Original BreachForums Breached, PII Data of 210K Users Sold Online

andreasc
-
0
Original BreachForums Breached, PII Data of 210K Users Sold Online
[ad_1]

In Summary

  • The breached forum is BreachForums, started by PomPomPurin.
  • The database was shared by “breached_db_person” with HaveIBeenPwned.
  • The database is being sold on Telegram and several cybercrime forums.
  • The incident took place in Nov 2022, months before the forum was seized by the FBI.

In a troubling turn of events, the remnants of the seized hacking site, BreachForums, have resurfaced as the stolen database is now up for sale by a threat actor known as “breached_db_person.”

This is the same forum where sensitive data, such as the US No Fly List, FBI’s InfraGard, DC Health Link with Members of Congress data, and more, were leaked.

This should not come as a surprise, as hackers getting pwned by other hackers is nothing new. Just recently, the newly surfaced clone of BreachForums under Shiny Hunters’ administration was also compromised, leaking the personal details of more than 4,000 users.

As for the recent developments, according to sources, the stolen database contains a staggering 212,000 records, encompassing sensitive information such as usernames, IP and email addresses, private messages exchanged between forum members, and argon2-hashed passwords. 

The data tables within the 2 GB file shared by breached_db_person reportedly include details of member databases, private messages, and payment transactions. The information contained within could potentially provide valuable insights into prior intrusions and the identities of attackers associated with the forum.

There were also indications of payment information tied to forum ranks and credit purchases, further escalating concerns over potential financial repercussions for the victims.

Have I Been Pwned, a central repository for tracking online data breaches and exploits, has confirmed the legitimacy of the stolen data. The breach notification service announced the inclusion of the BreachForums data, allowing users to check if their login credentials have been compromised. Interestingly, the threat actor behind the sale reportedly shared the database with Have I Been Pwned to prove its authenticity to potential buyers. 

While the stolen BreachForums data is on the market, it comes at an exorbitant price, with offers ranging from $100,000 to $150,000 for the entire database snapshot taken on November 29th, 2022.

However, security experts and law enforcement agencies strongly discourage any attempt to acquire or use stolen information. Doing so would not only condone criminal activities but also perpetuate a cycle of cybercrime and harm innocent individuals whose data was compromised.

  1. OGUsers hacker forum hacked for 4th time; database leaked
  2. Raidforums Database Leak: Data of 460,000 Users Dumped Online
  3. FBI Seizes RaidForums, Arrests Alleged Founder Diogo Santos Coelho

[ad_2]
Source link

Older Galaxy devices will get these Fold 5, Flip 5 camera features

andreasc
-
0
Older Galaxy devices will get these Fold 5, Flip 5 camera features
[ad_1]

Samsung recently launched the Galaxy Z Fold 5 and Galaxy Z Flip 5 foldable smartphones with Android 13-based One UI 5.1.1 onboard. Among other things, the foldables bring new and improved camera features. The company has now announced that some of those features will roll out to older Galaxy devices, including the Galaxy S23 series.

According to a Samsung Community moderator in charge of camera-related developments, the Galaxy Z Fold 5 and Galaxy Z Flip 5 offer improved digital zoom when shooting in the Photo mode with the rear cameras. These improvements will trickle down to the Galaxy S23 series with a future update. The company is currently working on the update and doesn’t have a release timeline to share with its customers.

The Galaxy Z Fold 5 brings a usability improvement that allows you to select multiple photos in the Capture View. You can easily share and delete them at once. The new foldable also lets you adjust various camera settings in Pro/Pro Video mode. Samsung plans to roll out these improvements to the Galaxy Z Fold 4, Galaxy Z Fold 3, and Galaxy Z Fold 2. Once again, we don’t have a release timeline for the update.

Another handy camera feature that Samsung added to its latest foldables comes into play when scanning documents. You can choose to sharpen the text and erase distractions such as fingers from documents with ease. If you’re holding a document with one hand and capturing with the other, there’s a chance that your hand will shake or the photo will contain your fingers. The new feature helps fix those issues. The Galaxy S23 series will get it with the Android 14-based One UI 6.0 update.

Older Galaxy S flagships and foldables will get more camera features

The latest Samsung foldables let you copy editing effects such as filters and color tones from one photo and apply them to another. You can find that option in the More section of the Photo Editor menu in the Gallery app. The Korean firm will push this feature to all of its foldables launched in 2020 and beyond, including the original Galaxy Z Flip. The Galaxy S21, Galaxy S22, and Galaxy S23 phones will also get it.

All of these Galaxy devices are also in line to get Samsung’s improved Photo Remaster tool. The community moderator touts improvements in removing fingerprints and erasing foreign objects. The after-before comparison tool has been improved too. Last but not least, Samsung will update these phones to give users an improved video editor. You can make bright areas brighter and dark areas darker. We will let you know when these updates roll out.


[ad_2]
Source link

The Galaxy S23 is more popular than its predecessor

andreasc
-
0
The Galaxy S23 is more popular than its predecessor
[ad_1]

Samsung is a popular phone company that makes, well, popular phones. We expect the company’s new phones to be more popular than their predecessors, and that’s what happened in this case. The Galaxy S23 is more popular than the Galaxy S22, according to Sam Mobile.

The company just posted its Q2 2023 earning report, and it shows some mixed results. The company’s income is down because of its declining sales in the semiconductor market. While that’s the case, other divisions of Samsung are seeing varying levels of success. Basically, we don’t think that Samsung is going to be filing for bankruptcy anytime soon.

The Galaxy S23 is more popular than the Galaxy S22

Samsung’s phones have been weathering the declining smartphone market, and they see varying degrees of success. The Galaxy S22 Ultra was a runaway success last year breaking pre-order records. From that moment, it looked like the company had the right formula because it repeated the same thing this year.

This year, Samsung released the Galaxy S23 and Galaxy S23+ as the two more standard phones. Above them sits the Galaxy S23 Ultra. This is the monster of a phone sporting a near-tablet-sized display with more pixels and the S Pen. While last year’s phones were popular, the Galaxy S23 seems to be more popular. Samsung says that the Galaxy S23 outsold the S22 in both volume and value.

The smartphone market is in a tough place

This is significant, as the smartphone market is continuing to decline. Fewer and fewer people are buying smartphones nowadays. The economy is in a tough spot that keeps getting tougher. Folks are having to make tough choices about what they’re going to do with their money. “Do I buy a new phone or be able to pay my rent?”

Samsung shipped 37% fewer units in Q2 2023 compared to the same period last year. That’s not great, but we know that the company will see an increase this quarter and the next. It’s soon to release its Galaxy Z Fold 5 and Galaxy Z Flip 5. This will boost its numbers.


[ad_2]
Source link

Dark mode will be standard on Twitter

andreasc
-
0
Dark mode will be standard on Twitter
[ad_1]

If it’s one thing that app users adore it’s applying dark mode to their apps. Having a dark gray or completely black background with white text seems to be the optimal way to use apps. Well, it seems that Twitter is making its dark mode standard, according to Android Police.

Twitter, or should we call it X (no, we shouldn’t), is in a bit of a bad place right now. In a mad dash to make Twitter Blue a more appealing option for social media goers, Elon brought a ton of questionable and unwelcome changes to the platform. These unwelcome and unexpected changes seem to be ramping up as Threads is now a thing.

Twitter will make dark mode a standard setting

Recently, Twitter announced that it was completely dropping its light mode. In a short and sweet tweet, Elon stated that dark mode is better than light mode in every way. However, the tweet faced some backlash, which surprised no one. So, that change was killed off.

That doesn’t mean that there won’t be a change, however. In fact, there will be two changes. First off, while light mode isn’t going anywhere, dark mode will be enabled by default. You can change it to light mode whenever you want.

Secondly, while light mode isn’t going away, dim mode is. Dim mode darkens the background of the UI, but it’s not as dark as dark mode. Instead of turning the background completely black, dim mode turns it a dark blue color.  Well, folks who like that theme will be disappointed, as it’s going away.

This makes the latest in a long line of odd changes that Twitter is bringing. At this point, there’s no telling what odd change Twitter’s going to implement next. No other social media platform brings changes at such an impulsive rate.

During the first couple of months of Elon’s ownership, it felt like he was just feeling out owning a social media site. So, we expected some whacky behavior. However, it’s been more than half a year since Musk’s reign, and it’s clear that this situation is not going to get better. All we can do now is wait for the next Twitter alternative to sprout.


