If you read my post about the hack involving three Canadian chapters of Crime Stoppers, or if you follow me on Twitter (@pogowasright), you know that I’ve had a frustrating time trying to alert those chapters that they’ve been hacked and need to secure their data better. In the interim, as I browsed the pastes of the hacked data (which…
Category: Miscellaneous
Personal information of 50 South Korean nuclear experts leaked online
The personal information of more than 50 researchers at the Korea Atomic Energy Research Institute were leaked online. The information, which includes their names and residential registration numbers, had been contained in research reports that were submitted to the IAEA between 1994 and 2012. An official at KAERI said, “We have monitored five cases of personal information leaks…
Here’s a tip for some Crime Stoppers in Canada: you’ve been hacked (UPDATED)
April 14: See update and possible correction at the bottom of this post concerning the storage and encryption of tips. TeaMp0isoN claims that one of the sites they recently “audited” was the web site of Waterloo Crime Stoppers. In a zine about what they describe as a 0day SQLi attack, TeaMp0isoN writes that they found an unprotected…
Have you googled your site to see if you’ve been hacked?
It’s 2015, and too many entities still don’t seem to know to do Google searches or Pastebin searches on themselves to find out if they’ve been hacked or their data dumped somewhere. There’s no way this blog can report on them all or even alert them all, but one of today’s examples is WAYEB, the European Association…
Change.org springs a leak, exposes private e-mail addresses [updated]
Earlier this week, Dan Goodin reported: Online petitions service Change.org has a website bug that’s disclosing e-mail addresses that presumably belong to current or former subscribers. Search results suggest the number could be thousands, but a Change.org official said it was about 100. The disclosure bug was active at the time this post was being…
FBI: St. Louis County police union hacker had gun, made threats
Robert Patrick reports: A local man accused of launching an attack that disabled a St. Louis County police union website had a gun when arrested and made several threats about shooting law enforcement, an FBI agent said Thursday. FBI agents arrested Justin E. Payne, 32, Tuesday on a single misdemeanor charge of unauthorized damage to…