FitMetrix Exposes Millions of Customer Details, Accessed by Criminals
Gym customer data, including contact information, birth dates and height/weight data, opens the door to convincing follow-on social-engineering attacks.
Elasticsearch
NFL Players, Agents Targeted in Database Extortion Attempt
Researchers uncover a misconfigured Elasticsearch database, exposing data tied to NFL players and their agents.
Thousands of Elasticsearch Servers Hijacked to Host PoS Malware
Over 4,000 insecure Elasticsearch servers have been hosting the point-of-sale malware Alina and JackPoS.
More than 1,000 mobile apps are leaking personal information via unsecured backend platforms such as MongoDB, MySQL and others.
A sudden wave of attacks against insecure databases resulting in ransom demands points to wave of data hijacking attacks.
Insecure Hadoop and CouchDB installations are the latest attack targets of cybercriminals who are hijacking and deleting stolen data.
Hackers are exploiting a remote code execution vulnerability in Elasticsearch, according to one researcher who published logs from a honeypot he built showing 8,000 attempts to exploit the bug.
Editor's Picks
-
Podcast: IoT Firms Face a ‘Tidal Wave’ of Lawsuits, Attorney Explains
-
Emotet Campaign Ramps Up with Mass Email Harvesting Module
-
U.S. Chip Cards Are Being Compromised in the Millions
-
New Boom in Facial Recognition Tech Prompts Privacy Alarms
-
Lawsuits Aim Billions in Fines at Equifax and Ad-Targeting Companies