3290 matches found
North Korean Hackers Are Attacking US Hospitals
Plus: Deepfake disinformation spotted in the wild, Android privacy problems in China, Reddit gets phished, and more...
KillNet hits healthcare sector with DDoS attacks
At the end of January, the Health Sector Cybersecurity Coordination Center warned that the KillNet group is actively targeting the US healthcare sector with distributed denial-of-service DDoS attacks. The Cybersecurity and Infrastructure Security Agency CISA says it helped dozens of hospitals...
Google Android Elevation of Privilege Vulnerability (CNVD-2023-14291)
Google Android is a Linux-based open-source operating system from the US company Google. Google Android has an elevation of privilege vulnerability that can be exploited by attackers to elevate privileges...
U.S. Department of State: LDAP anonymous access enabled at certrep.pki.state.gov:389
LDAP anonymous access was enabled on the subdomain certrep.pki.state.gov, allowing unauthorized access to the LDAP server...
How the US Can Stop Data Brokers' Worst Practices—Right Now
Legal experts say a key law should already prevent brokers from collecting and selling data that’s weaponized against vulnerable people...
Netflix’s US Password-Sharing Crackdown Isn’t Happening—Yet
Accidental revisions to a US Help Center page sparked confusion about the streamer's next moves. But restrictions on account sharing are still coming soon...
Passwords Are Terrible (Surprising No One)
This is the result of a security audit: More than a fifth of the passwords protecting network accounts at the US Department of the Interior--including Password1234, Password1234!, and ChangeItN0w!--were weak enough to be cracked using standard methods, a recently published security audit of the...
Enter the Hunter Satellites Preparing for Space War
True Anomaly, a startup backed by US senator JD Vance's VC firm, plans to launch prototype pursuit satellites on a SpaceX flight later this year...
WordPress AI Contact Us Form Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
Software AI Contact Us Form Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-24386 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 673ba1e565e3 Credits Aswin Balaji Required...
Extradited Alleged ShinyHunters Hacker Pleads Not Guilty in US Court
By Habiba Rashid The alleged member of the ShinyHunters group, Sebastian Raoult, is a French citizen who was arrested in Morocco in 2022 and extradited to the U.S. this week. This is a post from HackRead.com Read the original post: Extradited Alleged ShinyHunters Hacker Pleads Not Guilty in US Co...
Bulk Surveillance of Money Transfers
Just another obscure warrantless surveillance program. US law enforcement can access details of money transfers without a warrant through an obscure surveillance program the Arizona attorney generals office created in 2014. A database stored at a nonprofit, the Transaction Record Analysis Center...
The Small but Mighty Danger of Echo Chamber Extremism
Research shows that relatively few people exist in perfectly sealed-off media bubbles—but they’re still having an outsize impact on US politics...
Contact Us page - Contact people LITE < 3.7.1 - Contact Update/Deletion/Creation via CSRF
The plugin does not have CSRF checks when creating, updating and deleting contacts, which could allow attackers to make logged in users perform such actions via CSRF attacks...
WordPress Contact Us page - Contact people LITE Plugin <= 3.7.0 is vulnerable to Cross Site Request Forgery (CSRF)
Software Contact Us page - Contact people LITE Type Plugin Vulnerable versions = 3.7.0 Fixed in 3.7.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-23973 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 924b5ed1c57e Credi...
Hack the Pentagon 3.0: Groundbreaking Bug Bounty Program Is Back
By Habiba Rashid The US military seeks public help in securing its critical cyber infrastructure with "Hack the Pentagon 3.0" bug bounty program. This is a post from HackRead.com Read the original post: Hack the Pentagon 3.0: Groundbreaking Bug Bounty Program Is Back...
US Department of the Interior's passwords "easily cracked"
It's bad news for the US Department of the Interior--a Government watchdogs security audit has revealed its passwords are simply not up to the job of warding off cracking attempts. The audit's wordy title was not kind: P@s$w0rds at the U.S. Department of the Interior: Easily Cracked Passwords, La...
info465.us Cross Site Scripting vulnerability OBB-3144435
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Russian Hackers Targeted Three US Nuclear Research Labs
By Deeba Ahmed The attacks, according to Reuters' report, happened between August and September 2022. This is a post from HackRead.com Read the original post: Russian Hackers Targeted Three US Nuclear Research Labs...
Google Android Denial of Service Vulnerability (CNVD-2023-18908)
Google Android is a Linux-based open source operating system from Google. A denial of service vulnerability exists in Google Android, which can be exploited by this attacker to cause a denial of service...