Friday Squid Blogging: 500-Million-Year-Old Cephalopod

The oldest known cephalopod -- the ancestor of all modern octopuses, squid, cuttlefish and nautiluses -- is 500 million years old. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...

Flaws in Two Popular WordPress Plugins Affect Over 7 Million Websites

Researchers have disclosed vulnerabilities in multiple WordPress plugins that, if successfully exploited, could allow an attacker to run arbitrary code and take over a website in certain scenarios. The flaws were uncovered in Elementor, a website builder plugin used on more than seven million...

Hackers steal $3.8 million from Defi Protocol DODO

By Habiba Rashid DODO is a decentralized exchange built on the proactive market maker algorithm that runs on Ethereum and Binance Smart Chain BSC This is a post from HackRead.com Read the original post: Hackers steal $3.8 million from Defi Protocol DODO...

Cryptocurrency exchange in liquidation due to hack, hacked again

By Waqas Cryptopia cryptocurrency exchange was hacked in 2019 and put into liquidation after suffering a loss of USD 30 million in crypto-assets. This is a post from HackRead.com Read the original post: Cryptocurrency exchange in liquidation due to hack, hacked again...

Kia Motors Hit With $20M Ransomware Attack – Report

So far, Kia Motors America has publicly acknowledged an “extended system outage,” but ransomware gang DoppelPaymer claimed it has locked down the company’s files in a cyberattack that includes a $20 million ransom demand. That $20 million will gain Kia a decryptor and a guarantee to not to publis...

WARNING — Hugely Popular 'The Great Suspender' Chrome Extension Contains Malware

Google on Thursday removed The Great Suspender , a popular Chrome extension used by millions of users, from its Chrome Web Store for containing malware. It also took the unusual step of deactivating it from users' computers. "This extension contains malware," read a terse notification from Google...

PT-2021-13585 · Apple +9 · Security Update +15

Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions prior to 11.2 Security Update versions prior to 2021-001 Catalina Security Update versions prior to 2021-001 Mojave watchOS versions prior to 7.3 tvOS versions prior to 14.4 iOS versions prior to 14.4 iPadOS versions...

Russian Hacker Gets 12-Years Prison for Massive JP Morgan Chase Hack

A U.S. court on Thursday sentenced a 37-year-old Russian to 12 years in prison for perpetrating an international hacking campaign that resulted in the heist of a trove of personal information from several financial institutions, brokerage firms, financial news publishers, and other American...

Juspay data breach 35 million customers’ card data sold on dark web

By Waqas The Indian startup Juspay handles payments for online marketplaces, including Amazon. This is a post from HackRead.com Read the original post: Juspay data breach 35 million customers card data sold on dark web...

Ticketmaster To Pay $10 Million Fine For Hacking A Rival Company

Ticketmaster has agreed to pay a $10 million fine after being charged with illegally accessing computer systems of a competitor repeatedly between 2013 and 2015 in an attempt to "cut the company off at the knees." A subsidiary of Live Nation, the California-based ticket sales and distribution...

Gionee subsidiary implanted malware in over 20 million phones

By Deeba Ahmed The Chinese smartphone maker reportedly made $4.2 million through manufacturing malware-infected phones. This is a post from HackRead.com Read the original post: Gionee subsidiary implanted malware in over 20 million phones...

Authorities disrupt massive stolen credit card trading scam on dark web

By Deeba Ahmed Dubbed Carding Action 2020; the operation aimed at targeting several dark web marketplaces resulting in saving $48million/€40 million. This is a post from HackRead.com Read the original post: Authorities disrupt massive stolen credit card trading scam on dark web...

Friday Squid Blogging: Diplomoceras Maximum

Diplomoceras maximum is an ancient squid-like creature. It lived about 68 million years ago, looked kind of like a giant paperclip, and may have had a lifespan of 200 years. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my...

Vulnerability in Bumble dating app risked data of 100 million users

By Sudais Asif It took Bumble 255 days to respond and fix some of the vulnerabilities reported by the researcher. This is a post from HackRead.com Read the original post: Vulnerability in Bumble dating app risked data of 100 million users...

BigBasket data breach – 20 million customer data sold on dark web

By Deeba Ahmed India’s leading online supermarket BigBasket acknowledged putting sensitive data of more than 20 million users at stake. This is a post from HackRead.com Read the original post: BigBasket data breach - 20 million customer data sold on dark web...

ipa: No password length restriction leads to denial of service

A flaw was found in IPA. When sending a very long password = 1,000,000 characters to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability...

US jails Russian hacker for 8 years over botnet, bank fraud

By Deeba Ahmed The hacker participated in a sophisticated scheme to steal, exchange sensitive financial, personal data, causing a loss of $100 million to the victims. This is a post from HackRead.com Read the original post: US jails Russian hacker for 8 years over botnet, bank fraud...

The Wisconsin GOP Lost $2.3 Million in an Email Scam

Trump's website gets hacked, a ransomware group calls it quits, and more of the week's top security news...

SilentFade malware stole Facebook credentials, $4 million in ad fraud

By Deeba Ahmed Facebook claims that a Chinese company is responsible for operating SilentFade malware. This is a post from HackRead.com Read the original post: SilentFade malware stole Facebook credentials, $4 million in ad fraud...

Database mess up leaks 882 GB of ecommerce & dating sites data

By Sudais Asif A misconfigured Elasticsearch server is responsible for exposing data amounting to more than 370 million records. This is a post from HackRead.com Read the original post: Database mess up leaks 882 GB of ecommerce & dating sites data...