CookieSigner Verification Flaw in Apache Hive and Spark May Leak Signatures

ITmedia reports that the prefectures and designated cities that issue Takarakuji announced on November 11 that a third party had logged into some member accounts on the suspended Takarakuji official site and may have viewed member data including names, addresses, phone numbers, email addresses, ticket purchase and winning history, the bank name and first four digits of payout accounts, and the last four digits of credit card numbers .

Yonhap reports that a passenger list for the South Korean presidential aircraft, containing Korean and English names, affiliations, titles, dates of birth and passport numbers of 168 people including President Lee Jae Myung, the first lady, ministers, presidential guards and journalists, was uploaded to malware-scanning site VirusTotal on June 2 and downloadable by paid members for about five months; police opened a formal criminal probe on November 3 and the foreign ministry reported it to the privacy watchdog .