moviepass Unprotected MoviePass Server Exposes Tens of Thousands of Card Numbers A critical MoviePass database left without a password exposes over 58,000 customer card numbers, personal credit card details, and mistakenly typed passwords. The company only takes the leaking server offline after TechCrunch contacts executives.
cloudflare Cloudflare Seeks Public Listing With Strong Revenue Growth Cloudflare officially files for an IPO on the New York Stock Exchange under the ticker symbol "NET," showcasing impressive revenue growth despite ongoing net losses. The web infrastructure company also acknowledges political controversies involving extremist clients as a significant business risk.
hacking Hacker Builds Malicious iPhone Cable to Remotely Hijack Computers A security researcher creates a covert Wi-Fi implant hidden inside a standard Apple Lightning cable that allows attackers to remotely control connected computers.
cybersecurity Experts Urge Paper Ballots and Strict Audits to Secure 2020 Elections As hackers at Def Con expose severe vulnerabilities in electronic voting machines, security experts argue that paper ballots and mandatory post-election audits are the best defenses against large-scale election tampering.
intelligence Intelligence Agencies Shift to Rapid Tech Adoption Amid New Data Threats Western intelligence communities are moving from traditional structures to agile, tech-driven operations. They increasingly rely on open-source intelligence while grappling with the security risks of emerging technologies.
student data Teen Researcher Exposes Massive Flaws in Student Data Systems An 18-year-old security researcher uncovers severe vulnerabilities in popular school software, potentially exposing the data of over five million students and teachers.
aws Misconfigured AWS EBS Snapshots Expose Corporate Secrets to the Open Internet New research presented at Def Con reveals that companies inadvertently leave Amazon EBS snapshots public, exposing application keys, source code, and VPN configurations. These misconfigured cloud storage volumes act as digital keys to the kingdom for anyone on the internet.
robocalls Popular Robocall Blocking Apps Caught Sharing User Data Without Consent Security researchers discover that several top robocall-blocking applications secretly transmit personal and device data to third-party analytics firms before users even accept the privacy policies.
apple Apple Expands Bug Bounty Program, Offers Up to $1 Million for Flaws Apple is expanding its bug bounty program to cover macOS, watchOS, tvOS, and iCloud, offering rewards up to $1 million. The company also plans to provide researchers with special iPhones to aid in security testing.
warshipping Hackers Bypass Network Perimeters by Mailing Exploits Direct to Targets IBM security researchers reveal a technique called "warshipping" where attackers build cheap, cellular-connected devices and mail them to targets to infiltrate corporate Wi-Fi networks from the inside.
cybereason Cybereason Secures $200 Million from SoftBank to Expand Cybersecurity Platform Boston-based Cybereason raises $200 million in new funding from SoftBank to scale its machine learning endpoint security platform. The company plans to use the capital to boost global marketing and advance autonomous security research.
8chan Cybersecurity Provider Drops 8chan After El Paso Mass Shooting A cybersecurity firm terminates services for the online forum 8chan, cutting off the website's primary defense against cyberattacks following the deadly El Paso shooting.
poshmark Poshmark Investigates Data Breach Exposing 50 Million User Profiles Online clothing marketplace Poshmark confirms an unauthorized third party accessed user profile details, though financial data remains secure. The company is actively investigating the incident with outside experts.
stockx Sneaker Marketplace StockX Misleads Users Over Suspicious Security Reset StockX forces a widespread customer password reset due to suspicious activity, initially misleading users by claiming it is a routine system update. The billion-dollar company declines to answer questions about potential data compromises.
capital one Capital One Breach Exposes 100 Million Applications A massive Capital One data breach compromises the personal information of over 100 million Americans, prompting experts to urge immediate security precautions.