Hacking News

Many organizations are still having difficulties protecting their systems against the most common infiltration, exfiltration and lateral movement methods used by attackers, according to the latest Hacker’s Playbook report from SafeBreach. The company provides a platform designed to test an organization’s defenses by continuously simulating attacks and breaches. Read more

The National Hispanic Media Coalition (NHMC) was able to take the text of net neutrality charges from the FCC via a public accounts request but says it has not been able to persuade the FCC to carry them in the repeal docket. “It appears to me that the committee is going to great lengths to

The researchers demanded data left visible entered names, phone numbers, locations and Google queries. The chief of the Israeli company back the app confirmed the breach but said most of the data was not sensitive. Bob Diachenko, from the Kromtech Security Centre, part of contract company Mackeeper, said the number of data required by the

Google’s December security bulletin for Pixel and Nexus smartphones lists 42 vulnerabilities that are to be patched in an update. “All supported Google devices will receive an update to the 2017-12-05 patch level. We encourage all customers to accept these updates to their devices,” Google said. Read more

Security researchers from Kromtech Security Center have discovered a huge amount of personal data belonging to 31 million users of the popular smartphone virtual keyboard, Ai.type, has published online after the developer failed to correctly secure the application’s database. Read more

A Michigan young hacker hacked into the government network of Washtenaw County Jail and changing the Washtenaw County Jail records, with the purpose to help a friend get freed early from jail. The man, Konrads Voits, 27, of Ann Arbor, Michigan, was caught earlier this year after an FBI investigation. Read more

Another week, another open database left online, but this latest case has shown not only sloppy security but also how much data you’re giving up with some apps. On Tuesday security shop Kromtech released details on a MongoDB database it found unsecured online containing 577GB of data collected by predictive keyboard app AI.type from its

Researchers have developed a proof of concept attack that could impact the millions of users of integrated development environments such as Intellij, Eclipse and Android Studio. Attacks can also be carried out against servers hosting development environments in the cloud. The attack vector was identified by the Check Point Research Team, which on Tuesday released

The Bitcoin industry is now one of the top 10 most-targeted industries for DDoS campaigns. Price manipulation could be one goal, Imperva says. The massive surge in Bitcoin prices in recent months suddenly has made online cryptocurrency exchanges and services popular targets for distributed denial-of-service (DDoS) attacks. Read more

Stolen-creds-for-sale site Leakbase has gone dark and started redirecting to Troy Hunt’s HaveIBeenPwned. Since it’s published only three tweets relating to the shutdown, Leakbase left plenty of room for speculation about the reason for its disappearance. Read more