PT-2021-13585 · Apple +9 · Security Update +15

Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions prior to 11.2 Security Update versions prior to 2021-001 Catalina Security Update versions prior to 2021-001 Mojave watchOS versions prior to 7.3 tvOS versions prior to 14.4 iOS versions prior to 14.4 iPadOS versions...

Excessive memory allocation in graph URLs leads to denial of service

Jenkins renders several different graphs for features like agent and label usage statistics, memory usage, or various plugin-provided statistics. Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit the graph size provided as query parameters. This allows attackers to request or to...

Russian Hacker Gets 12-Years Prison for Massive JP Morgan Chase Hack

A U.S. court on Thursday sentenced a 37-year-old Russian to 12 years in prison for perpetrating an international hacking campaign that resulted in the heist of a trove of personal information from several financial institutions, brokerage firms, financial news publishers, and other American...

Juspay data breach 35 million customers’ card data sold on dark web

By Waqas The Indian startup Juspay handles payments for online marketplaces, including Amazon. This is a post from HackRead.com Read the original post: Juspay data breach 35 million customers card data sold on dark web...

Ticketmaster To Pay $10 Million Fine For Hacking A Rival Company

Ticketmaster has agreed to pay a $10 million fine after being charged with illegally accessing computer systems of a competitor repeatedly between 2013 and 2015 in an attempt to "cut the company off at the knees." A subsidiary of Live Nation, the California-based ticket sales and distribution...

Gionee subsidiary implanted malware in over 20 million phones

By Deeba Ahmed The Chinese smartphone maker reportedly made $4.2 million through manufacturing malware-infected phones. This is a post from HackRead.com Read the original post: Gionee subsidiary implanted malware in over 20 million phones...

Authorities disrupt massive stolen credit card trading scam on dark web

By Deeba Ahmed Dubbed Carding Action 2020; the operation aimed at targeting several dark web marketplaces resulting in saving $48million/€40 million. This is a post from HackRead.com Read the original post: Authorities disrupt massive stolen credit card trading scam on dark web...

Friday Squid Blogging: Diplomoceras Maximum

Diplomoceras maximum is an ancient squid-like creature. It lived about 68 million years ago, looked kind of like a giant paperclip, and may have had a lifespan of 200 years. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my...

Vulnerability in Bumble dating app risked data of 100 million users

By Sudais Asif It took Bumble 255 days to respond and fix some of the vulnerabilities reported by the researcher. This is a post from HackRead.com Read the original post: Vulnerability in Bumble dating app risked data of 100 million users...

BigBasket data breach – 20 million customer data sold on dark web

By Deeba Ahmed India’s leading online supermarket BigBasket acknowledged putting sensitive data of more than 20 million users at stake. This is a post from HackRead.com Read the original post: BigBasket data breach - 20 million customer data sold on dark web...

ipa: No password length restriction leads to denial of service

A flaw was found in IPA. When sending a very long password = 1,000,000 characters to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability...

US jails Russian hacker for 8 years over botnet, bank fraud

By Deeba Ahmed The hacker participated in a sophisticated scheme to steal, exchange sensitive financial, personal data, causing a loss of $100 million to the victims. This is a post from HackRead.com Read the original post: US jails Russian hacker for 8 years over botnet, bank fraud...

The Wisconsin GOP Lost $2.3 Million in an Email Scam

Trump's website gets hacked, a ransomware group calls it quits, and more of the week's top security news...

SilentFade malware stole Facebook credentials, $4 million in ad fraud

By Deeba Ahmed Facebook claims that a Chinese company is responsible for operating SilentFade malware. This is a post from HackRead.com Read the original post: SilentFade malware stole Facebook credentials, $4 million in ad fraud...

Database mess up leaks 882 GB of ecommerce & dating sites data

By Sudais Asif A misconfigured Elasticsearch server is responsible for exposing data amounting to more than 370 million records. This is a post from HackRead.com Read the original post: Database mess up leaks 882 GB of ecommerce & dating sites data...

Hackers attack European crypto exchange ETERBASE; steal $5.4 Million

By Waqas The Slovakian crypto exchange suffered a targeted hack attack on Monday night. This is a post from HackRead.com Read the original post: Hackers attack European crypto exchange ETERBASE; steal $5.4 Million...

CVE-2020-25105

eramba c2.8.1 and Enterprise before e2.19.3 has a weak password recovery token createHash has only a million possibilities...

Empire market exit scam- Admins allegedly steal $30 million worth of BTC

By Sudais Asif Empire market has been offline for more than 4 days. This is a post from HackRead.com Read the original post: Empire market exit scam- Admins allegedly steal $30 million worth of BTC...

Russian Arrested After Offering $1 Million to U.S. Company Employee for Planting Malware

Hackers always find a way in, even if there's no software vulnerability to exploit. The FBI has arrested a Russian national who recently traveled to the United States and offered $1 million in bribe to an employee of a targeted company for his help in installing malware into the company's compute...

Freepik and Flaticon suffer data breach; 8.3 million users affected

By Waqas For your information, Flaticon claims to be the largest database of free icons and is owned by Freepik company. This is a post from HackRead.com Read the original post: Freepik and Flaticon suffer data breach; 8.3 million users affected...