How to Manage Your Privacy On and Off Facebook

Social media has come a long way in a short space of time. In a little over a decade, it’s grown from being the preserve of a relatively small group of online enthusiasts to one of the defining trends of 21st century life. As the undisputed global leader in this field, Facebook now boasts nearly...

CVE-2020-3939

SysJust Syuan-Gu-Da-Shih, versions before 20191223, contain vulnerability of Cross-Site ScriptingXSS, personal information may be leaked to attackers via the vulnerability...

Cross site scripting

SysJust Syuan-Gu-Da-Shih, versions before 20191223, contain vulnerability of Cross-Site ScriptingXSS, personal information may be leaked to attackers via the vulnerability...

CVE-2020-3939 SysJust Syuan-Gu-Da-Shih -Cross-Site Scripting(XSS)

SysJust Syuan-Gu-Da-Shih, versions before 20191223, contain vulnerability of Cross-Site ScriptingXSS, personal information may be leaked to attackers via the vulnerability...

IRS Launches “Identity Theft Central” Webpage

The Internal Revenue Service IRS has launched its “Identity Theft Central” webpage to provide 24/7 access to online information regarding tax-related identity theft and data security protection. Tax-related identity theft occurs when someone steals personal information to commit tax fraud. The...

Study shows prominent apps are selling your data to 3rd parties

By Sudais Asif Among the various categories of apps that exist out there, some by their nature store more of your personal information as compared to others. This is a post from HackRead.com Read the original post: Study shows prominent apps are selling your data to 3rd parties...

Microsoft Leaves 250M Customer Service Records Open to the Web

UPDATE Misconfigured Microsoft cloud databases containing 14 years of customer support logs exposed 250 million records to the open internet for 25 days. The account info dates back as far as 2005 and is as recent as December 2019 — and exposes Microsoft customers to phishing and tech scams...

IC3 Issues Alert on Employment Scams

The Internet Crime Complaint Center IC3 has issued an alert warning consumers of fake jobs and hiring scams targeting applicants’ personally identifiable information PII. Cyber criminals posing as legitimate employers spoof company websites and post fake job openings to lure victims. Cyber...

Clearview app lets police find your information with just a photo

By Sudais Asif Clearview app is not for personal use but only for law enforcement authorities, the company emphasizes... This is a post from HackRead.com Read the original post: Clearview app lets police find your information with just a photo...

Researchers Demonstrate How to Hack Any TikTok Account by Sending SMS

TikTok , the 3rd most downloaded app in 2019, is under intense scrutiny over users' privacy, censoring politically controversial content and on national-security grounds—but it's not over yet, as the security of billions of TikTok users would be now under question. The famous Chinese viral...

Xiaomi Cameras Connected to Google Nest Expose Video Feeds From Others

Internet-connected devices have been one of the most remarkable developments that have happened to humankind in the last decade. Although this development is a good thing, it also stipulates a high security and privacy risk to personal information. In one such recent privacy mishap, smart IP...

CVE-2019-12837

The Java API in accesuniversitat.gencat.cat 1.7.5 allows remote attackers to get personal information of all registered students via several API endpoints...

Design/Logic Flaw

The Java API in accesuniversitat.gencat.cat 1.7.5 allows remote attackers to get personal information of all registered students via several API endpoints...

CVE-2019-12837

The Java API in accesuniversitat.gencat.cat 1.7.5 allows remote attackers to get personal information of all registered students via several API endpoints...

CVE-2019-12837

The CVE-2019-12837 entry involves the Java API in accesuniversitat.gencat.cat version 1.7.5, where remote attackers can access personal information of all registered students through multiple API endpoints. The connected documents corroborate the affected software and the data disclosure risk but...

Secure New Internet-Connected Devices

During the holidays, internet-connected devices—also known as Internet of Things IoT devices—are popular gifts. These include smart cameras, smart TVs, watches, toys, phones, and tablets. Although this technology provides added convenience to our lives, it often requires that we share personal an...

Honda Leaks Data of 26K North American Customers

An exposed database was discovered leaking the personal information of 26,000 North American Honda owners and their vehicles. The Elasticsearch database in question is owned by the American Honda Motor Co., a North American subsidiary of the Honda Motor Co. The cloud misconfiguration exposed the...

Birth Certificate Data Laid Bare on the Web in Multiple States

A third-party government supplier has exposed hundreds of thousands of applications containing birth-certificate data. The trove of information is owned by a company that provides an online platform to state governments – including California, New York and Texas – that allows residents to request...

Razer: THX Tuneup Survey feedback disclosure via Google cached content for apps.thx.com

Summary: If you use this google dork: site:apps.thx.com, you will notice many of the links no longer work. However, in the cached versions, they contain lots of sensitive user information from users who seemingly filled out a survey, including first and last name, zip code, gender, email, country...

SMS and personal data of millions of Americans leaked online

By Sudais The database leak is yet another set back for Americans. Here's what was in the data and how it may affect victims. This is a post from HackRead.com Read the original post: SMS and personal data of millions of Americans leaked online...