MGM Resorts 2019 data breach is much larger than initially reported of 10.6 million guests. It is believed to have impacted more than 142 million hotel guests. The hacker is selling the information on the dark web for a price of just over $2,900. https://twitter.com/FinancialXpress/status/1282977716459855873
ISBuzz Team
This morning, it was announced that that a hacker has breached the backend servers belonging to DataViper, a data leak monitoring service managed by Vinny Troia, the security researcher behind Night Lion Security, a US-based cyber-security firm. The hacker, who spent three months inside DataViper servers, claims to have stolen more than 8,200 databases that Troia had indexed for the DataViper data leak monitoring service. The exfiltrated databases contain the information of billions of users that was leaked during past security breaches from DataViper’s “data leak detection” service. The hacker, via a link to a dark web portal, shared the…
As reported by The Guardian, one of Catalonia’s most senior politicians has been warned his mobile phone was targeted using spyware its makers say is only sold to governments to track criminals and terrorists. A joint investigation by the Guardian and El País has revealed that the speaker of the Catalan regional parliament, Roger Torrent and at least two other pro-independence supporters were told they were targeted last year in what experts said was a “possible case of domestic political espionage” in Europe. According to a US lawsuit, the spyware exploited a previous vulnerability in WhatsApp software that would have given the operator potential access…
The cybersecurity experts commented below on the news that Hacker “NightLion” steals 8,200+ databases from a cybersecurity firm.
ESET researchers have discovered a new operation within a long-running cyber-espionage campaign in the Middle East, apparently with links to the threat actor group known as Gaza Hackers, or Molerats. Instrumental in the operation is an Android app, Welcome Chat, which serves as spyware while also delivering the promised chatting functionality. The malicious website promoting and distributing the app claims to offer a secure chat platform that is available on the Google Play store. Both those claims are false; the claim of being “secure” couldn’t be further from the truth, according to ESET researchers. “In addition to Welcome Chat being…
SAP has patched a critical vulnerability impacting the LM Configuration Wizard component in NetWeaver Application Server (AS) Java platform, which would allow an unauthenticated attacker to take control of SAP applications.
Wednesday 15 July marks 10 years since the Stuxnet virus was revealed, the malicious worm that infected 100,000 computers.
Researchers at CloudSEK claim to have found evidence of the sale of a database containing 3.4 million users of online art and antique auction website. https://twitter.com/InfoSec_b/status/1282988830564347904
Hacker claims to have breached Night Lion security firms in act of revenge and stolen more than 8,200 databases. https://twitter.com/AcademiicArista/status/1282601548124549120
It has been reported that Spotify has stopped working properly, according to users. A strange bug appears to make the iPhone version of the app crash as soon as it is opened. Spotify does not appear to have pushed out a new update to the app. Instead, the issue appears to be a consequence of problems with Facebook’s developers tools. The same issue has led to problems at a wide variety of apps. There appears to be no simple fix for the issue. Deleting and re-installing the app, for instance, does not solve the problem.