Facebook Suspends Analytics Firm Over Surveillance Concerns

Online data privacy is again being thrust into the spotlight after Facebook announced Friday it suspended yet another analytics firm due to concerns about the collection and sharing of data. The company is launching an investigation into whether Boston-based Crimson Hexagon’s collection of public...

Authentication flaw

Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass access restriction to access and write non-public data via unspecified vectors...

CVE-2018-0567

Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass access restriction to access and write non-public data via unspecified vectors...

CVE-2018-0567

Cybozu Office 10.0.0 to 10.8.0 is affected by CVE-2018-0567, an operation restriction bypass that allows a user (authenticated) to access and write data before it becomes public. The issue is documented across multiple sources (e.g., JVN/CNVD/OpenVAS/NVD) and is classified with a CVSS v3 base sco...

CVE-2018-0567

Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass access restriction to access and write non-public data via unspecified vectors...

SpiderFoot 2.12 - Automates OSINT to find out everything possible about your target

SpiderFoot is a reconnaissance tool that automatically queries over 100 public data sources OSINT to gather intelligence on IP addresses, domain names, e-mail addresses, names and more. You simply specify the target you want to investigate, pick which modules to enable and then SpiderFoot will...

Tracking People Without GPS

Interesting research: The trick in accurately tracking a person with this method is finding out what kind of activity they're performing. Whether they're walking, driving a car, or riding in a train or airplane, it's pretty easy to figure out when you know what you're looking for. The sensors can...

CENTCOM Says Massive Data Cache Found on Leaky Server is Benign

A massive archive of 1.8 billion publicly accessible social-media posts were found on the Amazon S3 storage buckets that belonged to a Pentagon contractor. The data was collected by the third-party contractor on the behalf of United States Central Command and United States Pacific Command...

Facebook, Twitter and Instagram Share Data with Location-based Social Media Surveillance Startup

Facebook, Instagram, Twitter, VK, Google's Picasa and Youtube were handing over user data access to a Chicago-based Startup — the developer of a social media monitoring tool — which then sold this data to law enforcement agencies for surveillance purposes, the ACLU disclosed Tuesday. Government...

URL Shorteners Put Private Cloud Data at Risk

URL shorteners are convenient, but for a long time gave security practitioners anxiety because it was difficult to determine where the shortened address was taking you. Two researchers have now given you new reasons to fear URL shorteners, especially for those storing and sharing data on...

libreport: Possible private data leak in Bugzilla bugs opened by ABRT

It was found that ABRT may have exposed non-public information to Red Hat Bugzilla during crash reporting. A bug in the libreport library caused changes made by a user in files included in a crash report to be discarded. As a result, Red Hat Bugzilla attachments may contain data that was not...

Vodafone EasyBox weak WPS PIN

PIN is generated based on publically available data...

Team GhostShell leak One Million Records

TeamGhostShell a team linked with the Activist group Anonymous, is claiming that they have hacked some major U.S. institutions including major banking institutions, accounts of politicians and has posted those details online. The dumps comprising of millions of accounts has been let loose on the...

Iran Acknowledges Hack Of Oil Ministry

The Iranian Oil Ministry has acknowledged that a virus outbreak has compromised servers and Web sites used by the Ministry, but denies that any non-public data was exposed. The notice, which was posted on the Web site for the Oil Ministry on Monday, quotes a Ministry of Petroleum spokesman as...

Ted Julian on Data Breach Response and Incident Analysis

Dennis Fisher talks with Ted Julian of CO3 about why even the more enlightened organizations still find themselves unprepared when hit with a data breach, the need for more public data to help analyze the nature and effects of breaches and how third-party breaches affect organizations. Podcast...

Welt.de hacked - Credit Card info of 30264 users Compromised

Welt.de hacked - Credit Card info of 30264 users Compromised Welt.de hacked using an SQL Injection https://boot24.welt.de/indexwelt..php?ac =. The Hacker was deeply penetrate into the infrastructure of the Website and copy number information from the database of MySQL. He has published the links ...