Sony Portugal latest to fall to hackers
The same Lebanese hacker who targeted Sony Europe on Friday has now dumped a database from Sony Portugal.
The hacker claims to be a grey hat, not a black hat, according to his post to pastebin.com.
"I am not a black hat to dump all the database I am Grey hat"
Instead of dumping the entire database like many previous Sony attackers, idahc only dumped the email addresses from one table in Sony's database.
He claims to have discovered three different flaws on SonyMusic.pt, including SQL injection, XSS (cross-site scripting) and iFrame injection.
By my count, this is the 16th attack against Sony since the chaos came raining down on them in mid-April.
There were two other breaches on Monday by LulzSec, but I simply couldn't bring myself to write about more Sony hacks. LulzSec compromised the Sony Computer Entertainment devnet and downloaded the source code for SCE's entire website, which they posted on BitTorrent.