[ad_2]
Source link

Zuckerberg caught on tape: less than 50% of the initial 100M Threads subscribers still use the app

andreasc
-
0
Zuckerberg caught on tape: less than 50% of the initial 100M Threads subscribers still use the app
[ad_1]
During the second week of this month it looked as though Instagram’s Threads platform was going to be a huge hit and a serious challenge to Elon Musk’s Twitter since re-branded as “X.” In the first five days, Threads had 100 million people sign up. Since subscribers to Threads must have an Instagram account, existing Instagram users were able to open a Threads account easily. But this means that anyone deleting their Threads account will have to delete their Instagram account as well.
But things have cooled off and as per Reuters, Meta CEO Mark Zuckerberg said at a company Town Hall yesterday that more than half of the 100 million who signed up for Threads are no longer using the app. Meta, of course, owns Instagram. Reuters has heard an audio tape of the meeting during which Zuckerberg said that the retention rate on Threads was better than Meta executives expected although the executive did say that it was “not perfect.”
Zuckerberg, who called the drop in Threads usage “normal,” also said, “Obviously, if you have more than 100 million people sign up, ideally it would be awesome if all of them or even half of them stuck around. We’re not there yet.” He said that as more features are added to the platform, the retention rate will rise. Some of these upcoming features include a search function and a desktop version of Threads.
Threads adds a Following feed that allows users to see posts from profiles they are following with the most current post on top - Zuckerberg caught on tape: less than 50% of the initial 100M Threads subscribers still use the app

Threads adds a Following feed that allows users to see posts from profiles they are following with the most current post on top

Chief Product Officer Chris Cox said that the platform needs more “retention-driving hooks” to create incentives for those who have stopped using Threads to return to the app. Cox said that “making sure people who are on the Instagram app can see important Threads” might help.

Earlier this week Threads added some new features to the iOS and Android apps including a “Following” feed that shows users posts from profiles that they are following with the most current post at the top. The other option, the “For You” feed, shows a mix of posts from profiles users follow mixed with recommended posts. To change feeds, tap on the Threads icon at the top of the display and swipe on the screen.

Other added features include post translations, new ways to filter notifications in Activity, a Follow button to quickly follow your followers back, and a quick way to approve new followers for those with a private account.


[ad_2]
Source link

X demands brands to spend $1,000 per month on ads

andreasc
-
0
X demands brands to spend $1,000 per month on ads
[ad_1]

Elon Musk again has come up with an innovative way to get money from brands. After telling businesses to pay $1,000 monthly to keep their verification badge, X is now telling them to spend at least $1,000 monthly on ads. Brands that don’t comply will lose their verification checkmark.

Twitter, now rebranded as X, heavily depends on advertising revenues- just like most social platforms. Back in May, Twitter’s biggest ad buyer GroupM said the platform is no longer recognized as “high risk,” and advertisers can safely place orders for ads.

However, the latest reports indicate that the platform’s revenue from advertising plummeted by 50%. Controversies following Musk’s takeover and drastic changes he made to the platform are advertisers’ main sources of concern. X has notified brands that they might lose their verification badge if they haven’t spent at least $1,000 on ads in the previous 30 days or $6,000 on ads in the previous 180 days.

X wants brands to spend at least $1,000 per month on buying ads

In response, Musk said the reason for this is to raise the bar for verification organizations and make it expensive for scammers to create millions of accounts. Of course, the billionaire added organizations can choose to pay only $1,000 for their badge.

“Or they can just pay $1000/month for a verified organization subscription with the ability to convey that organizational authority to affiliates. This more than pays for itself in organic reach.” Musk noted.

Spending $12,000 annually on a verification badge is quite over budget for most small and midsize businesses. Now, asking them to pay another $12,000 for ads seems to be an extravagant request. Many small businesses and nonprofit organizations are asking for a cheaper tier to get a verified badge.

Elon Musk is going to great lengths to make his now-called X profitable. This includes even giving a 50% discount on all new ad bookings until July 31.


[ad_2]
Source link

WhatsApp’s New Record Feature – Record And Send Short Videos

andreasc
-
0
WhatsApp’s New Record Feature – Record And Send Short Videos
[ad_1]
Whatsapp Short Videos

By offering a rapid and secure way to share your voice, audio messaging on WhatsApp revolutionized how people communicate.

