MongoDB – Computer Security Articles

Patch Tuesday, January 2020 Edition

January 14, 2020 admin cve-2020-0601, johns hopkins university, Kenneth White, matthew green, MongoDB, Qualys, Time to Patch, Windows 10

Credit to Author: BrianKrebs| Date: Wed, 15 Jan 2020 02:31:50 +0000

Microsoft today released updates to plug 50 security holes in various flavors of Windows and related software. The patch batch includes a fix for a flaw in Windows 10 and server equivalents of this operating system that prompted an unprecedented public warning from the U.S. National Security Agency. This month also marks the end of mainstream support for Windows 7, a still broadly-used operating system that will no longer be supplied with security updates.

MalwareBytes Security

Location data leaks from family tracking app database

March 27, 2019 admin cybercrime, database, exposed, family, location, MongoDB, privacy

Credit to Author: Christopher Boyd| Date: Wed, 27 Mar 2019 16:00:00 +0000

An app called Family Locator exposed the personal information and locations of 280,000 users in real time, including children. How did this happen? And how can app developers avoid it in the future?

Categories:

Tags: database exposed family location MongoDB

Security Wired

If You Want to Stop Big Data Breaches, Start With Databases

March 29, 2017 admin data breaches, database, Database Software, databases, hack, MongoDB, Security

Credit to Author: Lily Hay Newman| Date: Wed, 29 Mar 2017 14:00:49 +0000

If You Want to Stop Big Data Breaches, Start With Databases

The root of so many high-profile data leaks are the insecure databases that underpin the internet. The post If You Want to Stop Big Data Breaches, Start With Databases appeared first on WIRED.

Independent Krebs

Extortionists Wipe Thousands of Databases, Victims Who Pay Up Get Stiffed

January 23, 2017 admin extortion, MongoDB, Niall Merrigan, Other, Victor Gevers

Tens of thousands of personal and possibly proprietary databases that were left accessible to the public online have just been wiped from the Internet, replaced with ransom notes demanding payment for the return of the files. Adding insult to injury, it appears that virtually none of the victims who have paid the ransom have gotten their files back because multiple fraudsters are now wise to the extortion attempts and are competing to replace each other’s ransom notes.