Equifax Hack Exposes Personal Info of 143 Million US Consumers

It's ironic—the company that offers credit monitoring and ID theft protection solutions has itself been compromised, exposing personal information of as many as 143 million Americans—that's almost half the country. Equifax, one of the three largest credit reporting firm in the United States,...

Military Contractor's Vendor Leaks Resumes in Misconfigured AWS S3

Thousands of resumes and job applications containing the personal information of U.S. veterans, many with top secret clearances, and law enforcement officers were left exposed in an Amazon Web Services S3 bucket, continuing a trend where poorly configured cloud-storage services are putting people...

Vulnerability of Qingdao Governmental Affairs App Android Version with Ultra-rights Access Vulnerability

Qingdao Government APP is a government service assistant that facilitates citizens to learn the latest news and information anytime and anywhere, grasp the latest government decision-making information, and facilitate direct dialogue and communication between citizens and the government. The...

Mail.ru: Clickjacking Full account takeover and editing the personal information at [account.my.com]

Hi, while i was testing i found that my.com is vulnerable to clickjacking so i checked if the settings page is vulnerable or not and it was vulnerable so now this has a risk!, the attacker could make an exploit code at the changing password page to takeover the victim account, and the same with t...

Information Disclosure

Moodle is vulnerable to information disclosure. Authenticated attackers can get sensitive personal contact information and unread message counts through a URL because the moodle/site:readallmessages capability is ignored...

Join us at Black Hat 2017

Hide your phones, hide your laptops ‘cause they’re hackin’ everyone out here! For the 20th year, on July 26 and 27, thousands of cybersecurity executives, researchers and enthusiasts will descend upon Las Vegas for Black Hat 2017, including some of Trend Micro’s finest. Throughout the week, Trend...

FBI Releases Article on Privacy Risks Associated with Internet-Connected Children's Toys

The Federal Bureau of Investigation FBI has released an article on the privacy risks associated with Internet-connected children's toys. FBI warns that Internet-connected toys may contain "sensors, microphones, cameras, data storage components, and other multimedia capabilities - including speech...

Over 14 Million Verizon Customers' Data Exposed On Unprotected AWS Server

Verizon, the major telecommunications provider, has suffered a data security breach with over 14 million US customers' personal details exposed on the Internet after NICE Systems, a third-party vendor, mistakenly left the sensitive users’ details open on a server. Chris Vickery, researcher and...

Micro Market Vendor Warns of Bankcard And Biometric Data Breach

Avanti Markets, which specializes in self-serve food kiosks typically located in company breakrooms, said an undisclosed number of its 1.5 million customers may have had their personal and bankcard data compromised along with stored biometric data. The company, based in Tukwila, WA, said on July ...

Leaky WWE Database Exposes Personal Data of 3M Fans

Pro wrestling giant World Wrestling Entertainment notified fans on Thursday that a database containing personal information of three million fans was left on an insecure server. According to the WWE, personal information included names, both home and email addresses, earnings, ethnicity, children...

WakaTime: Password Policy Issue

Greetings Wakatime, I just found a weak password policy in your login page. Some websites prevents the users to use password constructed of character combinations that otherwise meet company policy, but should no longer be used because they have been deemed insecure for one or more reasons, such ...

Largest Cryptocurrency Exchange Hacked! Over $1 Million Worth Bitcoin and Ether Stolen

One of the world's largest Bitcoin and Ether cryptocurrencies exchanges Bithumb has recently been hacked, resulting in loss of more than $1 Million in cryptocurrencies after a number of its user accounts compromised. Bithumb is South Korea's largest cryptocurrency exchange with 20% of global ethe...

Anthem Agrees to Settle 2015 Data Breach for $115 Million

Like many companies hit by data breaches, Anthem, the United States’ largest for-profit health care company, has been forced to watch from the sidelines while the incident plays out in court. An end finally appears to be in sight however. Late Friday the company agreed to settle a series of...

Barclays Bank customers targeted by phishers

Today we have a phish targeting customers of Barclays Bank, located at: bankdotbarclaydotcodotukdotolbdotauthdotloginlinkdotactiondotp1242557947640dotchofcgdotcom/bd/ The phish opens up with an initial lunge for personal details: The first page asks for a surname, then offers the potential victim...

WebSites Found Collecting Data from Online Forms Even Before You Click Submit

'Do I really need to give this website so much about me?' That's exactly what I usually think after filling but before submitting a web form online asking for my personal details to continue. I am sure most of you would either close the whole tab or would edit already typed details or filled up b...

4G VoLTE the presence of the vulnerability can cause the phone user's location and other personal information disclosure-vulnerability warning-the black bar safety net

! In recent years, 4G VoLTE in the global field of mobile communications is increasingly popular popular, has now become the most European Region and Asian countries of the trend. And recently, the French security company P1 security by reporting a detailed list of a long string on 4G VoLTE call...

GameStop Online Shoppers Officially Warned of Breach

GameStop customers received breach notification warnings this week, cautioning them that their personal and financial information could have been compromised nine months ago. According to postal letters sent to customers, GameStop said an undisclosed number of online customers had their credit ca...

Please stop posting your X-rays to social media

Social media is fun. Posting pictures and sharing them with friends is a great technology. But please, we beg you, stop posting your medical imaging results to Instagram, Twitter, and Facebook. Why? What if you get a gnarly fracture from a really awesome snowboarding stunt and you want to share...

Ransom Fail: Hackers Leak Thousands of Naked Photos of Plastic Surgery Patients

By Jahanzaib Hassan The Kaunas Lithuania-based Grozio Chirurgija clinics were recently hacked by a group called Tsar Team who leaked thousands of private photos of plastic surgery patients including naked photos of celebrities. What did the photos include? According to authorities, around 25,000...

Privacy Issue Fixed in Yopify Ecommerce Notification Plugin

A plugin used by a number of popular ecommerce platforms has an over-sharing problem. Yopify, which provides popup notifications about the last 50 purchases made on a site for Shopify, BigCommerce and other platforms, leaks a significant amount of customers’ personal information to a determined...