Attacks/Breaches
5/30/2013
07:30 AM
Dark Reading
Dark Reading
Quick Hits
50%
50%

Recent Data Breaches: A Look Back

Hactivists, cybercriminals take center stage in latest spate of data breaches

[The following is excerpted from "A Data Breach Bonanza," a new Alert issued this week on Dark Reading's Attacks and Breaches Tech Center.]

Recent data breaches have ranged from hacktivism to data theft to cyberespionage. Today, Dark Reading offers a look back at its coverage of the latest breaches, and some analysis of why they happened. Among the stories in this new Dark Reading Alert:

* The Verizon Data Breach Investigation Report provides an in-depth look at a wide range of breaches, including hacktivist attacks and criminal data theft. Breaches via physical attack and social network attack are up, the report says.

* The Pushdo Botnet is back, this time in a form that can morph, making it more difficult for botnet hunters to find.

* Attackers from the hacktivist group LulzSec were sentenced to prison time in the U.K. for their penetration of major government and business sites.

* Eight New Yorkers have been indicted in the breakup of a crime ring that may have stolen as much as $45 million in prepaid debit cards.

* A breach at the U.S. Department of Labor shows weaknesses in the vulnerability scanning process and exposes new vulnerabilities in Microsoft applications.

To read more about these recent breaches -- and others covered in this compendium of news -- download the free report.

Have a comment on this story? Please click "Add a Comment" below. If you'd like to contact Dark Reading's editors directly, send us a message.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-8802
Published: 2015-01-23
The Pie Register plugin before 2.0.14 for WordPress does not properly restrict access to certain functions in pie-register.php, which allows remote attackers to (1) add a user by uploading a crafted CSV file or (2) activate a user account via a verifyit action.

CVE-2014-9623
Published: 2015-01-23
OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quote and cause a denial of service (disk consumption) by deleting an image in the saving state.

CVE-2014-9638
Published: 2015-01-23
oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the number of channels set to zero.

CVE-2014-9639
Published: 2015-01-23
Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access.

CVE-2014-9640
Published: 2015-01-23
oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted raw file.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
If you’re a security professional, you’ve probably been asked many questions about the December attack on Sony. On Jan. 21 at 1pm eastern, you can join a special, one-hour Dark Reading Radio discussion devoted to the Sony hack and the issues that may arise from it.