Unprecedented Data Breach: Millions Impacted by Personal Information Theft via Website Error

 

Tech support scams have become increasingly popular over the past few years. Scammers use scare tactics to get you to pay for unnecessary technical support services to fix supposedly unproblematic equipment or software.
In most cases, scammers try to trick you into paying them to fix an unresolvable problem with your devices or software. The scammers do so by tricking the victims into making a payment. These criminals may be stealing your financial or personal information at worst. They will often install malware, ransomware, or other unwanted programs on your computer if they can remotely access it to perform this “fix”. These unwanted programs may steal your information or damage your data or your device if one allows them to do so. 
A recent report by cybersecurity experts warned that websites and web apps are increasingly stealing sensitive information belonging to millions of people every day. All three incidents in question share a common denominator: direct object references (IDOR) that are not secure. A flaw in the site or app that allows the user to request sensitive information from it, without first ensuring that the site is allowed to access this information, is known as a security hole, which enables people to request sensitive information from the site or app. 
Taking note of this, the United States Computer Emergency Readin

[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.

This article has been indexed from CySecurity News – Latest Information Security and Hacking Incidents

Read the original article: