Security News > 2018 > December

Jared, Kay Jewelers Parent Fixes Data Leak
2018-12-03 17:25

The parent firm of bling retailers Jared and Kay Jewelers has fixed a bug in the Web sites of both companies that exposed the order information for all of their online customers.

CyberSaint Security enhances its CyberStrong Platform
2018-12-03 17:08

CyberSaint Security released new product enhancements to the company’s CyberStrong integrated risk management software platform that allows CISOs and executive management to align on...

U.S. Military Members Catfished and Hooked for Thousands of Dollars
2018-12-03 17:06

Prisoners in South Carolina posed convincingly as beautiful women on social media platforms.

5 major data breach predictions for 2019
2018-12-03 16:49

Biometrics and gaming are just a couple of the new cyberattack vectors professionals can expect in 2019. Here is what else to look out for.

Schumer Says Marriott Should Pay to Replace Hacked Passports
2018-12-03 15:51

Sen. Charles Schumer says Marriott hotel officials should pay for new passports for customers whose passport numbers were hacked as part of a massive data breach. read more

Lenovo Ordered to Pay $7.3M in Superfish Fiasco
2018-12-03 15:50

The laptop giant will settle a 32-state class-action lawsuit stemming from pre-installing vulnerable ad-targeting software.

iOS Fitness Apps Robbing Money From Apple Victims
2018-12-03 15:42

The two apps, “Fitness Balance App” and “Calories Tracker app,” were tricking users into payments of $120.

YouTuber PewDiePie Promoted Via 50K Hacked Printers
2018-12-03 14:53

The incident sheds light on just how insecure printers are.

Lenovo Pays $7.3 Million to Settle Superfish Adware Lawsuit
2018-12-03 14:43

Lenovo has agreed to pay $7.3 million to settle a consumer class action lawsuit related to the Superfish adware scandal from 2015. read more

Vulnerability discovered in safety controller configuration software
2018-12-03 14:43

Gjoko Krstic, an Applied Risk researcher, has discovered a vulnerability in Pilz PNOZmulti Configurator software that allows a local attacker to read sensitive data in clear-text. The software is...