article thumbnail

Lionsgate streaming platform with 37m subscribers leaks user data

Security Affairs

Original post at [link] During their investigation, our researchers discovered that the video-streaming platform Lionsgate Play had leaked user data through an open ElasticSearch instance. URLs found in logs contained titles and IDs of what content users watched on the platform, along with search queries entered by the users.

article thumbnail

Experts warn of a new malvertising campaign spreading the ChromeLoader

Security Affairs

Threat actors spread the malware via an ISO file masqueraded as a cracked video game or pirated movie or TV show. “However, ChromeLoader uses PowerShell to inject itself into the browser and add a malicious extension to it, a technique we don’t see very often (and one that often goes undetected by other security tools).

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Vulnerability in UC Browser Apps exposes to phishing attacks

Security Affairs

Security researcher discovered a browser address bar spoofing flaw that affects popular Chinese UC Browser and UC Browser Mini apps for Android. Security researcher and bug hunter Arif Khan has discovered a browser address bar spoofing vulnerability that affects popular Chinese UC Browser and UC Browser Mini apps for Android.

article thumbnail

AI in commerce: Essential use cases for B2B and B2C

IBM Big Data Hub

Four AI in commerce use cases are already transforming the customer journey: modernization and business model expansion; dynamic product experience management (PXM); order intelligence; and payments and security. This includes trust in the data, the security, the brand and the people behind the AI.

B2C 49
article thumbnail

Super Fresh

John Battelle's Searchblog

But in recent months Twitter users have begun to find a route around that limitation by employing Twitter as a pointing device instead of a communications channel: sharing links to longer articles, discussions, posts, videos — anything that lives behind a URL. Introducing the revolutionary Norton Internet Security 2009.

article thumbnail

Threat actors are attempting to exploit VMware vCenter CVE-2021-22005 flaw

Security Affairs

VMware has released patches that address a new critical security advisory, VMSA-2021-0020. Researchers from BleepingComputer also reported that threat actors have started to exploit CVE-2021-22005 using code released by security researcher Jang. deployments. The vulnerability is due to the way it handles session tokens.

article thumbnail

Facebook flaw could have exposed private info of users and their friends

Security Affairs

Security experts from Imperva reported a new Facebook flaw that could have exposed private info of users and their friends. A new security vulnerability has been reported in Facebook, the flaw could have been exploited by attackers to obtain certain personal information about users and their network of contacts. Pierluigi Paganini.