4 things you didn’t know a VPN could do

By Sabrina Bucknole Until recently, many people thought of VPNs as a tool used by tech-savvy kids to anonymously download music and films. But, as concern about the use and security of personal data online continues to rise, it is no surprise that the number of people using a Virtual Private...

HSBC suffers data breach after hackers access customers’ personal data

By Uzair Amir The Hongkong and Shanghai Banking Corporation HSBC has suffered a data breach in which unknown hackers have accessed personal and financial data of its customers. The data breach, according to the notification from HSBC, took between October 4, 2018, and October 14, 2018. Upon...

HSBC Data Breach Hits Online Banking Customers

International banking giant HSBC has reported that it was breached in October, as a result of a credential-stuffing attack. In a notice PDF filed with the state of California, the bank said that it became aware of some online accounts being accessed by unauthorized users between October 4 and 14...

Robber - Tool For Finding Executables Prone To DLL Hijacking

Robber is a free open source tool developed using Delphi XE2 without any 3rd party dependencies. What is DLL hijacking ?! Windows has a search path for DLLs in its underlying architecture. If you can figure out what DLLs an executable requests without an absolute path triggering this search...

Spam and phishing in Q3 2018

Quarterly highlights Personal data in spam We have often said that personal data is candy on a stick to fraudsters and must be kept safe that is, not given out on dubious websites. It can be used to gain access to accounts and in targeted attacks and ransomware campaigns. In Q3, we registered a...

Persian Stalker pillages Iranian users of Instagram and Telegram

This blog post is authored by Danny Adamatis, Warren Mercer, Paul Rascagneres, Vitor Ventura and with the contributions of Eric Kuhla. Introduction State-sponsored actors have a number of different techniques at their disposal to remotely gain access to social media and secure messaging...

File Box for Citrix User FAQs

File Box for Citrix User Frequently Asked Questions Who can use File Box with my Citrix Workspace account? File Box is only available to Employee users. Clients who you send files to cannot use the File Box. For more information on Users versus Client access, refer to Workspace: Employees vs...

Girl Scouts Issues Data Breach Warning to 2,800 Members

The Orange County, Calif. branch of the Girl Scouts of America has been hacked, potentially exposing personal information for thousands of members. Rest assured though: The cookies are safe, even those of the computing type. According to a letter to members filed with the state PDF, an...

Gitlab -- multiple vulnerabilities

Gitlab reports: RCE in Gitlab Wiki API SSRF in Hipchat integration Cleartext storage of personal access tokens Information exposure through stack trace error message Persistent XSS autocomplete Information exposure in stored browser history Information exposure when replying to issues through ema...

British Airways Data Breach Takes Off Again with 185K More Victims

British Airways said that the data breach it first reported in September is larger than previously thought. It has added an additional 185,000 victims to the official tally. The airline said that hackers may have stolen personal data connected to an additional 77,000 payment cards, including name...

Cathay Pacific hit by massive data breach; 10 million passengers affected

By Waqas Hong Kong's Cathay Pacific Airways Limited has suffered a massive data breach in which personal data of 9.4 million customers has been stolen by unknown hackers. Cathay Pacific states that the stolen data includes passenger name, date of birth, nationality, email, phone number, frequent...

Trump's Personal iPhone Would Be a National Security Risk

By using a personal iPhone instead of secured lines, President Trump makes it entirely too easy for China and Russia to spy...

Adult Website Hack Exposes 1.2M ‘Wife Lover’ Fans

The database underlying an erotica site known as Wife Lovers has been hacked, making off with user information protected only by a simple-to-crack, outdated hashing technique known as the DEScrypt algorithm. Over the weekend, it came to light that Wife Lovers and seven sister sites, all similarly...

Who Is Agent Tesla?

A powerful, easy-to-use password stealing program known as Agent Tesla has been infecting computers since 2014, but recently this malware strain has seen a surge in popularity -- attracting more than 6,300 customers who pay subscription fees to license the software. Although Agent Tesla includes ...

Personal data of 75,000 individuals exposed after HealthCare.gov system hack

By Waqas Centers for Medicare and Medicaid Services CMS experienced a data breach leading to exposure of highly sensitive personal data of nearly 75,000 people. The CMS is a government system linked with healthCare.gov which assists insurance agents and brokers in helping people register for its...

Denial of Service Vulnerability in XPacket Driver for Fair's Personal Firewall Software

Fair Personal Firewall Pro is one of Fair Security Labs products. It provides a full range of network security protection for your computer. A security vulnerability exists in the XPacket.sys driver of Fair Personal Firewall Pro. An attacker can exploit this vulnerability by sending a 0x804D2190...

Infog - Information Gathering Tool

InfoG is a Shellscript to perform Information Gathering. Features Check Website info Check Phone info IP Tracker Check Valid E-mail Check if site is Up/Down Check internet speed Check Personal info Find IP behind Cloudflare Find Subdomains Port Scan Multi-threaded Check CMS Check DNS leaking Usag...

30 Million Facebook Accounts Were Hacked: Check If You're One of Them

Late last month Facebook announced its worst-ever security breach that allowed an unknown group of hackers to steal secret access tokens for millions of accounts by taking advantage of a flaw in the 'View As' feature. At the time of the initial disclosure, Facebook estimated that the number of...

30 Million Facebook Accounts Were Hacked: Check If You're One of Them

Late last month Facebook announced its worst-ever security breach that allowed an unknown group of hackers to steal secret access tokens for millions of accounts by taking advantage of a flaw in the 'View As' feature. At the time of the initial disclosure, Facebook estimated that the number of...

Security Bulletin: Personal Communications WorkStation file Buffer Overflow Vulnerability (CVE-2012-0201)

Summary A buffer overflow vulnerability in the handling of WorkStation files .ws by IBM Personal Communications could allow a remote attacker to cause a denial of service application crash or potentially execute arbitrary code on vulnerable installations of IBM Personal Communications...