Now that WhatsApp has introduced instant ‘video messages’, you may record and share short personal videos directly in the chat. This has to be the most significant upgrade in July.

Following a Facebook announcement by CEO Mark Zuckerberg, video messages are now being made available to all WhatsApp users.

“New for WhatsApp — we’re adding the ability to instantly record and share a video message in your WhatsApp chats. It’s as easy as sending a quick voice message,” Zuckerberg wrote in his post.

Highlights of the New Instant Video Messages Feature

Real-time messages to chats can be made with video messages, which can be said and shown in 60 seconds.

“We think these will be a fun way to share moments with all the emotion that comes from video, whether it’s wishing someone a happy birthday, laughing at a joke, or bringing good news,” WhatsApp wrote in a blog post.

To record a video message, simply tap to switch to video mode, then hold to start recording. Swipe up to lock and record the video hands-free. When a video is opened in a conversation, it automatically plays on mute, and pressing it will turn on the sound.

End-to-end encryption is used to safeguard video transmissions to keep them secure. Additionally, the capability is accessible to iOS and Android users.

Recently, the business unveiled a technology that automatically mutes calls from unidentified numbers. Additionally, it allowed users to make changes to a message within 15 minutes of sending it. Additionally, it is reported that WhatsApp is working on usernames.

Will Cathcart, the head of WhatsApp said “We are adding instant video messages to WhatsApp. Voice messages are incredibly popular, and this builds on that: record and send a short video, all within a chat.”

In the upcoming weeks, everyone will have access to the capacity to make and share videos, which has already started rolling out.

Keep yourself informed about the latest Cyber Security News by following us on GoogleNews, Linkedin, Twitter, and Facebook.


[ad_2]
Source link

Google Assistant speech recognition feature heads to Google Maps

andreasc
-
0
Google Assistant speech recognition feature heads to Google Maps
[ad_1]

The most recent update to Google Maps brings Assistant speech recognition features to users. With this, those seeking directions can tell the app where they want to go, and it’d offer them route suggestions to take. Yes, you read that right, you can now tell the Google Maps app where you want to go and get directions.

Well, over the past few years, this navigation app has offered users some speech functions. However, this speech function is not up to par with the available technology and using it is stressful for most users. This calls for a change, one that will make speech functions on the Google Maps app more effortless and useful.

Google is now integrating their voice assistant into the Maps app for seamless usage. For some reason, this feature has been missing from Google Maps over the past few years. Now, users can tell the Maps app where they intend to go and get directions to their desired destination.

Google Maps gets better with the Assistant speech recognition feature integration

The recent upgrade to the Google Maps app brings assistant features and voice recognition. With this, users can talk to the app and get sound and accurate feedback for their requests. Considering that Maps is a navigation app, all conversations should be related to getting directions.

You don’t need to install any new Maps app update before you can start using this feature. Sitting on the search bar is a mic icon with which users can access the voice command features. Tapping on this mic icon will pull up an interface where users will set up this feature and grant the Maps app access to use the device’s mic.

Once it is set up, users can start telling the Maps app where exactly they wish to go. As the user speaks, they can watch their words turn into text on the screen and spot any mistakes. This feature will come in handy for drivers in need of directions, so they don’t need to pull over and type in their destination before they get directions.

Now, with the tap of the mic icon on the search bar, users can tell the Maps app exactly where they want to go. Millions of Google Maps users around the world will put this Assistant speech feature to use while seeking directions. Head over to the Google Maps app on your phone to experience this new feature for yourself.


[ad_2]
Source link

Zimbra Patched An XSS Zero-Day Vulnerability Under Attack

andreasc
-
0
Zimbra Patched An XSS Zero-Day Vulnerability Under Attack
[ad_1]

Zimbra recently addressed a severe zero-day vulnerability found actively exploited in the wild. While the vulnerability previously received a fix, Zimbra re-released the XSS zero-day patch with the latest software version, urging users to update.

Active Exploitation Detected For Zimbra XSS Zero-Day Vulnerability

Zimbra recently rolled out a critical update, urging all users to update immediately, following the reports about active exploitation of a security flaw. Specifically, the zero-day vulnerability affects the Zimbra Collaboration Suite (ZCS) email servers, allowing an adversary to perform cross-site scripting (XSS) attacks.

As stated in the advisory, the latest ZCS version 10.0.2 addresses numerous security issues, including an XSS zero-day CVE-2023-38750.

