201 million US demographic, personal records leaked online

By Waqas Another day, another data breach - This time, 201 million records have been leaked online. This is a post from HackRead.com Read the original post: 201 million US demographic, personal records leaked online...

More on Crypto AG

One follow-on to the story of Crypto AG being owned by the CIA: this interview with a Washington Post reporter. The whole thing is worth reading or listening to, but I was struck by these two quotes at the end: ...in South America, for instance, many of the governments that were using Crypto...

A Massive U.S. Property and Demographic Database Exposes 200 Million Records

More than 200 million records containing a wide range of property-related information on US residents were left exposed on a database that was accessible on the web without requiring any password or authentication. The exposed data — a mix of personal and demographic details — included the name,...

2 Chinese Charged with Laundering $100 Million for North Korean Hackers

Two Chinese nationals have been charged by the US Department of Justice DoJ and sanctioned by the US Treasury for allegedly laundering $100 million worth of virtual currency using prepaid Apple iTunes gift cards. According to a newly unsealed court document, the illicit funds originated from a $2...

Israeli firm leaks database with addresses of millions of Americans

By Waqas Israeli marketing company Straffic has leaked personal sensitive data of millions of unsuspecting users mostly from the US and European countries. This is a post from HackRead.com Read the original post: Israeli firm leaks database with addresses of millions of Americans...

The US Blames Russia's GRU for Sweeping Cyberattacks in Georgia

By calling out Russia for digital assaults on its neighboring country, the US hopes to head off similar efforts at home...

US Natural Gas-Compression facility cripples after ransomware attack

By Deeba Ahmed Another day, another ransomware attack - This time, hackers have hit critical infrastructure of the government of the United States. This is a post from HackRead.com Read the original post: US Natural Gas-Compression facility cripples after ransomware attack...

U.S. Charges Huawei with Stealing Trade Secrets from 6 Companies

The US Department of Justice DoJ and the Federal Bureau of Investigation FBI charged Huawei with racketeering and conspiring to steal trade secrets from six US firms, in a significant escalation of a lawsuit against the Chinese telecom giant that began last year. Accusing Huawei and its affiliate...

Schneider Electric Modicon Ethernet Serial RTU

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: Modicon BMXNOR0200H Vulnerabilities: Improper Check for Unusual or Exceptional Conditions, Improper Access Control 2. RISK EVALUATION Successful exploitation of these...

Jailcore database leaks PII of inmates & correctional officers across US

By Sudais Asif Jailcore claims since these are incarcerated individuals, their rights differ substantially from the free lot in terms of privacy. This is a post from HackRead.com Read the original post: Jailcore database leaks PII of inmates & correctional officers across US...

The US Fears Huawei Because It Knows How Tempting Backdoors Are

US officials allege that Huawei has backdoors in its technology. The US knows firsthand how powerful those can be...

China's Hacking Spree Will Have a Decades-Long Fallout

Equifax. Anthem. Marriott. OPM. The data that China has amassed about US citizens will power its intelligence activities for a generation...

US charges 4 Chinese military hackers over 2017 Equifax breach

By Waqas The US government has charged four Chinese military officials over 2017's massive Equifax breach. This is a post from HackRead.com Read the original post: US charges 4 Chinese military hackers over 2017 Equifax breach...

Wago PFC200 - Authenticated Remote Code Execution Exploit

Exploit for hardware platform in category web applications Exploit Title: Wago PFC200 - Authenticated Remote Code Execution Metasploit Exploit Author: Nico Jansen 0x483d Vendor Homepage: https://www.wago.com/ Version: 'Wago PFC200 authenticated remote code execution', 'Description' = %q The Wago...

Wago PFC200 - Authenticated Remote Code Execution (Metasploit)

Exploit Title: Wago PFC200 - Authenticated Remote Code Execution Metasploit Date: 2020-02-05 Exploit Author: Nico Jansen 0x483d Vendor Homepage: https://www.wago.com/ Version: 'Wago PFC200 authenticated remote code execution', 'Description' = %q The Wago PFC200 up to incl. Firmware 11 020835 is...

merriam-webster.com Cross Site Scripting vulnerability OBB-1081690

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| merriam-webster.com ---|--- Open Bug...

The DOJ Is Finally Suing US Telecom Providers for Robocalls

The defendants have allegedly connected hundreds of millions of fraudulent robocalls to US residents...

Announcing the Xbox Bounty program

We are pleased to announce the launch of the Xbox Bounty program today. The Xbox bounty program invites gamers, security researchers, and technologists around the world to help identify security vulnerabilities in the Xbox network and services, and share them with the Microsoft Xbox team through...

The US Space Force Has a Rough Launch on the Internet

From controversy over camo print to Star Trek comparisons, the new military branch can't buy a break online...

U.S. Gov Agency Targeted With Malware-Laced Emails

A U.S. government agency was targeted with spear phishing emails harboring several malware strains – including a never-before-seen malware downloader that researchers call “Carrotball.” The campaign, which researchers observed occurring from July to October and code-named “Fractured Statue,”...