Security
-
Researchers Find Critical Vulnerability In Optical In-Display Fingerprint Sensors, Allowed Attackers To Unlock Devices Instantly
In-Display Fingerprint sensors seem like an upcoming trend in smartphones. Conventional fingerprint sensors have become quite reliable over the years, but it’s still limited by design. With conventional fingerprint sensors, you need to locate the sensor and then unlock your phone. With the scanner placed under the display, unlocking the…
-
U.S Senate Bill Cracks Down On Robocalls, Offenders Face Up To $10,000 In Penalties
U.S Senators John Thune and Ed Markey introduced a bill this Friday which cracks down on illegal spam robocalls. Illegal automated telemarketing calls could now result in up to $10,000 in penalties for offenders. The Telephone Robocall Abuse Criminal Enforcement and Deterrence (TRACED) act aims to reduce the amount of spam robocalls…
-
Vulnerability In Android Exposes Sensitive Data From RSSI Broadcasts, Can Be Used To Locate Users In Local Wifi Networks
Google has been hard at work cleaning up Android’s code and making future releases safer. They have consistently made design choices this year that would make security patches easier to deploy. Even after painstaking efforts by the devs to patch up vulnerabilities, there seems to be a new one cropping…
-
D-Link’s Central Wifi-Manager Seems To Be Vulnerable To Privilege Escalation Attacks Through Trojan File
D-Link’s Central Wifi-Manager is quite a nifty tool. It’s a web-based wireless Access Point management tool, enabling you to create and manage multi-site, multi-tenancy wireless networks. Whether deployed on local computer or hosted in the cloud. But it seems there might have been a security issue with the software. The…
-
DJI Fixes Massive Vulnerability In User Accounts That Could’ve Allowed Hackers To Take Control Of Your Drone And Steal Personal Information
DJI drones are the hot trend of 21st century. However, as functional and well built they are, some vulnerabilities in them could pose serious threat to your security. As these drones rely on a DJI account to be functional, you can land in serious trouble if a hacker gains access…
-
VirtualBox Zero-Day Vulnerability Goes Public, No Security Patch Yet Available
A zero-day vulnerability in VirtualBox was publicly disclosed by an independent vulnerability researcher and exploit developer Sergey Zelenyuk. VirtualBox is a famous open sourced virtualization software which has been developed by Oracle. This recently discovered vulnerability can allow a malicious program to escape virtual machine and then execute code on…
-
WordPress Plugin, WooCommerce’s Critical Vulnerability Patched Via 3.4.6 Update
If you have ever owned an eCommerce website, there is almost cent percent probability that you must have heard about WooCommerce, the popular plugin for eCommerce websites. Powering over 35% of the eCommerce websites on the internet, and with more than 4 million installations, WooCommerce is one of the most…
-
Your Data Might Be At Risk Even In Encrypted Drives, Researchers Find Major Vulnerabilities In Hardware Encryption Present In Some SSDs
This year we have seen a lot of activism on user data and privacy. The Facebook fiasco also happened along with tons of malware and zero-day attacks, which had a very big impact in the global Cybersecurity space. This shows how vulnerable data is and how damaging it can be…
-
Security Flaw In New Bluetooth Chips Could Expose Millions of Users To Remote Attacks
According to a report from theHackerNews Security researchers have found a new vulnerability in Bluetooth chips that could potentially expose millions of users to remote attacks. The vulnerability was discovered by researchers at Israeli security firm Armis and is now dubbed as BleedingBit. The first vulnerability has been identified as CVE-2018-16986 and…
-
Twitter Trolling Becomes Harder With This Change of Policy
Social media is full of trolls but Twitter is a cesspool of toxic insects that attack anything and everything, It is a safe haven for toxic people but trolling on Twitter will be harder to do now when Twitter is changing some of its policy. Over the years Twitter has…
-
Report: Your Brower’s “Do Not Track” Isn’t Respected by Twitter, Facebook and Other Major Players
Right now, if you head to the privacy settings of your browser, there is a feature called “Do Not Track.” If you don’t know what that is, it’s basically a feature that sends a message to every website you visit asking them to not track your digital footprint. Websites use…
-
Microsoft October 2018 Patch Slightly Flawed and Unable To fully Rectify Jet Database Engine Vulnerability
On the 20th of September, Trend Micro’s Zero Day Initiative (ZDI) went public with the information of a remove code execution vulnerability that would allow attackers to use the flawed Jet Database Engine to run macros through Microsoft Office programs and cause malicious activities in the targets computer. We covered…
-
Phishing Attack on Azure Blog Storage Dodges Users by Displaying a Signed SSL Certificate from Microsoft
