2679 matches found
Cybercriminals Steal Nearly 1TB of Data from Miami-Based International Tech Firm
Hackers have stolen nearly a terabyte of data from a Miami-based tech firm, leaking a number of the pilfered files including full credit-card information, scans of sensitive documents such as passports, bank statements and financial documents, and even customer databases on a Russian hacker forum...
Microsoft and Other Tech Companies Take Down TrickBot Botnet
Days after the US Government took steps to disrupt the notorious TrickBot botnet, a group of cybersecurity and tech companies has detailed a separate coordinated effort to take down the malware's back-end infrastructure. The joint collaboration, which involved Microsoft's Digital Crimes Unit,...
Clop ransomware hits Software AG, demands $20 million+ ransom
By Waqas Software AG, a German tech giant had its helpdesk and internal communication systems disrupted after the Clop ransomware attack. Over the weekend, Germanys second-largest tech firm Software AG suffered a ransomware attack. The company had to shut down many of its internal systems...
Ransomware attack on health tech firm disrupted COVID-19 medical trials
By Waqas Philadelphia-based Health Tech eResearchTechnology ERT Firm Suffered Ransomware Attack. This is a post from HackRead.com Read the original post: Ransomware attack on health tech firm disrupted COVID-19 medical trials...
pum-tech.co.kr Cross Site Scripting vulnerability OBB-1368747
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Who is Tech Investor John Bernard?
John Bernard, the subject of a story here last week about a self-proclaimed millionaire investor who has bilked countless tech startups, appears to be a pseudonym for John Clifton Davies, a U.K. man who absconded from justice before being convicted on multiple counts of fraud in 2015. Prior to hi...
Stacey Abrams on How We’ll Beat Back Voter Suppression
The former Democratic candidate for Georgia governor talks democracy, election tech, and why speaking Klingon doesn’t always help. As told to Gilad Edelman...
Zeppelin Ransomware Returns with New Trojan on Board
The Zeppelin ransomware has sailed back into relevance, after a hiatus of several months. A wave of attacks were spotted in August by Juniper Threatlab researchers, making use of a new trojan downloader. These, like an initial Zeppelin wave observed in late 2019, start with phishing emails with...
thira.gov.gr Cross Site Scripting vulnerability OBB-1315430
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
noahwatertech.com Cross Site Scripting vulnerability OBB-1270798
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
tech-power.ro Cross Site Scripting vulnerability OBB-1258682
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-9528
Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, as used by many different vendors in millions of Internet of Things devices, suffers from cryptographic issues that allow remote attackers to access user session data, as demonstrated by eavesdropping on user video/audio...
CVE-2020-9529
CVE-2020-9529 affects firmware by Shenzhen Hichip Vision Technology (V6–V20) used in numerous brands (e.g., Accfly, Anlink, D3D Security, Tenvis, ZILINK, etc.). The vulnerability enables privilege escalation from the local network, allowing an attacker to reset the device administrator password. ...
CVE-2020-9528
CVE-2020-9528 involves firmware from Shenzhen Hichip Vision Technology (V6–V20) used across multiple IoT devices. The reported issue is cryptographic in nature and enables remote attackers to access user session data, demonstrated by eavesdropping on video/audio streams, capturing credentials, an...
CVE-2020-9527
CVE-2020-9527 concerns firmware by Shenzhen Hichip Vision Technology (V6–V20, post-2018-08-09 to 2020) used across many IoT devices under numerous brands. The vulnerability is a buffer overflow in the P2P service that allows unauthenticated remote attackers to execute arbitrary code. Affected pro...
tech-corp.ru Cross Site Scripting vulnerability OBB-1237537
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Afternoon Cyber Tea: Peak, Plateau, or Plummet? Cyber security trends that are here to stay and how to detect and recover from ransomware attacks
The rapidity of change in the cyberthreat landscape can be daunting for today’s cyber defense teams. Just as they perfect the ability to block one attack method, adversaries change their approach. Tools like artificial intelligence and machine learning allow us to pivot quickly, however, knowing...
tech-nik.nl Cross Site Scripting vulnerability OBB-1229622
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
This Week in Security News: Trend Micro Research Discovers Cybercriminal Turf War on Routers and a Massive Twitter Breach Compromises Some of the World’s Most Prominent Accounts
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, read about Trend Micro’s report on the botnet battle for IoT territory and how attacker groups are trying to gain control of vulnerable...
Command Execution Vulnerability in SSH of UPS Management Module at VitiTech Ltd.
VitiTech is an uninterruptible power supply, automation control equipment and industrial battery company. A command execution vulnerability exists in SSH, the UPS management module of Verti Technologies Ltd. The vulnerability can be exploited to remotely execute system shell commands bypassing...