ZeroHour

Search: “WIRED”

663 items

Condé Nast Data of 32.8 Million Users Offered for Sale After WIRED Leak

A 32.8 million-record Conde Nast user database is offered for $15,000 on a Russian cybercrime forum, extending December's WIRED leak with millions of unseen records.

A database of 32,815,767 Conde Nast user records went on sale on 7 September 2026 for $15,000 on a Russian-language forum, containing names, addresses, birth dates and phone numbers but no passwords or payment data. Ransomnews verified a 5,000-record sample as genuine account data collected between September and late October 2025, with roughly 30.5 million non-WIRED records never previously published. The listing matches the December 2025 WIRED leak of 2,366,576 records, claimed by an actor called 'Lovely' who said 40+ million records were stolen via IDOR and broken access controls. Conde Nast has not confirmed the breach; exposed data enables credible targeted phishing and fraud.

Security Affairs · 9d agoData breach in the wild

Flock cameras are riddled with security vulnerabilities and hardcoded creds

Leaked Flock ALPR camera firmware reveals EOL Android 8.1, a 2017 Linux kernel, and hardcoded API keys granting access to production credentials.

DDoSecrets published filesystem images from an in-use Flock ALPR camera, obtained by the hacker collective stegan0gram and investigated by 404 Media and Wired. Micah Lee's analysis shows the camera runs Android 8.1 with a security patch level of 2018-06-05 and Linux kernel 3.18.71, missing roughly eight years of Android fixes. The firmware exposes a hardcoded API key for Flock's hpnotiq backend that can retrieve Auth0 client credentials for any camera by MAC address, with credentials stored in plaintext. Likely unpatched flaws include CVE-2021-1905 (Qualcomm Adreno use-after-free) and CVE-2018-9568 (WrongZone kernel socket type confusion); Flock says it received no reports via its disclosure policy.

Hacker News · securityupdated · 27m agofirst · 11h agoVulnerability 4 sourcesHN 35↑ · 3 commentsCVE-2021-1905CVE-2018-9568