BlueHat Seattle 2019 Call for Papers is Now Open!

2019 has seen a phenomenal BlueHatIL in February followed by a wildly successful BlueHat Shanghai in May… now it’s time to come back home for BlueHat Seattle! 2 days of hands-on technical training October 22-23, 2019 2 days of conference talks from industry-leading security researchers and cyber...

Capital One Hacker Also Accused of Hacking 30 More Companies and CryptoJacking

Former Amazon employee Paige Thompson, who was arrested last month in relation to the Capital One data breach, has been accused of hacking not only the U.S. credit card issuer, but also more than 30 other companies. An indictment unsealed on Wednesday revealed that Thompson not just stole data fr...

Amazon Alexa Secretly Records Children, Lawsuits Allege

A federal lawsuit is alleging that Amazon is recording children who use its Alexa devices, without their consent or knowledge. Alexa is the built-in voice assistant shipped with devices like Amazon Echo, Amazon Dot, Fire TV and some third-party gadgets. “Alexa routinely records and voiceprints...

Friday Squid Blogging: Cephalopod Appreciation Society Event

Last Wednesday was a Cephalopod Appreciation Society event in Seattle. I missed it. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

secure.seattletimes.com XSS vulnerability

Open Bug Bounty ID: OBB-716580 Description| Value ---|--- Affected Website:| secure.seattletimes.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Wallarm to Sponsor KubeCon + CloudNative Con

If you have not registered yet for the main Kubernetes event in North America which will start on December 10th in Seattle, you may be out of luck. The event is sold out and is only taking the waitlist applications. But if you are going, KubeCon + CloudNativeCon promises to be a treat with the...

Calif. Man Pleads Guilty in Fatal Swatting Case, Faces 20+ Years in Prison

A California man who pleaded guilty Tuesday to causing dozens of swatting attacks -- including a deadly incident in Kansas last year -- now faces 20 or more years in prison. Tyler Raj Barriss, in an undated selfie. Tyler Barriss, 25, went by the nickname SWAuTistic on Twitter, and reveled in...

seattle.edgemedianetwork.com XSS vulnerability

Open Bug Bounty ID: OBB-688720 Description| Value ---|--- Affected Website:| seattle.edgemedianetwork.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

seattleaudubon.org XSS vulnerability

Open Bug Bounty ID: OBB-618793 Description| Value ---|--- Affected Website:| seattleaudubon.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

seattle-theatre.com XSS vulnerability

Open Bug Bounty ID: OBB-360963 Description| Value ---|--- Affected Website:| seattle-theatre.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

autos.seattletimes.com XSS vulnerability

Vulnerable URL: https://autos.seattletimes.com/places/search/type:3/maxprice:0/maxmiles:0/make:0/model:0/services:Tire+&+xss%22%3E%3Cimg%20src=x%20onerror=prompt%22openbugbounty%22%3E/dealer:0/city:0/year:0/bodystyle:0 Details: Description| Value ---|--- Patched:| No Latest check for patch:|...

joyseattle.com XSS vulnerability

Vulnerable URL: http://www.joyseattle.com/paper/main.php?papercode=1/-///'/"//--...

www1.seattleartmuseum.org XSS vulnerability

Open Bug Bounty ID: OBB-250539 Description| Value ---|--- Affected Website:| www1.seattleartmuseum.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

seattlecentral.edu XSS vulnerability

Vulnerable URL: http://seattlecentral.edu/sos/'/ Details: Description| Value ---|--- Patched:| Yes, at 10.05.2017 Latest check for patch:| 10.05.2017 18:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 60189 VIP website status:| No Check seattlecentral.edu SSL...

uniongrouprealty.com XSS vulnerability

Vulnerable URL: http://www.uniongrouprealty.com/index.php?advanced=1=North+Seattle%2C+%5B%5D=area%3ANorth+Seattle=%5B%5D=1=0=100000000=0=0=0=30000=0=3000=0=0==KNOXSS Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:...

catalog.seattleu.edu XSS vulnerability

Vulnerable URL: http://catalog.seattleu.edu/portfolionopop.php/"--!" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description|...

classifieds.seattletimes.com XSS vulnerability

Vulnerable URL: http://classifieds.seattletimes.com/wa/all-categories/search?searchtype=advancedsearchkeyword=OPENBUGBOUNTY'" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

seattle-parks.budget.socrata.com XSS vulnerability

Vulnerable URL: http://seattle-parks.budget.socrata.com/embed/barchart?branchtype=opexentity=null=defaultentity=org1field=total=desc=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:|...

seattleorthodontist.com XSS vulnerability

Vulnerable URL: https://seattleorthodontist.com/wp-content/plugins/widgetkit/widgets/mediaplayer/mediaelement/flashmediaelement.swf?jsinitfu%xnction=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability...

seattletours.us XSS vulnerability

Vulnerable URL: http://www.seattletours.us/?z=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:55 GMT Vulnerability type:| XSS Vulnerability...