Hacker Gets $12,000 In Parking Tickets After ‘NULL’ License Plate Trick Backfires
Forbes – A security researcher by the name of Droogie decided to mess with the Automatic License Plate Reader systems that issue traffic fines, securing the vanity plate “NULL,” part for fun and part in the hope that this spoofed the system into returning errors whenever his plate was seen. Instead he received more than $12,000 in fines—clearly his plate became a dumping ground for erroneous data records.
Fingerprints and facial recognition data exposed in major breach
Sky News – More than one million fingerprints and a host of usernames and passwords have been exposed on an unsecured database hosted by a security platform that lists the Metropolitan Police among its clients. Researchers claim to have discovered the publicly accessible information on the web-based BioStar 2, which is owned and operated by South Korean company Suprema.
Lack Of Regulation Could Lead To Drone Weaponization
Forbes – Drone commercialization has skyrocketed over the past five years. With capabilities from top-quality imaging and video software to speeds that can reach over 60 miles per hour, drones are endlessly appealing to the public. However, these same capabilities quickly become dangerous if the products on the market are not secure.
Huge database found leaking biometric, personal info of millions
HelpNetSecurity – While working on a web-mapping project, VPNMentor researchers Noam Rotem and Ran Locar discovered a publicly accessible database containing fingerprint records of over 1 million users, facial recognition information, personal information and much more.
BA Under Fire For Leaking Passenger Info in Links
InfoSecurity Magazine – British Airways has come under fire from the security community again, this time after a vulnerability in its e-ticketing system was found to be exposing passenger’s personal information (PII). Security firm Wandera claimed in a blog post yesterday that the airline was sending out unencrypted check-in links to customers which contained booking reference and surname in the URL itself.

