Ransomware as a Service (RaaS) has become one of the most prolific models of cybercriminal operation, although this does not mean that there are no disputes between the various threat actors involved in the process. A recent security report notes that an angry Conti ransomware affiliate decided to leak manuals and other technical details prepared […]
A recent report states that Justdial, one of the largest service companies in India, has suffered a data breach that led to the exposure of confidential records of more than 100 million users. According to researcher Rajshekhar Rajaharia, the information remained exposed since March 2020. Starting as a local phone-based directory, Justdial offers bill services, […]
Confidential information of more than half a million patients at Wolf Eye Clinic, an eye clinic in Iowa, USA would have been compromised due to a devastating ransomware attack. The company confirmed that no ransom was paid to the hackers. The compromised records include confidential details like full names, email addresses, Social Security numbers, birth […]
The hacker behind the data leak claims they downloaded the Raychat app data when the company exposed its entire database online between December 2020 to January 2021. Raychat app (Raychat.io), a popular Iranian social and business messaging platform has apparently suffered a data breach in which personal data and records of over 150 million users […]
The latest leak by the Babuk ransomware gang contains 26GB worth of records. Last month, Hackread.com reported that the District of Columbia’s Metropolitan Police Department (MPD) had become a victim of a ransomware attack. The government agency revealed that the Babuk Locker gang stole nearly 250 GB of unencrypted files from the department’s networks. On the […]
The cybercrime syndicate behind Babuk ransomware has leaked more personal files belonging to the Metropolitan Police Department (MPD) after negotiations with the DC Police broke down, warning that they intend to publish all data if their ransom demands are not met. “The negotiations reached a dead end, the amount we were offered does not suit […]
In an email leaked to the cybersecurity community, Facebook admits anticipating more massive data leak incidents. This message was addressed to Facebook’s public relations teams in Europe, Africa and the Middle East, although it was leaked to the Belgian press on April 8 by mistake. For many users this is an act of cynicism, because […]
Scanning APK file for URIs, endpoints & secrets. Installation To install apkLeaks, simply: $ git clone https://github.com/dwisiswant0/apkleaks $ cd apkleaks/ $ pip install -r requirements.txt Or download at release tab. Dependencies This package works in Python2 (not Python3). Install global packages: Linux $ sudo apt-get install libssl-dev swig -y OSX $ brew install openssl […]
Security researchers from WizCase uncovered a massive data leak in the Microsoft Bing mobile app that exposes search queries, device details, and GPS coordinates. Ata Hakcil uncovered the massive leak in the server owned by Microsoft for logging data related to its Bing mobile app. Bing app used to perform millions of searches per day […]
Your private data is being traded and sold all over the internet as we speak. Tons of leaks come out on a daily basis which can make you feel powerless. The majority of user-passwords and other sensitive information have been posted somewhere on the internet/darknet for any prying eyes to see, whether you like it […]
Since the launch of the Redmi K20 series, back in July, the smartphones have disrupted the entire market by providing flagship features at a ridiculously lower price. Therefore, it’s no surprise that Redmi fans are desperate to witness the next version of it, the Redmi K30, slated for 2020. Redmi K30 Latest Leaks Last week […]
Scavenger Just the code of my OSINT bot searching for sensitive data leaks on different paste sites. Search terms: credentials private RSA keys WordPress configuration files MySQL connect strings onion links links to files… The post Scavenger: searching for credential leaks on different paste sites appeared first on Penetration Testing.
IT security audit researchers at security firm Safety Detectives have revealed a massive data leak (up to 2 terabytes) hosted on an Elastic Server. The flaw affects around 3.5 million users of websites Pouringpounds.com and Cashkaro.com in India and the United Kingdom, whose data is already on sale on dark web. Both websites are operated […]
Another day, another privacy disaster hits Facebook users. To add insult to the already enraged privacy advocates, Facebook has yet again disappointed its user base. It has been revealed that 419 million phone numbers belonging to Facebook users have been exposed due to a breach in an online unsecured database. The database contained 133 million records […]
An exposed server on the web was found leaking the data of hundreds of millions of Facebook users. First reported by TechCrunch, the exposed server was discovered by security researcher Sanyam Jain who said that the database contained phone numbers of some celebrities as well. Along with contact numbers, the database also contained Facebook IDs […]
With data breaches becoming more common, a new one has been found taking place on a porn website, leaking data from over a million users. According to a research report by vpnMentor, pornographic website Luscious leaked 1.195 million users’ data without their knowledge. Luscious Data Breach It is suggested that the adult website allows users […]
AIL is a modular framework to analyse potential information leaks from unstructured data sources like pastes from Pastebin or similar services or unstructured data streams. AIL framework is flexible and can be extended to support other functionalities to mine or process sensitive information (e.g. data leak prevention). Features Modular architecture to handle streams of unstructured […]
A misconfiguration vulnerability with JIRA servers leaks internal user and project data of hundreds and thousands of companies which were using JIRA. The JIRA is an Atlassian task tracking systems used by lots of companies for bug tracking and project management. It is used in over 135,000 companies in 122 countries. It is an intended […]
Since Google first tweeted about what the Pixel 4 will look like in real life, it was evident that Google will not stop just there. In fact, it’s a lesson that the tech giant learned from the gigantic Google Pixel 3 leak chaos: ‘leaking’ your own product is probably a good idea. Google Pixel 4 Face […]
The personal information and passport details of more than 2 million Russian citizens, including government employees and members of the country’s political elite, have been exposed through multiple government websites, reported several website security audit firms. Informational Culture activists, a Russian non-profit organization, were responsible for revealing this serious cybersecurity incident. Through the official Information […]
Web application security course specialists have revealed that a large amount of confidential information has been exposed to the public on an undue basis in GitLab; according to the experts, the compromised information includes source code, access credentials and confidential keys for several private projects. One of the compromised implementations has been used by Samsung […]