Remove collections bundles
article thumbnail

Airline Booking System Exposed Passenger Details

Data Breach Today

Vulnerability Highlights Poor Security Controls for Passenger Name Records Airline booking system provider Amadeus - whose system is used by 500 airlines - is investigating a software vulnerability that exposed passenger name records, which is the bundle of personal and travel data that gets collected when booking a flight.

Security 256
article thumbnail

Mozilla Drops Onerep After CEO Admits to Running People-Search Networks

Krebs on Security

The nonprofit organization that supports the Firefox web browser said today it is winding down its new partnership with Onerep , an identity protection service recently bundled with Firefox that offers to remove users from hundreds of people-search sites. Nor is collecting and selling data on Americans. Mozilla Monitor.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

OnionPoison: malicious Tor Browser installer served through a popular Chinese YouTube channel

Security Affairs

The experts also discovered that the libraries bundled with the malicious Tor Browser is infected with spyware. “More importantly, one of the libraries bundled with the malicious Tor Browser is infected with spyware that collects various personal data and sends it to a command and control server. “The file freebl3.dll

article thumbnail

Introducing 'Secure Access Service Edge'

Dark Reading

The industry's latest buzzword is largely a repackaging exercise that bundles a collection of capabilities together and offers them as a cloud-delivered service.

Access 95
article thumbnail

Breach Exposes Users of Microleaves Proxy Service

Krebs on Security

Microleaves claims its proxy software is installed with user consent, but data exposed in the breach shows the service has a lengthy history of being supplied with new proxies by affiliates incentivized to distribute the software any which way they can — such as by secretly bundling it with other titles.

article thumbnail

Chinese Tropic Trooper APT spreads a hacking tool laced with a backdoor

Security Affairs

The loader was bundled with a Chinese language greyware “SMS Bomber” tool that is most likely distributed in the Chinese underground. Therefore the entire bundle works as a trojanized binary. This version gather information collected by the original Yahoyah (i.e. ” reads the post published by Check Point experts.

Military 109
article thumbnail

Experts uncovered novel Malware persistence within VMware ESXi Hypervisors

Security Affairs

In the attack investigated by Mandiant, threat actors relied on malicious vSphere Installation Bundles (“VIBs”) to install two backdoors on the ESXi hypervisors, tracked as VIRTUALPITA and VIRTUALPIE. ” reads the report published by Mandiant. We call these backdoors VIRTUALPITA and VIRTUALPIE.”

Metadata 136