co-authors of Mirai, a malware strain that remotely enslaves so-called "Internet of Things" devices such as security cameras, routers, and digital video...

SOC Forum 2017: How I Learned to Stop Worrying and Love Massive Malware Attacks

Today I spoke at SOC Forum 2017 in Moscow. It was a great large-scale event about Security Operation Centers. 2,700 people registered. Lots of people in suits . And lots of my good fellows. The event was held in Radisson Royal Congress Park. There were three large halls for presentations and a hu...

Huawei AR1220 Massive Traffic Denial of Service Vulnerability

The Huawei AR1220 is an enterprise-grade modular router from Huawei China. A security vulnerability exists in the Huawei AR1220. An attacker can exploit this vulnerability to cause an abnormal reset of the interface board through a mega traffic impact from the GE port to the FE port of the main...

Comey testimony generates massive interest, massive traffic

Online viewers of former FBI Director James Comey's live testimony last week generated a massive peak of 2.5 Tbps of live streaming video traffic on the Akamai platform, despite the hearing occurring in the middle of the work week, in the middle of the work day. To put this in perspective, that 2...

Oracle EBusiness Suite 'Massive' Attack Surface Assessed

LAS VEGAS—Buried in the pages of the secure configuration guide for Oracle EBusiness Suite 11i is a declaration that SQL injection just isn’t a thing for the ubiquitous enterprise software. “Of the many potential SQL injections we have seen reported, we have yet to find a single confirmed example...

The vulnerability of the Django web application software platform allows a hacker to trigger a service failure.

The vulnerability of the Django web application framework is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures by generating numerous requests with unique session keys...

Security Advisory-Resource Management Vulnerability in the AR1220

Under Specifically configurations in the AR1220, An attacker sends massive traffic to the FE port from the GE port on the main board. As a result, the interface board resets unexpectedly. Vulnerability ID: HWPSIRT-2014-1298. This Vulnerability has been assigned Common Vulnerabilities and Exposure...

Native Instruments Massive 1.1.4 KSD File Handling Use-After-Free Vulnerability

No description provided by source. !/usr/bin/perl Title: Native Instruments Massive 1.1.4 KSD File Handling Use-After-Free Vulnerability Vendor: Native Instruments GmbH Product web page: http://www.native-instruments.com Affected version: 1.1.4 R1901 Summary: MASSIVE is a sonic monster ? the...

Trojan.Milicenso Print Bomb - Printer Trojan cause massive printing

Trojan.Milicenso - Printer Trojan cause massive printing A Trojan that sends printers crazy, making them print pages of garbled nonsense until all the paper has been used up, has seen a spike in activity.Symantec detected the Trojan.Milicenso across various countries, but the worst hit regions...