Equifax confirmed the attack vector used in its data breach to be CVE-2017-5638, a vulnerability patched last March 2017 via S2-045. The vulnerability was exploited to gain unauthorized access to highly sensitive data of approximately 143 million U.S. and 400,000 U.K. customers, as well as 100,000 Canadian consumers. This vulnerability was first disclosed in March, almost immediately followed by publicly […]

he U.S. Securities and Exchange Commission disclosed late Wednesday night that hackers breached its online filing system and may have made « illicit gain through trading. » The SEC, the agency responsible for regulating the financial securities industry, gave few details about the hack, saying only that it involved a software « vulnerability » […]

On Friday, the Department of Homeland Security notified nearly half of the U.S. states that their election systems were targeted by Russia-affiliated hackers in an attempt to influence the 2016 election. In most of the states targeted, the hackers were engaged in preliminary activities like scanning. In other states hackers […]