A Joomla database leak has exposed the personal information, including hashed passwords, of 2,700 individuals registered on the Joomla Resources Directory (JRD). The Joomla Resources Directory allows users to find registered service providers to assist in project management, design, and technical support for Joomla. In a security advisory published by Joomla last week, it was disclosed that the details of 2,700 individuals registered on the Joomla Resources Directory (JRD) service were leaked. READ MORE...
As protests continue to proliferate across the globe in the wake of George Floyd's death, the Minnesota Police Department is making news for something else: A supposed hack, perpetrated at the hands of the Anonymous hacktivist group. According to Troy Hunt at Have I Been Pwned (HIBP), the group of allegedly ill-gotten email addresses and passwords has been circulating in multiple forums, with most of them attributing the credential leak to Anonymous. READ MORE...
In March, some 7,600 dark-web sites - about a third of all dark-web portals - were obliterated in an attack on Daniel's Hosting (DH), the most popular provider of .onion free hosting services. Its portal was breached, its database was stolen, and its servers were wiped. That was punch one. Punch two landed on Sunday, when a hacker going by the name KingNull or @null uploaded a copy of DH's stolen database to a file-hosting portal and then gave ZDNet a heads-up about the leak. READ MORE...
Sign in with Apple-a privacy-enhancing tool that lets users log in to third-party apps without revealing their email addresses-just fixed a bug that made it possible for attackers to gain unauthorized access to those same accounts. "In the month of April, I found a zero-day in Sign in with Apple that affected third-party applications which were using it and didn't implement their own additional security measures," app developer Bhavuk Jain wrote on Sunday. READ MORE...
Research details vulnerabilities in the Zephyr Real Time Operating Systems and MCUboot, both used in IoT devices and sensors. Newly discovered vulnerabilities in Internet of Things (IoT) components could expose a range of connected devices to denial-of-service (DoS) attacks and privilege escalation, a researcher with NCC Group reports. READ MORE...
A code injection vulnerability (CVE-2020-3956) affecting VMware vCloud Director could be exploited to take over the infrastructure of cloud services, Citadelo researchers have discovered. VMware Cloud Director (formerly known as vCloud Director) is a cloud service delivery platform used by public and private cloud providers to operate and manage cloud infrastructure. READ MORE...