Android devices can be fatally hacked by malicious Wi-Fi networks
Broadcom chips allow rogue Wi-Fi signals to execute code of attacker’s choosing. Continue reading Android devices can be fatally hacked by malicious Wi-Fi networks
Author Archives: Dan Goodin
Found: Quite possibly the most sophisticated Android espionage app ever
Discovery of Pegasus for Android comes 8 months after similar iOS app was found. Continue reading Found: Quite possibly the most sophisticated Android espionage app ever
Smart TV hack embeds attack code into broadcast signal—no access required
Demo exploit is inexpensive, remote, scalable—and opens door to more advanced hacks. Continue reading Smart TV hack embeds attack code into broadcast signal—no access required
Someone is putting lots of work into hacking Github developers
Dimnie recon trojan has flown under the radar for three years … until now. Continue reading Someone is putting lots of work into hacking Github developers
Potent LastPass exploit underscores the dark side of password managers
Developers are scrambling to fix flaw that allows theft, malicious code execution. Continue reading Potent LastPass exploit underscores the dark side of password managers
Ransomware scammers exploited Safari bug to extort porn-viewing iOS users
Apple fixes flaw attackers used to trick uninformed users into paying a fine. Continue reading Ransomware scammers exploited Safari bug to extort porn-viewing iOS users
Google takes Symantec to the woodshed for mis-issuing 30,000 HTTPS certs [updated]
Chrome to immediately stop recognizing EV status and gradually nullify all certs. Continue reading Google takes Symantec to the woodshed for mis-issuing 30,000 HTTPS certs [updated]
Shielding MAC addresses from stalkers is hard and Android fails miserably at it
Only an estimated 6% of Android phones randomize MACs, and they do it poorly. Continue reading Shielding MAC addresses from stalkers is hard and Android fails miserably at it
Firefox gets complaint for labeling unencrypted login page insecure
Sorry! That’s a feature not a bug. Continue reading Firefox gets complaint for labeling unencrypted login page insecure
A simple command allows the CIA to commandeer 318 models of Cisco switches
Bug relies on telnet protocol used by hardware on internal networks. Continue reading A simple command allows the CIA to commandeer 318 models of Cisco switches