Important: BreachAware does not operate under any other brand name and will never provide unauthorised access to compromised credentials. We ask our users to beware of illegitimate websites imitating BreachAware.

Global News Feed

POPULAR CYBERSECURITY PUBLICATIONS
2019-12-19 10:30:00 UTC
The Daily Swig
The Daily Swig
Telerik UI for ASP.NET AJAX vulnerable to remote code execution attacks

Popular web application UI suite is subject to a deserialization security flaw – but attackers must already possess encryption keys

2019-12-19 10:30:00 UTC
The Daily Swig
The Daily Swig
Telerik UI for ASP.NET AJAX vulnerable to RCE attacks

Popular web application UI suite is subject to a deserialization security flaw – but attackers must already possess encryption keys

2019-12-18 19:43:00 UTC
ThreatPost
ThreatPost
Why Cloud, Collaboration Breed Insider Threats

Many employees don't follow company security policies when they use handy productivity tools.

InfoSec Insider Vulnerabilities Cloud Code42 Collaboration Company Security Policies Infosec Insider Insider Threats Rob Juncker
2019-12-18 19:20:00 UTC
ThreatPost
ThreatPost
Ring Plagued by Security Issues, Flood of Hacks

A Motherboard report found Ring lacking basic security measures for preventing hackers from hijacking the devices.

IoT Privacy Amazon Hacker Hacks Login Attempts Motherboard Investigation Password Reuse Ring Ring Doorbell Smart Doorbell
2019-12-18 19:14:00 UTC
ThreatPost
ThreatPost
Microsoft Issues Out-of-Band Update for SharePoint Bug

An attacker could exploit CVE-2019-1491 to obtain sensitive information that could be used to mount further attacks.

Bug Bounty Vulnerabilities Bug CVE-2019-1491 December 2019 Information Disclosure Microsoft Out Of Band Patch Patch Tuesday Sharepoint Server
2019-12-18 19:14:00 UTC
ThreatPost
ThreatPost
Microsoft Updates November Security Updates with SharePoint Bug

An attacker could exploit CVE-2019-1491 to obtain sensitive information that could be used to mount further attacks.

Bug Bounty Vulnerabilities Bug CVE-2019-1491 December 2019 Information Disclosure Microsoft Out Of Band Patch Patch Tuesday Sharepoint Server
2019-12-18 19:00:00 UTC
Dark Reading
Dark Reading
5 Security Resolutions to Prevent a Ransomware Attack in 2020

Proactively consider tools to detect anomalous behavior, automatically remediate, and segment threats from moving across the network.

2019-12-18 18:13:00 UTC
ThreatPost
ThreatPost
TP-Link Routers Give Cyberattackers an Open Door to Business Networks

Remote attackers can easily compromise the device and pivot to move laterally through the LAN or WAN.

Bug Bounty IoT Vulnerabilities Business Networks Cyberattackers Internet Of Things Remote Takeover TP-Link Routers Vulnerability
2019-12-18 17:30:00 UTC
The Daily Swig
The Daily Swig
Emoji rendering differences enough to identify devices and browsers

Tell-tale ❤️

2019-12-18 16:50:00 UTC
HackRead
HackRead
System hijacking flaws found in pre-installed Acer & ASUS software

By Sudais

Firstly, Acer’s Quick Access program was found to be vulnerable to DLL hijacking through which attackers could...

This is a post from HackRead.com Read the original post: System hijacking flaws found in pre-installed Acer & ASUS software

Security Acer ASUS Hijacking Security Vulnerability Windows

BreachAware Insight

THE LATEST CURATED INTEL FROM OUR RESEARCH CENTRE
BreachAware Podcast

Listen to our podcast, where Andrew, the visionary CEO of BreachAware, sits down with unsung heroes of the cyber security industry. Get ready to uncover the stories and insights of industry trailblazers you might not have heard of before, as they share their experiences, opinions, and insider intel. But beware, it's not all serious talk—expect a healthy dose of humour (and the odd cussing) sprinkled throughout the conversation.

Amazon Music Apple Podcasts Spotify Podcast BreachAware YouTube Channel

Point of View

OUR TAKE ON TRENDING STORIES
June 2024
By SUE DENIM
Dark-Web Forum Collapse, Lockbit’s Misdirection, and Europol’s Botnet Crackdown.
In the ever-dramatic world of cybercrime, a small dark-web forum has found itself in a downward spiral, now up for sale. As covered in our weekly insight, the forum was breached by an unknown threat actor, prompting the admin to panic and shut it down. This came just days after the admin had taken to Telegram to badmouth the threat actor community and insult Shiny Hunters, the admin of Breach Foru...

Weekly Summary

SPOTLIGHT, VULNERABILITY CHAT & PRIVACY HEADLINES
22 July 2024
BREACHAWARE HQ

A total of 9 breaches were found and analysed resulting in 2,948,750 leaked accounts containing a total of 14 different data types. The breaches found publicly and freely available included Avito, Lulu Hypermarket, The Cellula, Boutique Curly and NATO Wiki