BitDefender distances self from gaping BitDefender.pt breach - The Register

Comment More than 24 hours after hackers posted partial email addresses and other sensitive details lifted from BitDefender's authorized Portuguese partner website, the security company is distancing itself from responsibility and declining to provide details about the extent of the security lapse.

The breach at BitDefender.pt/ allowed the hackers to siphon customer email addresses, administrator usernames and passwords, and other sensitive information out of the site's database by embedding simple database commands into its URL. The attack is strikingly similar to one that hit Kaspersky Lab's American support site over the weekend and was exposed by the same hacker. The hacker has offered screenshots and other details that suggest the breach is real.

Read the whole story on The Register or try our Toolbar

Related stories from top sites:

  • BitDefender website exposes private data

    Romanian hackers have discovered a security flaw in the website of anti-virus provider BitDefender - the second time in a week the company has inadvertently exposed a database that is supposed to remain private.

  • Florida Arrests 3 in Heartland Breach

    The first arrests in connection with the recently disclosed breach at Heartland Payment Systems have been made. The Leon County, Florida Sheriff's office earlier this week announced the arrests of three area residents -- Tony Acreus...

  • Serial security hackers hit F-secure

    F-Secure admitted on Thursday that it had been hit by the same Romanian group that previously hit Kaspersky Lab and Bitdefender's reseller-run Portugese website over recent days. All three of the attacks used SQL Injection techniques...

  • Sony VAIO P gets HSDPA WWAN at last... via a mod, naturally

    Right, so integrated WWAN is awesome. But what's not awesome is Sony's decision to lock you down to Verizon Wireless on its ritzy new VAIO P. We've seen one team of investigators hack away in search of a SIM slot to no avail...

  • Kaiser Permanente breaches leads to ID theft

    Kaiser Permanente has admitted a breach of its employee records systems has resulted in incidents of identity theft. The breach came to light after police arrested an unnamed suspect...

  • Kaspersky hacker: customer database exposed for days

    Some 24 hours after a hacker claimed to hack a Kaspersky website and access a database containing proprietary customer information, the security provider issued a terse statement confirming it had experienced a security issue. "On Saturday...

  • Kaspersky breach exposes sensitive database, hacker claims

    A security lapse at Kaspersky has exposed a wealth of proprietary information about the anti-virus provider's products and customers, according to a blogger, who posted screen shots and other details that appeared to substantiate the claims.

  • Microsoft: Sorry We Handled The Windows 7 Security Blowup Badly, Bug Fixes On The Way

    Talk about a 180: Microsoft (MSFT) now acknowledges changes may be necessary in the way Windows 7 handles security, and the company is promising to implement two changes...

  • Microsoft Insists Windows 7 Security Fine, Hackers Protest

    Yesterday, two Windows bloggers set off a kerfuffle when they suggested security holes existed in Microsoft's (MSFT) upcoming Windows 7. The report now has Microsoft responding...

  • Black hats poison Google video search

    Miscreants have poisoned Google Video search results in a bid to trick the unwary into getting infected with malware. Instead of video clips, researchers at Trend Micro...

More stories ...
No comments yet.

Comment moderation is enabled. Your comment may take some time to appear.