Ladders, SkyMed Leak Employment, Medical Data for Millions
One of the misconfigured Elasticsearch databases showed evidence of a ransomware attack.
Elasticsearch
Chris Vickery on the Marriott Breach and a Rash of Recent High-Profile Hacks
In this Newsmaker Interview, ‘breach hunter’ Chris Vickery explores a recent spate of breaches from Marriott, USPS and Dell EMC.
FitMetrix Exposes Millions of Customer Details, Accessed by Criminals
Gym customer data, including contact information, birth dates and height/weight data, opens the door to convincing follow-on social-engineering attacks.
Researchers uncover a misconfigured Elasticsearch database, exposing data tied to NFL players and their agents.
Over 4,000 insecure Elasticsearch servers have been hosting the point-of-sale malware Alina and JackPoS.
More than 1,000 mobile apps are leaking personal information via unsecured backend platforms such as MongoDB, MySQL and others.
A sudden wave of attacks against insecure databases resulting in ransom demands points to wave of data hijacking attacks.
Insecure Hadoop and CouchDB installations are the latest attack targets of cybercriminals who are hijacking and deleting stolen data.
Hackers are exploiting a remote code execution vulnerability in Elasticsearch, according to one researcher who published logs from a honeypot he built showing 8,000 attempts to exploit the bug.
InfoSec Insider
-
Cyber-Risk Business Cases: Using Economic Impact to Justify TIG Investment
-
Rethinking Responsibilities and Remedies in Social-Engineering Attacks
-
Insider Threats Are Rising – But They Shouldn’t Be
-
Gamification Can Transform Company Cybersecurity Culture
-
Defense Takeaways from Three Adversary Playbooks