Vastaamo psychotherapy data breach sees the most vulnerable victims extorted

Malwarebytes Labs-- “Hell is too nice a place for these people.” Never have we seen outrage about a cybercrime at such a level. The outrage is aimed at cybercriminals behind the data breach that occurred at Finnish psychotherapy practice Vastaamo. Vastaamo, which has treated some 40,000 patients, is a subcontractor to several major public-sector hospital … Continue reading Vastaamo psychotherapy data breach sees the most vulnerable victims extorted

Announcing the Winners of Pentester Lab Pro Subscription Giveaway — October 2020

InfoSec Write-ups - Medium-- Announcing the Winners of Pentester Lab Pro Subscription Giveaway — October 2020And an exciting new contest running through all of November 2020Pentester LabHello folks!What a month it has been. Concluding this awesomeness, we have the three winners of the contest we organised in collaboration with PentesterLab.Aaaaaaand the winners are (drumroll):goswamiijaya for — Server-Side Request Forgery — SSRF: Exploitation Technique … Continue reading Announcing the Winners of Pentester Lab Pro Subscription Giveaway — October 2020

Identifying & Escalating HTTP Host Header Injection attacks

InfoSec Write-ups - Medium-- The purpose of the HTTP Host header is to help identify which back-end component the client wants to communicate with. Several misconfigurations and flawed business logic can expose websites to a variety of attacks via the HTTP Host header. Before diving in, let’s understand some basic terminology.What is an HTTP Header?HTTP headers … Continue reading Identifying & Escalating HTTP Host Header Injection attacks

California’s Prop 24 splits data privacy supporters

Malwarebytes Labs-- California’s data privacy house is divided. On the Golden State’s November ballot this year is the question as to whether to amend California’s barely-two-year-old data privacy law, the California Consumer Privacy Act. Far from the first attempt to change the fledgling law, Proposition 24 sets itself apart because its primary backer is the … Continue reading California’s Prop 24 splits data privacy supporters

Browsers Bugs Exploited to Install 2 New Backdoors on Targeted Computers

The Hacker News-- Cybersecurity researchers have disclosed details about a new watering hole attack targeting the Korean diaspora that exploits vulnerabilities in web browsers such as Google Chrome and Internet Explorer to deploy malware for espionage purposes. Dubbed "Operation Earth Kitsune" by Trend Micro, the campaign involves the use of SLUB (for SLack and githUB) … Continue reading Browsers Bugs Exploited to Install 2 New Backdoors on Targeted Computers