Hackers target Newegg with “sophisticated malware”; steal credit card data

By Waqas At the moment, it is unclear how many Newegg customers have been impacted. The IT security researchers at RiskIQ and Volexity have announced that Newegg Inc., an online retailer of items including computer hardware and consumer electronics has become a victim of a cyber attack in which...

A week in security (August 20 – August 26)

Last week on Labs, we took a look at insider threats, doubled back on the privacy of search browser extensions, profiled green card scams, revisited Defcon badgelife, and talked about what happens to a user's accounts when they die. Other cybersecurity news There was an archiving error in Twitch...

Dixons Carphone Cyberattack Targets 5.9M Bank Cards

European electronic and telecom retailer Dixons Carphone has discovered a massive cyber-attack that may have compromised millions of payment cards and personal data records, it said Wednesday. The U.K.-based retail giant, whose subsidiaries include Carphone Warehouse, Currys, PC World, Elkjøp and...

lookcycle.com XSS vulnerability

Open Bug Bounty ID: OBB-594787 Description| Value ---|--- Affected Website:| lookcycle.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Amazon Patents Measures to Prevent In-Store Comparison Shopping

Amazon has been issued a patent on security measures that prevents people from comparison shopping while in the store. It's not a particularly sophisticated patent -- it basically detects when you're using the in-store Wi-Fi to visit a competitor's site and then blocks access -- but it is an...

GameStop Online Shoppers Officially Warned of Breach

GameStop customers received breach notification warnings this week, cautioning them that their personal and financial information could have been compromised nine months ago. According to postal letters sent to customers, GameStop said an undisclosed number of online customers had their credit ca...

Vera Bradley Retail Chain Breached

Retailer Vera Bradley warned customers on Wednesday of a compromise of its point-of-sale system that allowed hackers to make off with an undisclosed number of credit card records. The breach impacts only retail customers who shopped at one of 159 Vera Bradley locations between July 25 and Sept. 2...

specialized.com XSS vulnerability

Vulnerable URL: https://www.specialized.com/us/en/retailer-locator?address=...

Alibaba aliexpress exposure security vulnerability could compromise millions of users personal information-vulnerability warning-the black bar safety net

1 of 2 November 9 November 2 1:0 0 updates: According to the official feedback Alibaba security team have been in the first time to fix the vulnerability. ! According to foreign media reports, Alibaba's aliexpress website on the exposed security vulnerabilities that could impact the world of...

WordPress The Retailer theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications...

Sally Beauty Supply Acknowledges Breach of 25K

Twelve days after acknowledging that someone attempted to breach its system, Sally Beauty Supply confirmed this week that an attacker was able to penetrate the company and make off with fewer than 25,000 records of its customers’ sensitive banking information. The chain’s parent company Sally...

New Dirt Jumper Variant 'Drive' More Refined Than Original

Researchers have detected new attacks originating from a souped-up variant of the DIY Dirt Jumper DDoS toolkit they’ve taken to calling Drive. While it hasn’t been seen spreading through any underground forums yet, the up-and-coming threat apparently boasts a “much more powerful DDoS engine than...

Infected Site Spreading SMS Android Malware

The website of a popular watch retailer is reportedly redirecting users that visit the site on Android-based devices to a number of malicious domains serving up premium rate SMS malware. According to a WebRoot report, users that visit the unnamed watch-selling website in Bulgaria are redirected t...

Update: Zappos Says 24 Million Customers Affected By Data Breach

UPDATE: Online retailer Zappos said that its network has been compromised and attackers were able to access personal information belonging to more than 24 million of its customers. Zappos said that its database that contains customers’ credit card numbers was not compromised, however. “We were...

Microsoft Sues British Electronic Dealer in Alleged Counterfeit Scam

Microsoft announced today it is suing Britain’s second-largest electronics retailer Comet for allegedly creating and selling more than 94,000 back-up discs of its Windows Vista and Windows XP product. Comet Group PLC allegedly produced counterfeit versions of the software in a factory in Hampshir...

An Inside Look at Criminal Shipping Operations

Cyber criminals are relying more than ever on mules to move fenced goods from the U.S. to foreign markets for resale, according to a report on krebsonsecurity.com. With online retailers cracking down on fraudulent purchases, criminal gangs are using networks of complicit or unwitting citizens to...

Play.com compromised and security breach Admitted !

Play.com compromised and Security breach Admitted ! Play.com, one of the largest online retailers of consumer goods, has suffered a security breach. In a warning to customers, Play.com has said that customer names and email addresses may have been compromised. Play.com is washing its hands of...

J.C. Penney Was 'Company A' in Breach Case

Retailer JC Penney fought to keep its name secret during court proceedings related to the largest breach of credit card data on record, according to documents recently unsealed. Read the full article. Computerworld...

Researchers Find Flaw in RSA Authentication

University of Michigan scientists have found they could foil RSA authentication by varying the voltage supply to the holder of the “private key,” which would be the consumer’s device in the case of copy protection and the retailer or bank in the case of Internet communication. It is highly unlike...