The folks at SLC Security note: With the holiday season right around the corner we started noting post on forums with a list of usernames and passwords. We have begun notifying the end users of the leaked information to see if we can verify if they re legitimate. Of the 5 people that responded so…
Category: Business Sector
Oracle Agrees to Settle FTC Charges It Deceived Consumers About Java Software Updates
From the FTC: Oracle has agreed to settle Federal Trade Commission charges that it deceived consumers about the security provided by updates to its Java Platform, Standard Edition software (Java SE), which is installed on more than 850 million personal computers. Under the terms of a proposed consent order, Oracle will be required to give consumers the…
Juniper’s backdoor password disclosed, likely added in late 2013
Steve Ragan reports: Rapid7’s Chief Research Officer, HD Moore, has posted some notes on the Juniper ScreenOS incident. After analyzing the patches released by Juniper, Moore’s team discovered the backdoor password that enables the Telnet and SSH bypass. In a blog post on Rapid7’s community portal, Moore said that a quick Shodan search identified 26,000…
ID: Police: Hundreds of local victims of credit card skimming scam
Scott Malone reports: There are hundreds of victims of a major credit card fraud case, and dozens of them might not even realize it. Detectives with the Post Falls Police Department told KHQ Saturday that they now believe there are at least 800 local people who have had their credit card information stolen through skimmers inside…
Credit card info of donors to pro-Muslim or anti-islamophobia organizations leaked
Update: Post-publication, the Virtue Center web site was taken offline and has not returned as of December 23. An undated entry on another site lists Shakil Islam and Faizan Sattar as “former employers” of VC. At the time of publication, however, they were listed on VC’s web site as part of their team. Follow-up e-mail…
AU: Builder Mark Parry was hacked with ransomware attack
Rod Chester reports: Builder Mark Parry is one of the countless Australians who have experienced the harsh fallout of a ransom demand from an anonymous hacker. The owner of Melbourne-based Hebden Kitchens and Bathrooms logged on to his office computer and was faced with a hard disk full of encrypted files and a criminal demand. All…