FCC Fines Major U.S. Wireless Carriers for Selling Customer Location Data

The U.S. Federal Communications Commission FCC today levied fines totaling nearly $200 million against the four major carriers -- including AT&T, Sprint, T-Mobile and Verizon -- for illegally sharing access to customers location information without consent. The fines mark the culmination of a mor...

GovPayNow.com Leaks 14M+ Records

Government Payment Service Inc. — a company used by thousands of U.S. state and local governments to accept online payments for everything from traffic citations and licensing fees to bail payments and court-ordered fines — has leaked more than 14 million customer records dating back at least six...

Supreme Court: Police Need Warrant for Mobile Location Data

The U.S. Supreme Court today ruled that the government needs to obtain a court-ordered warrant to gather location data on mobile device users. The decision is a major development for privacy rights, but experts say it may have limited bearing on the selling of real-time customer location data by...

U.S. Supreme Court Bolsters Mobile-Phone Privacy Rights

The U.S. Supreme Court ruled in a decision that bolsters digital privacy rights of cellphone users. In a 5-4 vote, the court ruled law enforcement needs a warrant to obtain mobile phone tower records that can reveal a user’s location over time. The ruling was made on Friday in a case involving...

Tracking Firm LocationSmart Leaked Location Data for Customers of All Major U.S. Mobile Carriers Without Consent in Real Time Via Its Web Site

LocationSmart, a U.S. based company that acts as an aggregator of real-time data about the precise location of mobile phone devices, has been leaking this information to anyone via a buggy component of its Web site -- without the need for any password or other form of authentication or...

Securus firm that lets US Cops track cellphone users has been hacked

By Uzair Amir Securus has not confirmed the breach but evidence suggests that This is a post from HackRead.com Read the original post: Securus firm that lets US Cops track cellphone users has been hacked...

Securus lets cops perform real-time cellphone tracking of US Mobile Users

By Waqas We all are well-aware of the pervasive ways governments employ This is a post from HackRead.com Read the original post: Securus lets cops perform real-time cellphone tracking of US Mobile Users...

CVE-2018-10676

CeNova, Night OWL, Novo, Pulnix, QSee, Securus, and TBK Vision DVR devices allow remote attackers to download a file and obtain sensitive credential information via a direct request for the download.rsp URI...

CVE-2018-10676

CVE-2018-10676 affects CeNova, Night OWL, Novo, Pulnix, QSee, Securus, and TBK Vision DVR devices. A remote attacker can download a file and obtain sensitive credential information by directly requesting the download.rsp URI, exposing a likely information-disclosure vulnerability. The CVSS data i...

PT-2018-10046

Name of the Vulnerable Software and Affected Versions CeNova versions affected versions not specified Night OWL versions affected versions not specified Novo versions affected versions not specified Pulnix versions affected versions not specified QSee versions affected versions not specified...

CVE-2018-10676: Undefined Security Weakness

CeNova, Night OWL, Novo, Pulnix, QSee, Securus, and TBK Vision DVR devices allow remote attackers to download a file and obtain sensitive credential information via a direct request for the download.rsp URI...

Authentication flaw

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a "Cookie: uid=admin"...

CVE-2018-9995

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a “Cookie: uid=admin”...