Boomerang spam bombs Malwarebytes forum—not a smart move

Tech support scammers are generally not the best and brightest. As such, they will occasionally post ads for their fake companies in the comment sections here or on the Malwarebytes forums. Last week, however, scammers struggled with configuring their spambots, resulting in spam bombs on the foru...

Stolen security logos used to falsely endorse PUPs

To gain the trust of users, many websites and companies feature the logos of reputable firms who endorse their products. Unfortunately, some unseemly companies do the same, using logos of companies who have not, in fact, endorsed their product in order to trick people into thinking that what they...

CVE-2018-6367

SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...

Sql injection

SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...

CVE-2018-6367

SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...

CVE-2018-6367

CVE-2018-6367 is a confirmed SQL injection in the Vastal I-Tech Buddy Zone Facebook Clone version 2.9.9. The vulnerability is triggered via the /chat_im/chat_window.php with the request_id parameter or via the /search_events.php with the category parameter. The NVD entry reports a CVSS v3.0 base ...

Vastal I-Tech Facebook Clone 2.9.9 SQL Injection

Exploit Title: Vastal I-Tech Facebook Clone 2.9.9 - SQL Injection Dork: N/A Date: 27.01.2018 Vendor Homepage: http://vastal.com/ Software Link: http://vastal.com/buddy-zone-social-networking-script.html Version: 2.9.9 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: Ihsa...

Buddy Zone 2.9.9 - SQL Injection

Exploit Title: Vastal I-Tech Facebook Clone 2.9.9 - SQL Injection Dork: N/A Date: 27.01.2018 Vendor Homepage: http://vastal.com/ Software Link: http://vastal.com/buddy-zone-social-networking-script.html Version: 2.9.9 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: Ihsa...

Buddy Zone 2.9.9 - SQL Injection

Buddy Zone 2.9.9 - SQL Injection Exploit Title: Vastal I-Tech Facebook Clone 2.9.9 - SQL Injection Dork: N/A Date: 27.01.2018 Vendor Homepage: http://vastal.com/ Software Link: http://vastal.com/buddy-zone-social-networking-script.html Version: 2.9.9 Category: Webapps Tested on:...

Meltdown/Spectre: Intel Nixes Patches, Tech CEOs Questioned on Information Blackout

IT departments and tech vendors continued grappling with Spectre and Meltdown this week, as Intel pulled its glitchy patches and the U.S. Congress questioned the vulnerability disclosures' timing and scope. Spectre and Meltdown aren't typical vulnerabilities for a number of reasons, and as a...

tech-review.de XSS vulnerability

Open Bug Bounty ID: OBB-531528 Description| Value ---|--- Affected Website:| tech-review.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Gone Phishing For The Holidays

Written by Or Katz and Amiram Cohen Overview: While our team, Akamai's Enterprise Threat Protector Security Research Team, monitored internet traffic throughout the 2017 holiday season, we spotted a wide-spread phishing campaign targeting users through an advertising tactic. During the six week...

How to Protect Your Personal Data in 3 Simple Ways

By Carolina As the big tech corporations are coming under increased attack This is a post from HackRead.com Read the original post: How to Protect Your Personal Data in 3 Simple Ways...

Yet Another FBI Proposal for Insecure Communications

Deputy Attorney General Rosenstein has given talks where he proposes that tech companies decrease their communications and device security for the benefit of the FBI. In a recent talk, his idea is that tech companies just save a copy of the plaintext: Law enforcement can also partner with private...

January 10, 2017 – Morning Cyber Coffee Headlines – “Common Sense” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! January 10, 2018 - Headlines Carbon Black in the News: Seven Ransomware...

Scary Chip Flaws Raise Spectre of Meltdown

Apple, Google, Microsoft and other tech giants have released updates for a pair of serious security flaws present in most modern computers, smartphones, tablets and mobile devices. Here's a brief rundown on the threat and what you can do to protect your devices. At issue are two different...

Meltdown and Spectre Flaws Collateral Damage to OS & Cloud Services Unavoidable

By Waqas Meltdown and Spectre vulnerabilities haunting users and Tech Giants worldwide This is a post from HackRead.com Read the original post: Meltdown and Spectre Flaws Collateral Damage to OS Cloud Services Unavoidable...

Trend Micro: Winning at Wellness Again

In the never-ending race for profits, shareholder value and customer wins, organizations can sometimes forget about their employees. Yet in reality, your workers are your number one asset: if they feel undervalued or disrespected it can rip the heart and soul out of the organization, setting off ...

Women in Tech and Career Spotlight: Jerusalem Bicha

We conclude our series featuring women in tech at Imperva with an interview with Jerusalem Bicha, network operations team lead at Imperva. We talked about her path to a career in cybersecurity. Tell us how you got into cybersecurity. JB: I actually don’t have a degree. My career in cybersecurity...

Women in Tech and Career Spotlight: Inna Shalom

The latest in our series featuring women in tech at Imperva is my interview with Inna Shalom, the data insight team lead at Imperva. She spoke about her professional journey and experience working in the cybersecurity industry. Tell us how you got into cybersecurity. IS: I spent the first six yea...