3299 matches found
Government shutdown impacts .gov websites, puts Americans in danger
If you are in the United States, then you likely already know that we are on our 24th day of a government shutdown. While it is considered a "partial" shutdown, there are still plenty of government workers who are furloughed, which impacts the services they run—both online and off. Last week,...
WeiPHP 5.0beta frontend Us***.php has SQL injection vulnerability
WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. A SQL injection vulnerability exists in WeiPHP 5.0beta frontend at Us.php. Attackers can use this vulnerability to obtain sensitive database information...
ns21.us XSS vulnerability
Open Bug Bounty ID: OBB-717566 Description| Value ---|--- Affected Website:| ns21.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...
Major US newspapers suffer malware attack; printing & delivery affected
By Waqas It is believed that the malware attack was carried out from outside the United States. The Los Angeles Times suffered a malware attack earlier this Saturday that disrupted printing and delivery process for several of its print editions across the country, the newspaper said. The malware...
wsdk8.us XSS vulnerability
Open Bug Bounty ID: OBB-715629 Description| Value ---|--- Affected Website:| wsdk8.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...
Keyfinder - A Tool For Finding And Analyzing Private (And Public) Key Files, Including Support For Android APK Files
CERT Keyfinder is a utility for finding and analyzing key files on a filesystem as well as contained within Android APK files. CERT Keyfinder development was sponsored by the United States Department of Homeland Security DHS. Installation requirements: 1. Python 3.x recommended androguard...
What the US Can Learn from Israel and China's Collaboration
Opinion: What we can learn from Israel's surprising technological ties with China...
The Iran Hacks Cybersecurity Experts Feared May Be Here
An uptick in potentially Iran-related hacking since the nuclear deal collapsed spells trouble for the US and allies...
Chinese hackers reportedly stole secret US Navy data
By Waqas Hackers of Chinese origin have stolen data from US Navy contractors whose content includes highly confidential information on advanced military technologies. In June this year, it was reported that Chinese hackers stole 614 gigabytes of US Navy’s anti-ship missile data. Now, authorities ...
Razer US: DLL Hijacking Vulnerability in synapse-2
The Synapse 2 installer was subject to a DLL planting attack in the Downloads folder. This was fixed in May of 2019...
Hackers bypassed Gmail & Yahoo’s 2FA to target US officials
By Waqas The attack was carried out by Iran-backed charming kitten hackers and victims include dozens of US government officials. Private emails of US sanctions officials and nuclear scientists have been breached by Iranian state-sponsored hackers. As per the data obtained by Certfa, a...
Nationwide Bomb Threats Look Like New Spin on an Old Bitcoin Scam
Apparent bitcoin scammers caused chaos across the US Thursday, radically escalating longstanding tactics...
merkandi.us XSS vulnerability
Open Bug Bounty ID: OBB-710734 Description| Value ---|--- Affected Website:| merkandi.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...
If China Hacked Marriott, 2014 Marked a Full-on Assault
It increasingly appears that China was behind the Marriott hack, making 2014 a landmark year in cyberattacks against the US...
TA505 Crooks are Now Targeting US Retailers with Personalized Campaigns
Cybercriminals behind the notorious Dridex and Locky ransomware have a new target in their sights – large retail, restaurant and grocery chains located in the US. Researchers are warning the well-known financial criminal group TA505 is behind a new wave of email campaigns distributing personalize...
That Bloomberg Supply-Chain-Hack Story
Back in October, Bloomberg reported that China has managed to install backdoors into server equipment that ended up in networks belonging to -- among others -- Apple and Amazon. Pretty much everybody has denied it including the US DHS and the UK NCSC. Bloomberg has stood by its story -- and is...
The United States Postal Service, the Amazon company due to API defects lead to a large number of customer data exposure-vulnerability warning-the black bar safety net
The United States is an annual holiday shopping carnival on Friday officially kicked off, and at the same time, the United States Postal Service and Amazon but there were two security incidents, both with the API using the improper about this event affected millions of people, at the same time...
First Annual Cyberwarcon
Cyberwarcon is a brand new event organized yesterday in Arlington, Virginia, and delivered eight hours of fantastic content. "CyberwarCon is a one-day conference in the Washington D.C. area focused on the specter of destruction, disruption, and malicious influence on our society through cyber...