@Cyber_War_News contributed to this post. vBulletin.com is back online after a breach first reported on DataBreaches.net. In new developments, vBulletin forced a password reset and issued a patch while the 0day used to hack them was put for sale. Password Reset An announcement in their forum last night acknowledged the breach and explains: vBulletin.com Password Reset…
Category: Of Note
The Hacking Team Defectors
Lorenzo Franceschi-Bichhierai has a good piece about members of the Hacking Team who left, and what happened afterwards. Here’s a teaser from it: His name is Alberto Pelliccione. Until last year, he was the man responsible for developing Hacking Team’s Android spyware, and one of the employees who had worked on the company’s marquee product,…
vBulletin, Foxit Software forums hacked by Coldzer0; hundreds of thousands of users’ info stolen
This post was co-authored with @Cyber_War_News. Some days we scratch our heads at the folks who proudly claim hacks and then give law enforcement enough evidence to go after them. And then this happened: #vBulletin 5.x.x hacked by Coldzer0 today. Licences & database dumped, shell on server. vBulletin denied. #0day #security #zeroday — Terry Tran (@terryjunx) November…
Stanford researchers identify potential security hole in genomic data-sharing network
Hackers with access to a person’s genome might find out if that genome is in an international network of disease databases. Sharing genomic information among researchers is critical to the advance of biomedical research. Yet genomic data contains identifiable information and, in the wrong hands, poses a risk to individual privacy. If someone had access…
Bank of England and US authorities to simulate cyber-attack
Nothing could possibly go wrong, right? Tim Wallace reports: The biggest banks in the UK and US will face a simulated major cyber-attack from the Bank of England and its US counterparts this month, as officials probe the industry’s ability to withstand assaults from hackers looking to steal data or cripple the financial sector. The…
Our veterans deserve better infosecurity of their information
When News3 in Madison, Wisconsin started digging into a breach involving 637 veterans’ Social Security numbers, what they found should have everyone asking the VA some hard questions. Adam Schrager reports: The Social Security numbers of Wisconsin veterans are being sent via email without encryption despite numerous federal laws and U.S. Department of Veterans Affairs…