A latest phishing attack on Office 365 has been observed to be using a phishing attack which seemingly utilizes a different and a rather interesting technique of storing their phishing form that is being hosted on Azure Blog Storage, Bleeping Computer reported. Azure Blob Storage is a storage solution by…
-
WhatsApp Might Be Getting Ads As Facebook Looks For More Ways To Monetize The App
WhatsApp, the go to texting app for most people these days. It was founded in by 2009 by Brian Acton and Jan Koum. Koum actually continued to be the part of the WhatsApp team post acquisition, but left a few months ago this year, citing difference in ideology with Facebook, the…
-
Torii Botnet Targeting Poorly Secure IoT Devices
Torii is the codename for a new strain or botnet that has been discovered by Avast’s threat labs team. According to the team, this is a very sophisticated threat that is targeting poorly secure Internet of Things devices, so there is a chance that your device is affected and that you…
-
Google Does Damage Control After Chrome Faces A lot Of Backlash For Automatic Sign In Feature In Recent Update
The first thing that most of us noticed was the UI redesign in the latest chrome update underlying which were many small and big changes alike that were not as easy to catch the eye. One of these was the feature that would automatically sign people into Chrome when they…
-
Firefox Quantum, Beta and Nightly Affected by ‘Reap Firefox’ Crash Attack
A particular vulnerability in the present Firefox browser has been unraveled by the security researcher and basically the creater of this bug, Sabri Haddouche in his blog post. He pointed towards a bug which brings the browser and also the operating system possibly with a ‘Reap Firefox’ attack crash. This…
-
EternalBlue Vulnerability Puts Pirated Windows Systems at Malware Risk
Pirated Windows versions have always been vulnerable when it comes to security. A recent report published by Heise Online confirms that hundreds of thousands of computers continue to be threatened by tons of malware. A particular vulnerability that has been codenamed EternalBlue is to be blamed for this misfortune. The…
-
Unit 42 Researchers Discover Xbash – Malware Which Destroys Linux and Windows Based Databases
A new malware known as ‘Xbash’ has been discovered by Unit 42 researchers, a blog post at Palo Alto Networks has reported. This malware is unique in its targeting power and affects Microsoft Windows and Linux servers simultaneously. Researchers at Unit 42 have tied this malware to Iron Group which…
-
Network Manager VPNC is Infected with Username Privilege Escalation Vulnerability
A username privilege escalation vulnerability has been found in the network manager VPNC plugin. This injection vulnerability is exploited by the Metaspoilt module of the program to gain root privilege access. This was discovered by Denis Adnzakovic who found that the network-manager-vpnc plugin for VPNC support in NetworkManager could be…
-
NetBSD 7.2 comes with Security & Stability Enhancements as well as USB 3.0 Support
NetBSD has come out with a new release for the 7.x series. The second feature update of NetBSD 7, NetBSD version 7.2, comes with a few new features and enhancements including, most prominently, the support of the USB 3.0 device as well as improvements for the Linux emulation. The latest…
-
Remote Code Execution Vulnerability in Apache Struts 2.x Resolved in Update
In an advisory published on the Confluence website maintained by the ASF community, a remote code execution vulnerability in the Apache Struts 2.x was discovered and elaborated upon by Yasser Zamani. The discovery was made by Man Yue Mo of the Semmle Security research team. The vulnerability has since been…
-
Windows Task Scheduler Micropatch Released by 0patch
Earlier this week, a user on Twitter who goes by the username SandboxEscaper posted on the social media platform’s feed with information regarding a zero-day local privilege escalation vulnerability plaguing Microsoft’s Windows operating system. The user, SandboxEscaper, also included a proof of concept along with his post which was linked…
-
Apache Struts 2.3.25 and 2.5.17 resolve Cryptojacking Exploit Vulnerability
Information regarding a severe vulnerability found in Apache Struts was revealed last week. A proof of concept of the vulnerability was also published publicly along with the vulnerability’s details. Since then, it seems that malicious attackers have set out to repeatedly exploit the vulnerability to remotely install a cryptocurrency mining…
-
Dell EMC VPlex GeoSynchrony Users Requested to Upgrade to v6.1 to Avoid Insecure File Permissions Vulnerability
An insecure file permissions vulnerability has been discovered in the Dell EMC VPlex Geosynchrony. It’s found to affect versions older than its version 6.1, particularly its versions 5.4, 5.5, and 6.0. This vulnerability allows malicious authenticated attackers to remotely read through VPN configuration files. The exploit also poses the threat…