Archive
Resilience and adaptability are key to organizations coming through the COVID-19 crisis, according to Uber CIO, Shobhana Ahluwalia, speaking at the Infosec Europe 20 Virtual Conference. She described to the audience how the company has had to display perseverance and
A major data breach at mobile payment app Bharat Interface for Money (BHIM) has exposed the personal and financial data of millions of Indians. The breach occurred after BHIM failed to securely store vast swathes of data collected from users
Aussie Football Site Leaks 70 Million Records
An Australian football fan site has been found leaking 70 million records, including users’ personal details and racist private messages, via an unprotected Elasticsearch instance. The 132GB leak was discovered by SafetyDetectives researchers led by Anurag Sen and is linked
Maintainers at the Joomla open-source content management system (CMS) announced a security breach that took place last week. Last week a member of the Joomla Resources Directory (JRD) team left an unencrypted full backup of the JRD site (resources.joomla.org) on
Amtrak has revealed that some customers may have had their personal information and log-ins stolen after it detected unauthorized access of rewards accounts by a third party. Also known as the National Railroad Passenger Corporation, the state-backed US transportation provider
Minneapolis City and Police Websites Attacked
Police and city websites in Minneapolis have come under cyber-attack as both lawful protests and illegal rioting continue across America. The nationwide social upheaval was triggered by the death of Houston native George Floyd in the city a week ago.
$100,000 Bounty Apple Zero-day Bug in “Sign in with Apple” Let Hackers Take Takeover of Apple User Accounts
Indian Security researcher found a critical Zero-day vulnerability in “Sign in with Apple” let hackers take over the third-party application accounts by just having their Email ID. Very Similar to OAuth 2.0, Apple’s “sign in with Apple” helping the user
HackerOne declared that hackers have earned $100 million in bug bounties on the HackerOne platform. Hackers have become an essential part of the security environment. They are participating worldwide, sharing awareness, their techniques, and much more. “We started out as
EU Agency for Cybersecurity ENISA has published a new report of the proactive detection of incidents, including measures and information sources. The EU Agency for Cybersecurity ENISA has published a new report and accompanying repository on measures and information sources
Recently, the attackers hacked a number of Cisco Systems servers using the Cisco Virtual Internet Routing Lab Personal Edition (VIRL-PE) platform; it’s a service that allows users to create and test network topologies (the consortium of the elements of a