Category: Cyber Security News

  • Blog
  • Category: Cyber Security News
Credit Card Company Exposed 9 million Transaction Records Online
Credit Card Company Exposed 9 million Transaction Records Online
Credit Card Company Exposed 9 million Transaction Records Online
Credit Card Company Exposed 9 million Transaction Records Online

Credit Card Company Exposed 9 million Transaction Records Online

Security researcher Jeremiah Fowler along with Website Planet’s research team discovered a wide-open and latently exposed database that contained more than 9.1 million records, as well as Personally Identifiable Information (PII). This data contained confidential information, such as merchant names, payee names, partial credit card numbers, expiration date, email address, security or access tokens, etc.

Cybersecurity experts analyzed destructive Azov ransomware 

Security experts have published the innovative mechanism behind the spread of a new scareware program called Azov Ransomware, which is designed to make data inaccessible and causes “unalloyed damage” to compromised software. Distributed through another malware loader known as SmokeLoader, the malware has been described as an effective, fast, and unrecoverable data wiper, by Israeli

New technique discovered to bypass web application firewalls (WAF) of varying vendors 

The experts of Industrial and Internet of Things cybersecurity company Claroty developed a generic way of bypassing the firewall applications of various companies.   Claroty’s researchers performed a study for the purpose of finding a hole in Cambium Networks’ wireless device management system. They discovered a SQL injection vulnerability that could result in unauthorized access to

Cisco IP Phone is vulnerable to attackers’ unauthenticated remote code

Cisco has discovered a high-severity issue affecting its IP Phone 7800 and 8800 Series, tracked as CVE-2022-20968 (excluding Cisco Wireless IP Phones 8821). An unauthenticated, adjacent attacker might exploit the flaw to cause program flow overruns on a large affected device, which might result in remote code execution (RCE) and denial of service (DoS) attacks.