November 13th, 2018, By Maritza Santillan A data breach involving luxury retailer Nordstrom has potentially exposed the personal information of thousands of its employees. The Seattle-based company said the compromised data included employee names, Social Security numbers, dates of birth, checking account and routing numbers, salaries, and more. According to reports, employees … [Read more…]
Government audit finds office still hasn’t cleaned up from Obama-era megabreach By Shaun Nichols in San Francisco 14 Nov 2018 More than three years after suffering one of the largest cyber-attacks in US government history, the Office of Personnel Management has yet to adopt dozens of the security measures investigators ordered – including basic … [Read more…]
November 12th, 2018, By Nguyen Huong As a large chunk of Mobile World (The Gioi Di Dong – code: MWG)’s database of clients’ bank card information have been hacked and posted on the internet, the corporation and customers are now worried about potential losses from these cards. On November 7, a hacker has … [Read more…]
By Yueh-Ting Chen | November 12, 2018 FortiGuard Labs recently detected new versions of Kraken Cryptor Ransomware. While the beta tag has been removed from its configuration, there are still numerous bugs in this ransomware, and the author is still continuously modifying its basic functions. This ransomware variant is relatively new, only … [Read more…]
Java, .NET, PHP, and now Ruby. Python, are you next? November 10th, 2018, By Catalin Cimpanu The Ruby programming language is impacted by a similar “deserialization issue” that has affected and wreaked havoc in the Java ecosystem in 2016; an issue that later also proved to be a problem for .NET and … [Read more…]
November 9th, 2018, By Brian Krebs A Connecticut man who’s earned bug bounty rewards and public recognition from top telecom companies for finding and reporting security holes in their Web sites secretly operated a service that leveraged these same flaws to sell their customers’ personal data, KrebsOnSecurity has learned. In May 2018, ZDNet … [Read more…]
Bug affected a Steam API and was patched in August. Downgrading your Steam client won’t help you get free games. November 8th, 2018, By Catalin Cimpanu Ukrainian vulnerability researcher has found a bug that would have allowed him to download all the activation keys (also known as CD keys) made available through … [Read more…]
The vulnerabilities reside in the HTTP/2 and MP4 modules November 7th, 2018, By Sergiu Gatlan New versions of the nginx web server have been released on November 6 to patch multiple security issues affecting versions before 1.15.6, 1.14.1 and allowing potential attackers to trigger a denial-of-service (DoS) state and to access to potentially … [Read more…]
November 6th, 2018 , By Lawrence Abrams A design flaw in the WordPress permission system used by plugins and a file deletion vulnerability in a very popular eCommerce plugin called WooCommerce could allow attackers to gain full control over a WordPress site. WooCommerce by Automattic is a popular WordPress plugin that adds eCommerce functionality … [Read more…]
Enhances authentication process to Personal Internet Banking November 5th, 2018 , By Sergiu Gatlan HSBC Bank USA, National Association, has been breached and attackers managed to steal customers’ full names, phone numbers, emails, dates of birth, account numbers, payee account information, more. According to a Notice of Data Breach sent to affected customers on … [Read more…]