Articles tagged with Data Leak

Exposed MongoDB Server Exposes Details of Cryptocurrency Users

Security researchers have stumbled across a MongoDB database containing the personal details of over 25,000 users who invested in or received Bezop (BEZ) cryptocurrency.
- Catalin Cimpanu
- April 26, 2018
- 01:40 PM
- 0
Data Firm Left Profiles of 48 Million Users on a Publicly Accessible AWS Server

LocalBlox, a company that scrapes data from public web profiles, has left the details of over 48 million users on a publicly accessible Amazon Web Services (AWS) S3 bucket, according to an UpGuard security researcher who discovered the data on February 28, this year.
- Catalin Cimpanu
- April 19, 2018
- 04:18 AM
- 0
Federal Agencies Hit With More Data Breaches Than Other Sectors - 330 Million at Risk

According to Thales e-Security's 2018 Data Threat Report—Federal Government Edition, US federal agencies are experiencing more data breaches than other sectors.
- Candice Lanier
- April 17, 2018
- 08:35 AM
- 0
Live Chat Widgets Leak Employee Details From High-Profile Companies

At least two live chat widgets used on hundreds of high-profile sites are leaking the personal details of company employees.
- Catalin Cimpanu
- April 03, 2018
- 09:02 PM
- 0
Some Chrome VPN Extensions Leak DNS Queries

Browser VPN extensions for Google Chrome may be leaking DNS queries to external observers thanks to a Chrome feature called DNS prefetching.
- Catalin Cimpanu
- April 03, 2018
- 10:30 AM
- 0
Misconfigured Django Apps Are Exposing Secret API Keys, Database Passwords

Security researchers have begun stumbling upon misconfigured Django applications that are exposing sensitive information such as API keys, server passwords, or AWS access tokens.
- Catalin Cimpanu
- March 30, 2018
- 07:10 PM
- 0
Analytics Firm Admits It Collected Password Data by Accident

Mixpanel, a web and mobile analytics provider, has notified customers last week via email that it accidentally collected data entered in password fields due to a bug introduced in its SDK.
- Catalin Cimpanu
- February 06, 2018
- 12:10 AM
- 0
Hacker Might Have Stolen the Healthcare Data for Half of Norway's Population

A hacker or hacker group might have stolen healthcare data for more than half of Norway's population, according to reports in local press.
- Catalin Cimpanu
- January 18, 2018
- 03:44 PM
- 1
Adult VR App Leaked Personal Details for a Week Before a Patch Was Deployed

Details about two vulnerabilities in an adult-themed virtual reality (VR) application were available to the general public for five days before the vendor intervened and patched the security holes.
- Catalin Cimpanu
- January 18, 2018
- 02:00 AM
- 0
Department of Homeland Security Suffers Data Breach

The US Department of Homeland Security (DHS) announced it suffered a data breach last year, during which data for over 247,000 DHS employees and individuals under DHS investigations was taken from a secure DHS database.
- Catalin Cimpanu
- January 04, 2018
- 02:27 PM
- 2
"Trackmageddon" Vulnerabilities Discovered in (GPS) Location Tracking Services

Two security researchers —Vangelis Stykas and Michael Gruhn— have published a report on a series of vulnerabilities that they named "Trackmageddon" that affect several GPS and location tracking services.
- Catalin Cimpanu
- January 02, 2018
- 07:15 PM
- 0
Flaws in Sonos and Bose Smart Speakers Let Hackers Play Pranks on Users

Similar vulnerabilities affect some Sonos and Bose smart speakers that allow hackers to take over devices, collect data on users, and even make devices to play desired audio tracks.
- Catalin Cimpanu
- December 27, 2017
- 05:18 PM
- 0
Unsecured Amazon S3 Bucket Exposes Details on 123 Million American Households

US data analytics provider Alteryx has left an Amazon S3 storage bucket exposed online, leaking the sensitive details of over 123 million US households in the process.
- Catalin Cimpanu
- December 20, 2017
- 10:50 AM
- 1
California Voter Database Compromised in MongoDB Incident

The details of over 19 million California voters were left exposed online in an unsecured MongoDB database and were later held for ransom, according to researchers from the Kromtech Security Center.
- Catalin Cimpanu
- December 15, 2017
- 10:55 AM
- 3
NSA Employee at the Middle of the Kaspersky Saga Admits Taking Files Home

The US Department of Justice (DOJ) has formally charged a former NSA employee for taking classified documents home. The man, Nghia Hoang Pho, 67, of Ellicott City, Maryland, pleaded guilty today, according to court documents released by the DOJ.
- Catalin Cimpanu
- December 02, 2017
- 04:06 AM
- 3
Thousands of Serial-To-Ethernet Devices Leak Telnet Passwords

A security researcher has identified thousands of Serial-to-Ethernet devices connected online that leak Telnet passwords that could be used to attack the equipment that is placed behind them.
- Catalin Cimpanu
- December 01, 2017
- 11:02 AM
- 0
Top Secret US Army and NSA Files Left Exposed Online on Amazon S3 Server

Ten days after an Amazon S3 server exposed data from the US Army's CENTCOM and PACOM divisions, security researchers have identified another S3 server instance that leaked files from INSCOM, a joint US Army and NSA agency tasked with conducting intelligence, security, and information operations.
- Catalin Cimpanu
- November 28, 2017
- 01:27 PM
- 2
US Military Database Holding Web-Monitoring Data Left Exposed Online

A security researcher revealed today he found three misconfigured Amazon S3 servers belonging to the US Department of Defense (DOD) containing 1.8 billion social media and forum posts made by users from all over the world, including many by Americans.
- Catalin Cimpanu
- November 17, 2017
- 06:40 PM
- 4
Dark Web Shops Are Leaking IPs Left and Right

The takedown of three major Dark Web markets by law enforcement officials over the summer has driven many vendors of illegal products to set up their own shops that, in many cases, are not properly configured and are leaking the underlying server's IP address.
- Catalin Cimpanu
- November 16, 2017
- 12:00 PM
- 4
Amazon Updates AWS Dashboard to Warn Admins When They're Exposing S3 Buckets

Following a long string of data leaks caused by misconfigured S3 servers, Amazon has decided to add a visible warning to the AWS backend dashboard panel that will let server admins know if one of their buckets (storage environments) is publicly accessible and exposing potentially sensitive data on the Internet.
- Catalin Cimpanu
- November 08, 2017
- 01:00 AM
- 0