Graham Cluley writes: A security researcher has revealed details of a flaw in Facebook Messenger that made it possible for “any website to expose who you have been messaging with.” Imperva’s Ron Masas, who in the past has identified a bug that allowed unauthorised websites to view Facebook users’ location histories, likes and interests, discovered…
Category: Business Sector
An Email Marketing Company Left 809 Million Records Exposed Online
Alyssa Foote reports: By this point, you’ve hopefully gotten the message that your personal data can end up exposed in all sorts of unexpected internet backwaters. But increased awareness hasn’t slowed the problem. In fact, it’s only grown bigger—and more confounding. Last week, security researchers Bob Diachenko and Vinny Troia discovered an unprotected, publicly accessible…
Marriott CEO apologizes for data breach, unsure if China responsible
David Shephardson reports: Marriott International Inc Chief Executive Arne Sorenson apologized on Thursday before a U.S. Senate panel for a massive data breach involving up to 383 million guests in its Starwood hotels reservation system and vowed to protect against future attacks. […] Committee Chairman Rob Portman noted that Starwood said it had discovered malware…
Global Robotic Process Automation Company’s Event App Exposed Attendees Info
In today’s “FFS Moment,” Bob Diachenko reports: On March 1st 2019, I discovered another non password protected MongoDB that appeared to contain data related to San Jose, California based Automation Anywhere. They are the developers of robotic process automation software but this backup contained an application created specifically for Automation Anywhere’s premier customer event called…
Sonic Corp. sued for $5 million over 2017 data breach
Dale Denwalt reports an update to a breach first reported by Brian Krebs in 2017. A 2017 data breach at Sonic restaurants caused financial institutions to lose revenue, a new lawsuit claims. American Airlines Federal Credit Union claims in its lawsuit filed Monday that Sonic failed to protect its point of sale systems or update…
Report – Dalil Data Breach: 5+ Million Users’ Data Exposed by Unsecured App
VPNMentor reports: Dalil is the biggest phone directory in Saudi Arabia. With more than 5 million downloads, Dalil is the 13th most popular communications app in the Kingdom. For context, this is where Viber and Telegram rank in the US. 96% of its users are in Saudi Arabia; the remainder are in Egypt and other…