What could have been a damaging breach in one of Sega's servers appears to have been closed, according to a report by security firm VPN Overview. The misconfigured Amazon Web Services S3 bucket contained sensitive information which allowed researchers to arbitrarily upload files to a huge swath of Sega-owned domains, as well credentials to abuse a 250,000-user email list.
The domains impacted included the official landing pages for major franchises, including Sonic the Hedgehog, Bayonetta and Total War, as well as the Sega.com site itself. VPNO was able to run executable scripts on these sites which, as you can imagine, would have been quite bad if this breach had been discovered by malicious actors instead of researchers.
An improperly stored Mailchimp API key gave VPNO access to the aforementioned email list. The emails themselves were available in plaintext alongside associated IP addresses, and passwords that the researchers were able to un-hash. According to the report, "a malicious user could have distributed ransomware very effectively using SEGA’s compromised email and cloud services."
So far there's no indication that bad actors made use of this vulnerability before VPNO discovered and helped Sega to fix it. Sega Europe was not available for comment.
Misconfigured S3 buckets are, unfortunately, an extremely common problem in information security. Similar errors this year have impacted audio company Sennheiser, Senior Advisor, PeopleGIS, and the government of Ghana. Sega was the target of a major attack in 2011 which led to the exfiltration of personally identifiable information pertaining to 1.3 million users. Thankfully, this misconfigured European server didn't result in a similar incident.
If you’ve been hankering for a Pixel 3 XL or maybe a Google Nest Hub, then today is the day you’ve been waiting for. Why? because it’s Google’s 21st anniversary, and to celebrate the search giant is offering a very handy discount of 21% on almost every item available from its European stores. There are […]
Come comment on this article: Celebrate Google’s 21st Birthday with a 21% discount from its European stores
After Google was slammed by the European Commission for forcing manufacturers to bundle Google apps on all Android phones, the search giant has changed up their strategy for licensing Play Services in Europe, according to a leaked document. Manufacturers will get more flexibility with what Google apps they want to pre-install along with the Play […]
Come comment on this article: Google’s app suite will cost up to $ 40 per phone for European phone makers
Streaming services like Netflix and Amazon Prime Video will likely soon have to ensure at least 30 percent of their libraries are dedicated to local content in the European Union. A preliminary agreement on the rules is already in place, and Roberto…
Engadget RSS Feed
Uber Eats only just turned two years old, but like other "gig economy" businesses, it's facing scrutiny over how it classifies workers. In Europe, the company is partnering with Axa to offer couriers an insurance package that covers accidents, hospit…
Engadget RSS Feed
Xiaomi has slowly been working to expand itself to be a global competitor in the smartphone market. Thus far the company’s reach has been limited to the Chinese and Indian markets, though Xiaomi has been very successful in both. At a launch event, the company revealed their initial steps into the European market. They will […]
Come comment on this article: Xiaomi enters European market via Spain with smartphones and other devices
This week European scientists launched the “I Support AIM” campaign — an initiative to urge the European Space Agency (ESA) to move forward with its Asteroid Impact Mission (AIM) in 2020. Over 100 scientists have signed on.
The post Top European scientists want to crash a spacecraft into an asteroid — again appeared first on Digital Trends.
Cross-posted from Google Europe Blog
This Wednesday, President Juncker will deliver his State of the Union address at the European Parliament. The next morning, the European Commission — along with partners Debating Europe and Euronews — will turn to YouTube to field questions about the issues that matter most to people across Europe.
YouTube Creators Jonas Ems, Laetitia Birbes, and Łukasz Jakóbiak will travel to Brussels from their homes in Germany, France and Poland to meet with President Juncker at the Commission’s headquarters at the Berlaymont. While Euronews has hosted live Hangouts on Air with European Commissioners in the past, this is the first time that YouTube Creators will have the opportunity to conduct a full interview with the President.
Nineteen-year-old Jonas is already a veteran YouTuber — not only has he built up a large following for his commentaries and comedy, he’s also published a book about his experiences. Laetitia focuses on sharing her values, like ecology and recycling, and she recently participated in YouTube’s Toi-Même Tu Filmes initiative, aimed at fighting hate speech. Łukasz, who conducts interviews from his tiny Warsaw apartment, explained in an inspirational TedX talk last year how he went from dreamer to doer (and how he got to meet Lady Gaga along the way).
It’s up to Laetitia, Jonas, and Łukasz to choose the questions: They’ll focus on the issues that are top of mind for them and their fans. If you want to weigh in, they’ll be looking at suggestions on social media with the hashtag #AskJuncker.
You can watch the whole thing on the European Commission YouTube channel — the live stream will begin at 11 am CET, and the recording will be available afterward.
Posted by Mark Jansen, Senior Communications Manager at Google Brussels
Google is still in hot water, thanks to the European Commission. The antitrust chief believes Android stifles competition due to the pre-loaded Google apps, and could escalate the investigation as early as this week.
The post European Commission’s antitrust chief is ‘looking closely’ at Google’s Android appeared first on Digital Trends.
The ESA's and Airbus Defence and Space's ambitious European Data Relay System (EDRS) project has reached a milestone this January 29th. Its first laser-satellite system has blasted off to space aboard a Proton rocket from Kazakhstan. The satellite is…
Engadget RSS Feed