Author: admin

It’s still unclear whether customer data has been compromised

Brian Krebs is reporting on a vulnerability in Experian’s website:

Identity thieves have been exploiting a glaring security weakness in the website of Experian, one of the big three consumer credit reporting bureaus. Normally, Experian requires that those seeking a copy of their credit report successfully answer several multiple choice questions about their financial history. But until the end of 2022, Experian’s website allowed anyone to bypass these questions and go straight to the consumer’s report. All that was needed was the person’s name, address, birthday and Social Security number.

The group began operations as early as mid-2021, but its activity increased in mid-to-late 2022

Veracode’s 2023 State of Software Security Report is focused on flaw introduction

Customer and employee data accounts for almost half all stolen data while credit cards and password see a decline

The leaked files include some 120,000 files, with specific allegations of child abuse

The attack also affected IT financial industry solutions developer Bankdata

Microsoft’s January Patch Tuesday resolved over 100 CVEs, including an actively exploited zero day

Called “default setup,” the novel capability simplifies starting code scanning on repositories

An attacker could perform RCE on a server verifying a maliciously crafted JWT request