Collaborate Disseminate
How easy is it to bypass the average smartphone’s facial recognition security? In the case of Android, a lot easier than owners may think. Continue reading Facial recognition on 42 Android phones beaten by photo test
Adobe has patched two critical flaws in Acrobat and Reader that warrant urgent attention. Continue reading Update now! Adobe Acrobat and Reader have critical flaws
A new presentation shows how vein authentication systems can be fooled using a fake wax hand model. Continue reading Vein authentication beaten by wax hand and photograph
On 29 December one of America’s largest publishing groups, Tribune Media, found itself battling a major ransomware attack. Continue reading US newspapers battle ransomware
The second report in a week has analysed phishing attacks that are attempting – and probably succeeding – in bypassing older forms of two-factor authentication (2FA). Continue reading More phishing attacks on Yahoo and Gmail SMS 2FA authentication
Microsoft has released an emergency patch for a remote code execution (RCE) zero-day vulnerability in Internet Explorer’s Jscript scripting engine affecting all versions of Windows, including Windows 10. Continue reading Update now! Microsoft patches another zero-day flaw
A new assessment of 28 popular models for home users failed to find a single one with firmware that had fully enabled underlying security hardening features offered by Linux. Continue reading Most home routers lack simple Linux OS hardening security
One BMDS site’s patching was so deficient, it failed to address a critical vulnerability that first came to light nearly three decades ago. Continue reading How not to secure US missile defences
The flaw offered attackers a way of executing keystroke injection to take control of a Windows PC running Logitech Options. Continue reading Logitech flaw fixed after Project Zero disclosure
Protecting an account with multi-factor authentication (MFA) is a no-brainer, but that doesn’t mean every method for doing this is equally secure. Continue reading Sneaky phishing campaign beats two-factor authentication