article thumbnail

Kaseya Left Customer Portal Vulnerable to 2015 Flaw in its Own Software

Krebs on Security

Also on July 3, security incident response firm Mandiant notified Kaseya that their billing and customer support site — portal.kaseya.net — was vulnerable to CVE-2015-2862 , a “directory traversal” vulnerability in Kaseya VSA that allows remote users to read any files on the server using nothing more than a Web browser.

IT 326
article thumbnail

A Retrospective on the 2015 Ashley Madison Breach

Krebs on Security

As first reported by KrebsOnSecurity on July 19, 2015 , a group calling itself the “ Impact Team ” released data sampled from millions of users, as well as maps of internal company servers, employee network account information, company bank details and salary information. 18, 2015, the Impact Team posted a “Time’s up!”

Sales 59
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Lawmakers Demand Details on 2015 Juniper Data Incident

Data Breach Today

Bipartisan Group Wants Company Findings on NetScreen Backdoor Investigation A bipartisan group of lawmakers sent a letter to Juniper Networks seeking a more detailed explanation into a 2015 incident when an NSA-created algorithm - that may have included a backdoor - appeared in a company product that would have allowed VPN traffic to be decrypted.

227
227
article thumbnail

Bill Looks to Close Federal Cybersecurity Loopholes

Data Breach Today

have introduced a bill designed to patch loopholes in the Federal Cybersecurity Enhancement Act of 2015 that they say allow federal agencies to easily avoid implementing required cybersecurity procedures. Lawmakers Want to Restrict Agencies From Postponing Security Measures Sen. Ron Wyden, D-Ore., Lauren Underwood, D-Ill.,

article thumbnail

German Parliament Sustains Another Attack

Data Breach Today

This is second such incident, following the 2015 parliament hack. Members of Parliament Targeted by Spear Phishing, German Media Reports Several members of the German parliament, The Bundestag, and political activists in the country were targeted using a spear-phishing campaign, German newsmagazine der Spiegel reported Friday.

Phishing 346
article thumbnail

New Charges Derail COVID Release for Hacker Who Aided ISIS

Krebs on Security

military and government employees and giving it to an Islamic State hacker group in 2015 has been charged once again with fraud and identity theft. In December 2015, Ferizi was apprehended in Malaysia and extradited to the United States. A hacker serving a 20-year sentence for stealing personal data on 1,300 U.S.

Military 343
article thumbnail

Data-Wiping Attacks Hit Outdated Western Digital Devices

Data Breach Today

Manufacturer Stopped Supporting Targeted Network-Attached Storage Devices in 2015 Owners of Western Digital My Book Live devices have seen their data remotely wiped by attackers targeting a flaw first detailed in 2019.