Important: BreachAware does not operate under any other brand name and will never provide unauthorised access to compromised credentials. We ask our users to beware of illegitimate websites imitating BreachAware.

Global News Feed

POPULAR CYBERSECURITY PUBLICATIONS
2020-09-22 17:20:00 UTC
ThreatPost
ThreatPost
Known Citrix Workspace Bug Open to New Attack Vector

Windows MSI files provide an opening for attackers even though the bug was mostly patched in July.

Vulnerabilities Automatic Update Service Citrix Command Line Injection CVE-2020-8207 Installer Malicious Transform Pen Test Partners Privilege Escalation Remote Attack Second Attack Vector Security Vulnerability Windows Msi Workspace
2020-09-22 16:15:00 UTC
ThreatPost
ThreatPost
Microsoft Overhauls Patch Tuesday Security Update Guide

Microsoft announced a new Security Guide to help cybersecurity professionals more quickly untangle relevant bugs in its monthly security bulletins.

Malware Vulnerabilities Web Security Data Views Microsoft Patch Tuesday Revision Security Update Guide
2020-09-22 15:33:00 UTC
HackRead
HackRead
Microsoft Bing server exposed user search queries and location data

By Waqas

Microsoft Bing server logged some horrific search terms including searchers for murder and child abuse content.

This is a post from HackRead.com Read the original post: Microsoft Bing server exposed user search queries and location data

Leaks Security Bing Breach ElasticSearch LEAKS Micorsoft Privacy
2020-09-22 15:14:00 UTC
ThreatPost
ThreatPost
Firefox 81 Release Kills High-Severity Code-Execution Bugs

Mozilla has fixed three high-severity flaws with the release of Firefox 81 and Firefox ESR 78.3.

Vulnerabilities Web Security Buffer Error CVE-2020-15673 CVE-2020-15674 CVE-2020-15675 Firefox Firefox 80 Firefox 81 Firefox ESR 78.3 Memory Safety Mozilla Mozilla Foundation Use-after-free Vulnerability WebGL
2020-09-22 15:14:00 UTC
The Daily Swig
The Daily Swig
Hundreds arrested in Europol-assisted dark web vendor takedown

International sting leads to 179 arrests

2020-09-22 15:10:00 UTC
ThreatPost
ThreatPost
Activision Refutes Claims of 500K-Account Hack

The Call of Duty behemoth said that the reports of widespread hacks are false.

Breach Hacks Web Security 000 500 Account Takeover Accounts Activision Ato Breach Brute Forcing Call Of Duty Denies Gaming Hack Passwords Two Factor Authentication
2020-09-22 14:33:00 UTC
The Daily Swig
The Daily Swig
Coronavirus pandemic supercharges security bug bounty market

Distracted by dispersing their workforce, organizations are increasingly open to crowdsourced cybersecurity

2020-09-22 14:12:00 UTC
ThreatPost
ThreatPost
Google Cloud Buckets Exposed in Rampant Misconfiguration

A too-large percentage of cloud databases containing highly sensitive information are publicly available, an analysis shows.

Breach Cloud Security Most Recent ThreatLists Privacy Amazon S3 Analysis Cloud Buckets Cloud Databases Comparitech Data Breach Elasticsearch Google Cloud Misconfiguration Paul Bischoff Publicly Available
2020-09-22 12:56:00 UTC
The Daily Swig
The Daily Swig
Growing ‘cultural divide’ between DevOps and AppSec workers could lead to less secure software – report

Survey warns that working relationships must improve among developers

2020-09-22 12:21:00 UTC
The Daily Swig
The Daily Swig
Youth unemployment risks fueling Indian cybercrime boom

Many young Indians are turning to the dark side to generate additional income, a new report claims

BreachAware Insight

THE LATEST CURATED INTEL FROM OUR RESEARCH CENTRE

Listen to our podcast, where Andrew, the visionary CEO of BreachAware, sits down with unsung heroes of the cyber security industry. Get ready to uncover the stories and insights of industry trailblazers you might not have heard of before, as they share their experiences, opinions, and insider intel. But beware, it's not all serious talk—expect a healthy dose of humour (and the odd cussing) sprinkled throughout the conversation.

Point of View

OUR TAKE ON TRENDING STORIES
March 2024
By SUE DENIM
TikTok Ban, Discord Bot Community Attack, and Telecom Company's Breach Resurgence.
Ah, the dramatic saga of TikTok in the United States! Picture this: a ban looming over TikTok, akin to a dark cloud threatening to rain on our digital parade. Congress is all up in arms, waving their "think of the children" banners while TikTok nervously checks its watch, wondering if it should start packing its bags for a forced sale. Meanwhile, nobody bats an eye at the plethora of Chinese gadge...

Weekly Summary

SPOTLIGHT, VULNERABILITY CHAT & PRIVACY HEADLINES
29 April 2024
BREACHAWARE HQ

A total of 13 breaches were found and analysed resulting in 4,834,779 leaked accounts containing a total of 21 different data types. The breaches found publicly and freely available included Stealer Log 0452, Redaq, Stealer Log 0453, Kharkov and Stealer Log 0451