Chris Vickery on the Marriott Breach and a Rash of Recent High-Profile Hacks
In this Newsmaker Interview, ‘breach hunter’ Chris Vickery explores a recent spate of breaches from Marriott, USPS and Dell EMC.
Elasticsearch
FitMetrix Exposes Millions of Customer Details, Accessed by Criminals
Gym customer data, including contact information, birth dates and height/weight data, opens the door to convincing follow-on social-engineering attacks.
NFL Players, Agents Targeted in Database Extortion Attempt
Researchers uncover a misconfigured Elasticsearch database, exposing data tied to NFL players and their agents.
Over 4,000 insecure Elasticsearch servers have been hosting the point-of-sale malware Alina and JackPoS.
More than 1,000 mobile apps are leaking personal information via unsecured backend platforms such as MongoDB, MySQL and others.
A sudden wave of attacks against insecure databases resulting in ransom demands points to wave of data hijacking attacks.
Insecure Hadoop and CouchDB installations are the latest attack targets of cybercriminals who are hijacking and deleting stolen data.
Hackers are exploiting a remote code execution vulnerability in Elasticsearch, according to one researcher who published logs from a honeypot he built showing 8,000 attempts to exploit the bug.
