Facebook Mistakenly Stored Millions of Users' Passwords in Plaintext

Holy moly, Facebook is again at the center of a new privacy controversy after revealing today that its platform mistakenly kept a copy of passwords for "hundreds of millions" users in plaintext. What's more? Not just Facebook, Instagram users are also affected by the latest security incident. So,...

SimBad malware on Play Store infected millions of Android devices

By Waqas Most of the applications infected by SimBad malware are simulator games. The IT security researchers at Check Point have discovered a sophisticated malware campaign that has been targeting Android users through Google Play Store on a global level and so far more than 150 million users ha...

Banks Attacked through Malicious Hardware Connected to the Local Network

Kaspersky is reporting on a series of bank hacks -- called DarkVishnya -- perpetrated through malicious hardware being surreptitiously installed into the target network: In 2017-2018, Kaspersky Lab specialists were invited to research a series of cybertheft incidents. Each attack had a common...

Bank Servers Hacked to Trick ATMs into Spitting Out Millions in Cash

The US-CERT has released a joint technical alert from the DHS, the FBI, and Treasury warning about a new ATM scheme being used by the prolific North Korean APT hacking group known as Hidden Cobra. Hidden Cobra, also known as Lazarus Group and Guardians of Peace, is believed to be backed by the...

UK Regulator Fines Equifax £500,000 Over 2017 Data Breach

Atlanta-based consumer credit reporting agency Equifax has been issued a £500,000 fine by the UK's privacy watchdog for its last year's massive data breach that exposed personal and financial data of hundreds of millions of its customers. Yes, £500,000—that's the maximum fine allowed by the UK's...

Flaws in Pre-Installed Apps Expose Millions of Android Devices to Hackers

Bought a new Android phone? What if I say your brand new smartphone can be hacked remotely? Nearly all Android phones come with useless applications pre-installed by manufacturers or carriers, usually called bloatware, and there's nothing you can do if any of them has a backdoor built-in—even if...

Hackers steal millions of customers’ data from Adidas US website

By Carolina Another day, another data breach - Adidas believes hackers did This is a post from HackRead.com Read the original post: Hackers steal millions of customers' data from Adidas US website...

Dixons Carphone breach: Millions of card and user data compromised

By Waqas A prominent United Kingdom-based retailer has suffered a massive data This is a post from HackRead.com Read the original post: Dixons Carphone breach: Millions of card and user data compromised...

Localblox exposes personal data of millions of Facebook & LinkedIn users

By Waqas Facebook has been at the receiving end of backlash and This is a post from HackRead.com Read the original post: Localblox exposes personal data of millions of Facebook & LinkedIn users...

Facebook Secretly Provided Analytic Firm Access to Million of Profiles

By Waqas Controversies and scandals on Facebook don’t seem to end anytime This is a post from HackRead.com Read the original post: Facebook Secretly Provided Analytic Firm Access to Million of Profiles...

lotteryextreme.com XSS vulnerability

Open Bug Bounty ID: OBB-581180 Description| Value ---|--- Affected Website:| lotteryextreme.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Walmart Jewelry Partner Exposes Data of Millions of Customers

By Waqas Unsecured Amazon S3 Bucket Claims Another Victim - This Time, This is a post from HackRead.com Read the original post: Walmart Jewelry Partner Exposes Data of Millions of Customers...

Newly Uncovered 'MoneyTaker' Hacker Group Stole Millions from U.S. & Russian Banks

Security researchers have uncovered a previously undetected group of Russian-speaking hackers that has silently been targeting Banks, financial institutions, and legal firms, primarily in the United States, UK, and Russia. Moscow-based security firm Group-IB published a 36-page report on Monday,...

“Eavesdropper” Flaw Exposes Millions of Call, Texts and Recordings

By Uzair Amir Eavesdropper is a dangerous new vulnerability identified by researchers from This is a post from HackRead.com Read the original post: Eavesdropper Flaw Exposes Millions of Call, Texts and Recordings...

casino.euro-millions.com XSS vulnerability

Vulnerable URL: https://casino.euro-millions.com/games/casino/slots/top-cat?siteId=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

XiongMai uc-http 1.0.0 Local File Inclusion / Directory Traversal

| \ | \ | | | | | | / \ | | | |/ / | |/ / | | | | | | | | | / / | | | / | / | | | | | | | | | | | | | | | |\ \ \ / / // / | | | /\ | | | | | / / / / / | | | \ | | / | | | / \ | | | | | \ | | | | \ \ / / | | | | | \ --. | | | / / | | | | | |/ / | | | | \ V / | | | . | --. \ | | | | | |...

Data Breach Day — Patreon (2.3M), T-Mobile (15M) and Scottrade (4.6M) — HACKED!

This week, three high-profile data breaches took place, compromising personal and sensitive details of millions of people. Telecommunication giant T-Mobile Crowdfunding website Patreon US brokerage firm Scottrade In T-Mobile's case, its credit application processor Experian was hacked, potentiall...

AliExpress WebSite Vulnerability Exposes Millions of Users' Private Information

A critical, but easily exploitable personal information disclosure vulnerability has been discovered in the widely popular online marketplace AliExpress website that affects its millions of users worldwide. The reported vulnerability could allow anyone to steal personal information of hundreds of...

Twiki Perl 4.x, 5.x, 6.x Upload Bypass / Code Execution Vulnerabilities

The debugenableplugins request parameter in Twiki versions 4.x, 5.x, and 6.0.0 allows arbitrary Perl code execution and suffer from a file upload bypass vulnerability. This is an advisory for TWiki administrators: The debugenableplugins request parameter allows arbitrary Perl code execution...

Vulnerability in USB Internet Modems allows hacker to access Millions of Computers remotely

A USB Internet Modems or Data card, is a type of modem that allows your computer to receive Internet access using USB Port and connect to a GSM/CDMA network there by creating a PPPoE Point to Point protocol over Ethernet interface to your computer. Indian Security Researcher 'Rahul Sasi' found a...