US Military Bans TikTok over privacy concerns

By Waqas No more cringy TikTok videos for the American military? This is a post from HackRead.com Read the original post: US Military Bans TikTok over privacy concerns...

Inside ‘Evil Corp,’ a $100M Cybercrime Menace

The U.S. Justice Department this month offered a $5 million bounty for information leading to the arrest and conviction of a Russian man indicted for allegedly orchestrating a vast, international cybercrime network that called itself "Evil Corp" and stole roughly $100 million from businesses and...

70% of the entire US population is now on Facebook

By Waqas In 2016, shocking research about Facebook revealed that by 2098, the social media giant will be the biggest virtual graveyard but now... This is a post from HackRead.com Read the original post: 70% of the entire US population is now on Facebook...

Toys “R” Us Is Back—Now With More Surveillance\!

Reports about the toy store using cameras to track shoppers caused an uproar, but the companies behind the tech insist their systems are trained to ignore kids...

The FCC's Push to Purge Huawei From US Networks

The rural carriers who rely on Huawei are wary of a costly “rip and replace” effort...

Alleged Russian Hacker Behind $100 Million Evil Corp Indicted

The US is charging Maksim Yakubets over two of the biggest cybertheft campaigns of the last decade, and offers a record reward for information on the case...

Breaking the Rules: A Tough Outlook for Home Page Attacks (CVE-2017-11774)

Attackers have a dirty little secret that is being used to conduct big intrusions. We’ll explain how they're "unpatching" an exploit and then provide new Outlook hardening guidance that is not available elsewhere. Specifically, this blog post covers field-tested automated registry processing for...

Blockchain Developer Gets Busted After Talk in North Korea

Hacker and Ethereum developer Virgil Griffith was recently arrested by US authorities for speaking at a conference on blockchain technologies...

us-aron.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1028447 Security Researcher metamorfosec Helped patch 1963 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting us-aron.com website a...

SQL injection vulnerability in the us***.cl***.php file of Laikai e-commerce system

Laike e-commerce system is an open source e-commerce system. Laike e-commerce system us.cl.php file has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

Intel BMC Vulnerabilities​ - Lenovo Support US

Lenovo Security Advisory: LEN-29773 Potential Impact: Escalation of Privilege, Denial of Service and/or Information Disclosure Severity: Critical Scope of Impact: Industry-wide CVE Identifier: CVE-2019-11168, CVE-2019-11170, CVE-2019-11171, CVE-2019-11172, CVE-2019-11173, CVE-2019-11174,...

Russia Fails to Stop Alleged Hacker From Facing US Charges

The repercussions over custody and extradition of Aleksei Burkov have set off a geopolitical maelstrom...

SQL Injection Vulnerability in us*** Parameters of BioReda's Security Management System Platform

Based on the latest B/S architecture design, Bio Raider Security Management Platform is a digital, networked and security integrated system platform. Bio Raider Security Management System can be applied to government, enterprises, prisons, schools, smart communities and other security requirement...

Why Many People Got Mysterious Valentine’s Day Texts Today

The issue was reportedly caused by a maintenance update made to “messaging platforms of multiple carriers in the US."...

Verizon, AT&T, Sprint and T-Mobile to replace SMS with RCS Messaging in 2020

Mobile carriers in the United States will finally offer a universal cross-carrier communication standard for the next-generation RCS messaging service that is meant to replace SMS and has the potential to change the way consumers interact with brands for years to come. All major United States...

Threat Source newsletter (Oct. 17, 2019)

Newsletter compiled by Jon Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. It’s rare that iOS jailbreaks make it onto the scene. Apple is usually able to patch them out quickly. But a recent exploit is actually...

jerome.az.gov Cross Site Scripting vulnerability OBB-995198

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| jerome.az.gov ---|--- Open Bug Bounty...

Iranian Hackers Targeted a US Presidential Candidate

A revelation from Microsoft offers a chilling reminder that Russia is not the only country interested in swaying the 2020 election...

Mariposa Botnet Author, Darkcode Crime Forum Admin Arrested in Germany

A Slovenian man convicted of authoring the destructive and once-prolific Mariposa botnet and running the infamous Darkode cybercrime forum has been arrested in Germany on request from prosecutors in the United States, who've recently re-indicted him on related charges. NiceHash CTO Matjaž "Iserdo...

A week in security (September 23 – 29)

Last week on Labs, we highlighted an Emotet campaign using Snowden’s new book as a lure, discussed how 15,000 webcams are vulnerable to attack, how insurance data security laws skirt political turmoil, and how the new iOS exploit checkm8 allows permanent compromise of iPhones. Other cybersecurity...