Cybersecurity Highlights

This section registers the most relevant incidents or public events related to the cybersecurity and information and communication technologies (ICT), in a way that a chronological history of them is available, together with their main links, references and information sources.

Post related to: e-commerce

Cybercriminals steal funds on Coinbase

Cryptocurrency trading platform Coinbase has reported unauthorised access to user accounts, including access to personally identifiable information (PII), manipulation of account settings and theft...

References:

oag.ca.gov

bleepingcomputer.com

securityaffairs.co

Tags:

The Spanish start-up Glovo suffers a cyberattack compromises user and dealers data

The company that buys, collects and dispatches orders, Glovo, suffered an access to its systems in Spain, exposing the credentials of distributors and customers.A spokesperson for the platform,...

References:

forbes.com

elespanol.com

europapress.es

expansion.com

Tags:

Published a database, property of Ledger

A database of the company Ledger, which is dedicated to hardware cryptocurrency wallets, was published, on 20th of December, on the Raidforum, following unauthorised access.The security incident...

References:

twitter.com

ledger.com

es.ambcrypto.com

bleepingcomputer.com

xataka.com

Tags:

Vulnerabilities in the EMV protocol allow payments without PIN

The contactless payment protocol for EMV bank cards, named after its founders Europay, Mastercard and Visa, contains several security flaws that allow criminals to make payments without using the...

References:

emvrace.github.io

hackread.com

welivesecurity.com

europapress.es

xataka.com

Tags:

Data leakage in the e-commerce company Tokopedia

Tokopedia, an Indonesian technology company specializing in electronic commerce, has suffered data breach from several million user records. The cyberattacker responsible initially published the...

References:

hackread.com

zdnet.com

unaaldia.hispasec.com

Tags:

Massive credential reset in Wallapop after an unauthorized access

On November 1, Wallapop revoked the access credentials of its users after detecting unauthorized access to its shopping platform. The Spanish start-up has communicated the incident through its...

References:

twitter.com

elpais.com

computerhoy.com

elmundo.es

osi.es

genbeta.com

Tags:

e-commerce

Arrest of the biggest cyberscammer in the history of Spain

The Civil Guard, in the so-called LUPIN operation, has arrested the largest cyber-staffer in the history of Spain. The detainee, a young man of 23 who had a criminal group under his command to...

References:

interior.gob.es

elmundo.es

elotrolado.net

bitlifemedia.com

Tags:

Information leakage in OpenCart websites

Researcher Yonathan Klijnsma, of the cybersecurity firm RiskIQ, has discovered a large-scale operation perpetrated by Magecart Group 12 against OpenCart's online store management system.The way of...

References:

riskiq.com

securityaffairs.co

bleepingcomputer.com

cyware.com

Tags:

Massive information leakage in GearBest

Noam Rotem and his researcher team of VPNMentor have discovered a security breach in the GearBest e-commerce website. The failure was in a wrong configuration of the encryption of one of the...

References:

vpnmentor.com

techcrunch.com

redeszone.net

unaaldia.hispasec.com

Tags:

e-commerce

Information leakage

Vulnerability

VisionDirect suffers data leakage caused by MageCart script

VisionDirect, an online store that sells contact lenses, has reported that it suffered a data leak from November 3-8, 2018. As indicated in their announcement, only people who logged into the...

References:

visiondirect.co.uk

theregister.co.uk

bleepingcomputer.com

Tags:

e-commerce

Information leakage

Tool

Corporate access

Cybersecurity Highlights

Cybercriminals steal funds on Coinbase

The Spanish start-up Glovo suffers a cyberattack compromises user and dealers data

Published a database, property of Ledger

Vulnerabilities in the EMV protocol allow payments without PIN

Data leakage in the e-commerce company Tokopedia

Massive credential reset in Wallapop after an unauthorized access

Arrest of the biggest cyberscammer in the history of Spain

Information leakage in OpenCart websites

Massive information leakage in GearBest

VisionDirect suffers data leakage caused by MageCart script

Pages