This vulnerability first caught the attention of the researcher Clément Lecigne from Google Threat Analysis Group. Following his report, Zimbra patched the flaw with the release of ZCS 8.8.15, asking users to update their systems manually. Zimbra didn’t disclose anything about active exploitation attempts for the flaw at that time. However, another Google TAG researcher Maddie Stone, confirmed in a tweet that the vulnerability went under attack before the patch could arrive.

Now, a couple of weeks following the initial disclosure, Zimbra has released another major update with the patch for CVE-2023-38750. Regarding the flaw, the release notes simply describe it as a vulnerability exposing internal JSP and XML files.

In addition to this XSS, the latest update also addressed another vulnerability – CVE-2023-0464. The advisory describes it as an OpenSSL package vulnerability “related to the verification of X.509 certificate chains that include policy constraints.”

Besides Zimbra and the researchers’ community, the US CISA also urged all Zimbra users to update their devices with the latest ZCS versions. CISA also added this vulnerability to its Known Exploited Vulnerabilities Catalog, emphasizing all federal organizations update their systems as well.

Before this vulnerability, CISA also warned all organizations of another zero-day affecting Ivanti EPMM, adding the flaw to its catalog.

Let us know your thoughts in the comments.


[ad_2]
Source link

Zimbra issues awaited patch for actively exploited vulnerability

andreasc
-
0
Zimbra issues awaited patch for actively exploited vulnerability
[ad_1]

Zimbra has released ZCS 10.0.2 that fixes two security issues, including the known bug that could lead to exposure of internal JSP and XML files.

Two weeks ago, we urged readers to apply a workaround for an actively exploited vulnerability in Zimbra Collaboration Suite (ZCS) email servers. Zimbra has released ZCS 10.0.2 that fixes two security issues, including the known bug that could lead to exposure of internal JSP and XML files.

Zimbra is an open source webmail application used for messaging and collaboration. The vulnerability, which could impact the confidentiality and integrity of users’ data, exists in Zimbra Collaboration Suite Version 8.8.15.

The Common Vulnerabilities and Exposures (CVE) database lists publicly disclosed computer security flaws. The CVEs patched in these updates are:

  • CVE-2023-38750: Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability impacting the confidentiality and integrity of data.

CISA added the vulnerability to its Known Exploited Vulnerabilities Catalog which means that all Federal Civilian Executive Branch (FCEB) agencies must remediate this vulnerability by August 17, 2023.

Reportedly, Maddie Stone from the Google Threat Analysis Group (TAG)—which first reported the vulnerability—confirmed that this issue was used by an Advanced Persistent Threat (APT) group in targeted attacks.

An XSS vulnerability allows attackers to inject malicious code into otherwise benign websites. In this case a command that could expose internal JSP and XML files.

A JSP file is a Java document used to dynamically generate a webpage using Jakarta Server Pages (JSP) functions. It is similar to an .ASP or .PHP file, except it contains Java code instead of ActiveX or PHP. Web servers parse JSP files and use them to generate HTML, which is sent to a user’s web browser.

Extensible Markup Language (XML) is the underlying technology in thousands of applications, ranging from common productivity tools like word processing to book publishing software and even complex application configuration systems.

CVE-2023-0464: A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. The OpenSSL package has been upgraded.

OpenSSL is a software library for applications that provide secure communications over computer networks against eavesdropping, and identify the party at the other end.

Users that are not ready to install the new version are advised to apply the workaround as recommended by Zimbra.

The Zimbra workaround suggests you apply the following fix manually on all of your mailbox nodes:

  1. Take a backup of the file /opt/zimbra/jetty/webapps/zimbra/m/momoveto
  2. Then open to edit the active file and go to line number 40
  3. Change
    <input name="st" type="hidden" value="${param.st}"/>
    to
    <input name="st" type="hidden" value="${fn:escapeXml(param.st)}"/>

Zimbra notes that a service restart is not required so you can apply the manual workaround without any downtime.

We don’t just report on vulnerabilities—we identify them, and prioritize action.

Cybersecurity risks should never spread beyond a headline. Keep vulnerabilities in tow by using Malwarebytes Vulnerability and Patch Management.


[ad_2]
Source link
1...1,0521,0531,054...1,482Page 1,053 of 1,482