article thumbnail

Millions of Xiongmai video surveillance devices can be easily hacked via cloud feature

Security Affairs

Millions of Xiongmai video surveillance devices can be easily hacked via cloud feature, a gift for APT groups and cyber crime syndicates. The flaws reside in a feature named the “XMEye P2P Cloud” that is enabled by default which is used to connect surveillance devices to the cloud infrastructure. Pierluigi Paganini.

article thumbnail

RedTorch Formed from Ashes of Norse Corp.

Krebs on Security

By 2014 it was throwing lavish parties at top Internet security conferences. An ad for RedTorch’s “Cheetah” counter-surveillance tech. Victims of those breaches lost a lot of private data including passwords, and Frigg will help them secure their private data in the future.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

FBI is searching for contractors to monitor social media

Security Affairs

The abuse of social media passwords for malicious purpose is quite common, for this reason, the FBI is searching for contractors to monitor them. “Such a tool would likely violate the companies’ ban against using their data for surveillance.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Media 99
article thumbnail

Botnet operators target multiple zero-day flaws in LILIN DVRs

Security Affairs

Experts observed multiple botnets exploiting zero-day vulnerabilities in DVRs for surveillance systems manufactured by Taiwan-based LILIN. Botnet operators are exploiting several zero-day vulnerabilities in digital video recorders (DVRs) for surveillance systems manufactured by Taiwan-based LILIN-. Pierluigi Paganini.

Firmware 103
article thumbnail

Guardzilla Security Video System Footage exposed online

Security Affairs

A vulnerability in the Guardzilla home video surveillance system could be exploited by users to watch Guardzilla footage of other users. The Guardzilla All-In-One Video Security System is an indoor video surveillance solution. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

article thumbnail

One million cracked Poshmark accounts being sold online

Security Affairs

The company discovered unauthorized access to its servers, the intruders stole personal information of the users, including usernames , hashed passwords, first and last names, gender information, and city of residenc. The compromised data included email addresses, names, usernames , genders, locations and passwords stored as bcrypt hashes.

article thumbnail

Saudi caller ID Dalil app exposed data of more than 5 million users

Security Affairs

The Android caller ID app Dalil exposed online data belonging over 5 million users, security experts discovered a MongoDB database left accessible on the web without a password. The availability of this data represents a serious threat to the privacy of the users, threat actors could use it for surveillance activity.