Top 10 Stories

VerticalScope.com, a company that runs multiple support forums on various topics, has suffered a massive data breach in February 2016 when a hacker managed to steal over 45 million user records from its database. The records, which data breach indexing site LeakedSource has managed to acquire and analyze, contain details from over 1,100 tech support portals VerticalScope is running on different domains. LeakedSource says the biggest data troves are from sites such as Techsupportforum.com, MobileCampsites.com,...

A hack on the Democratic National Committee has given attackers access to a massive trove of data, including all opposition research into presidential candidate Donald Trump and almost a year's worth of private e-mail and chat messages, according to a published report. In an article published Wednesday, The Washington Post reported that researchers with CrowdStrike, the security firm DNC officials hired to investigate and contain the breach, determined the intrusions were carried out by two...

Japan's largest travel agency JTB Corp says 7.93 million passport details, and home and email addresses may have been stolen by hackers. Executives at the company held a press conference bowing in apology for the feared breach and telling local media it may have stemmed from staffer who opened phishing-borne malware. The company felt the need to point out that some 43,00 of the passports are still valid, indicating the breached database also contained old...

Security researchers have devised a method to send massive messages on Telegram. The experts have found a flaw that allows them so send messages of any size as showed in the proof-of-concept provided by the researchers. The Iranian researcher Sad Ghaf who discovered the issue explained that it is the result of a coding error. The expert also added that over 20 million Iranians use the popular Telegram instant messaging app.   Original Souce: Security Affairs View the...

During the past year, the Bugcrowd bug bounty platform has seen a tremendous growth when it comes bug bounty payouts, but also in terms of the enterprises that signed up for its service. The company has recently published its annual State of the Bug Bounty report, and according to statistics gathered since the service started back in 2013, the company ran 286 total bug bounty programs, received 54,114 bug submissions, and paid researchers $2,054,721 for...

Researchers at Trend Micro have spotted a new variant of ransomware code that can be used to lock down Android-powered smartphones and televisions. The FLocker (short for the Frantic Locker) malware has been in circulation since at least April 2015 and has concentrated on locking down smartphone handsets running the latest builds of Android. But the writer keeps on adding new features and has now extended the code to give smart TV owners problems too....

The vultures have already begun to descend on the tragedy in Orlando, Florida. A fake Twitter account claiming to represent the nightclub where the largest mass shooting in modern US history took place in the early hours of June 12 was calling for donations to assist victims—by sending bitcoins to buy bottled water and Oreo cookies. The account was suspended on Monday afternoon.   Original Source: Arstechnica View the full story here.

Qualys security researcher Mandar Jadhav has discovered two serious vulnerabilities in Netgear D6000 and D3600 modem routers, which can be exploited to gain access to the devices and to intercept traffic passing through them. The vulnerabilities reside in the devices’ firmware, versions 1.0.0.47 and 1.0.0.49. The first one (CVE-2015-8288) is due to the firmware containing a hard-coded RSA private key and a hard-coded X.509 certificate and key. An attacker that discovers this information can misuse...

The Daily Star newspaper is reporting that a new device has surfaced online which has the ability to clone 15 contactless bank cards a second. According to the publication, the scanner skims details from contactless cards of people standing nearby and is able to capture encrypted data onto blank cards using specialised software. The device, named the Contactless Infusion X5, can read any bank card from 8cm away and will read 1024 bytes per second, equivalent...

The cyber attack vectors available to hackers will continue to grow as the Internet of Things (IoTs) become more commonplace, making valuable data accessible through an ever-widening selection of entry points. Although it's not the hackers alone, the NSA is also behind the Internet of Things. Now the agency is looking for new ways to collect even more data on foreign intelligence, and for this, the NSA is researching the possibilities of exploiting internet-connected biomedical...