Attacks/Breaches
5/30/2013
07:30 AM
Dark Reading
Dark Reading
Quick Hits
50%
50%

Recent Data Breaches: A Look Back

Hactivists, cybercriminals take center stage in latest spate of data breaches

[The following is excerpted from "A Data Breach Bonanza," a new Alert issued this week on Dark Reading's Attacks and Breaches Tech Center.]

Recent data breaches have ranged from hacktivism to data theft to cyberespionage. Today, Dark Reading offers a look back at its coverage of the latest breaches, and some analysis of why they happened. Among the stories in this new Dark Reading Alert:

* The Verizon Data Breach Investigation Report provides an in-depth look at a wide range of breaches, including hacktivist attacks and criminal data theft. Breaches via physical attack and social network attack are up, the report says.

* The Pushdo Botnet is back, this time in a form that can morph, making it more difficult for botnet hunters to find.

* Attackers from the hacktivist group LulzSec were sentenced to prison time in the U.K. for their penetration of major government and business sites.

* Eight New Yorkers have been indicted in the breakup of a crime ring that may have stolen as much as $45 million in prepaid debit cards.

* A breach at the U.S. Department of Labor shows weaknesses in the vulnerability scanning process and exposes new vulnerabilities in Microsoft applications.

To read more about these recent breaches -- and others covered in this compendium of news -- download the free report.

Have a comment on this story? Please click "Add a Comment" below. If you'd like to contact Dark Reading's editors directly, send us a message.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2015-0986
Published: 2015-05-26
Multiple stack-based buffer overflows in Moxa VPort ActiveX SDK Plus before 2.8 allow remote attackers to insert assembly-code lines via vectors involving a regkey (1) set or (2) get command.

CVE-2015-3808
Published: 2015-05-26
The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not reject a zero length, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVE-2015-3809
Published: 2015-05-26
The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not properly track the current offset, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVE-2015-3810
Published: 2015-05-26
epan/dissectors/packet-websocket.c in the WebSocket dissector in Wireshark 1.12.x before 1.12.5 uses a recursive algorithm, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted packet.

CVE-2015-3811
Published: 2015-05-26
epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 improperly refers to previously processed bytes, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, a different vulnerability than CVE-2015-...

Dark Reading Radio
Archived Dark Reading Radio
Join security and risk expert John Pironti and Dark Reading Editor-in-Chief Tim Wilson for a live online discussion of the sea-changing shift in security strategy and the many ways it is affecting IT and business.