HR software firm suffers massive data breach after malware attack

By Waqas The Australia-based SaaS provider firm PageUp has confirmed discovering ‘unusual This is a post from HackRead.com Read the original post: HR software firm suffers massive data breach after malware attack...

The data breach epidemic: no info is safe

By now it’s obvious that data security technology and protocols haven’t kept pace with the needs of consumers. Even as more people trust their most sensitive personal information to online apps and services, databases are routinely exposed. In 2017 alone, we learned about massive data breaches fr...

Week in security (February 26 – March 4)

Last week on Malwarebytes Labs, we explained how to protect your computer from malicious cryptomining, we gave an encryption 101 lesson using ShiOne ransomware as a case study, and we offered an explanation about SQL injection. We also released a report on the state of malicious cryptomining from...

Mirai IoT Botnet Co-Authors Plead Guilty

The U.S. Justice Department on Tuesday unsealed the guilty pleas of two men first identified in January 2017 by KrebsOnSecurity as the likely co-authors of Mirai, a malware strain that remotely enslaves so-called "Internet of Things" devices such as security cameras, routers, and digital video...

SOC Forum 2017: How I Learned to Stop Worrying and Love Massive Malware Attacks

Today I spoke at SOC Forum 2017 in Moscow. It was a great large-scale event about Security Operation Centers. 2,700 people registered. Lots of people in suits . And lots of my good fellows. The event was held in Radisson Royal Congress Park. There were three large halls for presentations and a hu...

Huawei AR1220 Massive Traffic Denial of Service Vulnerability

The Huawei AR1220 is an enterprise-grade modular router from Huawei China. A security vulnerability exists in the Huawei AR1220. An attacker can exploit this vulnerability to cause an abnormal reset of the interface board through a mega traffic impact from the GE port to the FE port of the main...

Comey testimony generates massive interest, massive traffic

Online viewers of former FBI Director James Comey's live testimony last week generated a massive peak of 2.5 Tbps of live streaming video traffic on the Akamai platform, despite the hearing occurring in the middle of the work week, in the middle of the work day. To put this in perspective, that 2...

Oracle EBusiness Suite 'Massive' Attack Surface Assessed

LAS VEGAS—Buried in the pages of the secure configuration guide for Oracle EBusiness Suite 11i is a declaration that SQL injection just isn’t a thing for the ubiquitous enterprise software. “Of the many potential SQL injections we have seen reported, we have yet to find a single confirmed example...

The vulnerability of the Django web application software platform allows a hacker to trigger a service failure.

The vulnerability of the Django web application framework is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures by generating numerous requests with unique session keys...

Security Advisory-Resource Management Vulnerability in the AR1220

Under Specifically configurations in the AR1220, An attacker sends massive traffic to the FE port from the GE port on the main board. As a result, the interface board resets unexpectedly. Vulnerability ID: HWPSIRT-2014-1298. This Vulnerability has been assigned Common Vulnerabilities and Exposure...

Native Instruments Massive 1.1.4 KSD File Handling Use-After-Free Vulnerability

No description provided by source. !/usr/bin/perl Title: Native Instruments Massive 1.1.4 KSD File Handling Use-After-Free Vulnerability Vendor: Native Instruments GmbH Product web page: http://www.native-instruments.com Affected version: 1.1.4 R1901 Summary: MASSIVE is a sonic monster ? the...

Trojan.Milicenso Print Bomb - Printer Trojan cause massive printing

Trojan.Milicenso - Printer Trojan cause massive printing A Trojan that sends printers crazy, making them print pages of garbled nonsense until all the paper has been used up, has seen a spike in activity.Symantec detected the Trojan.Milicenso across various countries, but the worst hit regions...

PlayStation Network Chief Leaves Sony After 17-Year Run

Susan Panico, the head of Sony’s PlayStation Network PSN, has left that company, according to a report from Venture Beat. Panico’s tenure as head of the PSN was reportedly marked by vast growth, but was marred in the last year by a series of missteps, including the May, 2011 data breach affecting...

Brazil ISP servers under Massive DNS poisoning attacks

Brazil ISP servers under Massive DNS poisoning attacks Kaspersky Lab expert Fabio Assolini Report that A massive DNS cache poisoning attack attempting to infect users trying to access popular websites is currently under way in Brazil. Several large ISPs in the highly connected country have been...

Massive Injection Campaign Affecting More Than Six Million Pages

We recently reported on a massive drive-by-download campaign affecting some 90,000 Web pages. In the less than two weeks since that report, the same campaign is now affecting more than six million pages. The obvious question is: why has there been such an aggressive increase in the number of...

Sony 3rd massive leak - 100 million users personal info hacked in Japan !

Sony 3rd massive leak - 100 million user's personal info hacked in Japan ! Personal information on a total of 100 million people has possibly been hacked and leaked from online game and other Internet services provided by the Sony Group worldwide, sparking fears that it could develop into the...

Epsilon's (Marketing services firm) Customer Lists of Major Brands Compromised !

Epsilon's Marketing services firm Customer Lists of Major Brands Compromised ! Due to the growing list of brands disclosing that they have been compromised as a result of this breach, I'm going to go ahead and tag this as a massive breach. And I only expect it to get bigger as more announcements...

Native Instruments Massive 1.1.4 KSD File Handling Use-After-Free

Exploit for windows platform in category dos / poc ================================================================= Native Instruments Massive 1.1.4 KSD File Handling Use-After-Free ================================================================= !/usr/bin/perl Title: Native Instruments Massive...

Native Instruments Massive 1.1.4 KSD File Handling Use-After-Free

!/usr/bin/perl Title: Native Instruments Massive 1.1.4 KSD File Handling Use-After-Free Vulnerability Vendor: Native Instruments GmbH Product web page: http://www.native-instruments.com Affected version: 1.1.4 R1901 Summary: MASSIVE is a sonic monster – the ultimate synth for basses and leads. Th...

Native Instruments Massive 1.1.4 - KSD File Handling Use-After-Free

Native Instruments Massive 1.1.4 - KSD File Handling Use-After-Free !/usr/bin/perl Title: Native Instruments Massive 1.1.4 KSD File Handling Use-After-Free Vulnerability Vendor: Native Instruments GmbH Product web page: http://www.native-instruments.com Affected version: 1.1.4 R1901 Summary:...