Hackers Breach ZoneAlarm's Forum Site — Outdated vBulletin to Blame

Hackers Breach ZoneAlarm's Forum Site — Outdated vBulletin to Blame
November 11, 2019
https://thehackernews.com/2019/11/zonealarm-forum-data-breach.html

ZoneAlarm, an internet security software company owned by Israeli cybersecurity firm Check Point Technologies, has suffered a data breach exposing data of its discussion forum users, the company confirmed The Hacker News.

Though neither ZoneAlarm or its parent company Check Point has yet publicly disclosed the security incident, the company quietly sent an alert via email to all affected users over this weekend, The Hacker News learned.
Moreover, the company has also clarified that the security incident only affects users registered with the "forums.zonealarm.com" domain, which has a small number of subscribers, nearly 4,500.

"This [forum] is a separate website from any other website we have and used only by a small number of subscribers who registered to this specific forum," the email notification reads.
[...] attackers exploited a known critical RCE vulnerability (CVE-2019-16759) in the vBulletin forum software to compromise ZoneAlarm's website and gain unauthorized access.

Since the ZoneAlarm forum website is down at the time of writing, users would not be able to change their account password on the forum at this moment.
Click to expand...

Log in or Sign up

Hackers Breach ZoneAlarm's Forum Site — Outdated vBulletin to Blame

guest Guest

Log in or Sign up

Hackers Breach ZoneAlarm's Forum Site — Outdated vBulletin to Blame

guest Guest

Useful Searches