Collaborate Disseminate
A now-patched high-severity security vulnerability in WhatApp’s image filter feature could have been abused to send a malicious image over the messaging app to read sensitive information from the app’s memory.
Tracked as CVE-2020-1910 (CVSS score: 7.8)… Continue reading WhatsApp Photo Filter Bug Could Have Exposed Your Data to Remote Attackers
The U.S. Federal Trade Commission on Wednesday banned a stalkerware app company called SpyFone from the surveillance business over concerns that it stealthily harvested and shared data on people’s physical movements, phone use, and online activities th… Continue reading FTC Bans Stalkerware App SpyFone; Orders Company to Erase Secretly Stolen Data
Threat actors are capitalizing on the growing popularity of proxyware platforms like Honeygain and Nanowire to monetize their own malware campaigns, once again illustrating how attackers are quick to repurpose and weaponize legitimate platforms to thei… Continue reading Cybercriminals Abusing Internet-Sharing Services to Monetize Malware Campaigns
Cybersecurity researchers on Tuesday disclosed details about a zero-click security vulnerability in the Linphone Session Initiation Protocol (SIP) stack that could be remotely exploited without any action from a victim to crash the SIP client and cause… Continue reading Linphone SIP Stack Bug Could Let Attackers Remotely Crash Client Devices
Network-attached storage (NAS) appliance maker QNAP said it’s currently investigating two recently patched security flaws in OpenSSL to determine their potential impact, adding it will release security updates should its products turn out to be vulnera… Continue reading QNAP Working on Patches for OpenSSL Flaws Affecting its NAS Devices
New vulnerabilities have been discovered in Fortress S03 Wi-Fi Home Security System that could be potentially abused by a malicious party to gain unauthorized access with an aim to alter system behavior, including disarming the devices without the vict… Continue reading Attackers Can Remotely Disable Fortress Wi-Fi Home Security Alarms
A group of academics has proposed a machine learning approach that uses authentic interactions between devices in Bluetooth networks as a foundation to handle device-to-device authentication reliably.
Called “Verification of Interaction Authenticity” (… Continue reading Researchers Propose Machine Learning-based Bluetooth Authentication Scheme
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added single-factor authentication to the short list of “exceptionally risky” cybersecurity practices that could expose critical infrastructure as well as government and the pri… Continue reading CISA Adds Single-Factor Authentication to the List of Bad Practices
Details have emerged about a now-patched security vulnerability impacting Microsoft Exchange Server that could be weaponized by an unauthenticated attacker to modify server configurations, thus leading to the disclosure of Personally Identifiable Infor… Continue reading New Microsoft Exchange ‘ProxyToken’ Flaw Lets Attackers Reconfigure Mailboxes
A new ransomware family that emerged last month comes with its own bag of tricks to bypass ransomware protection by leveraging a novel technique called “intermittent encryption.”
Called LockFile, the operators of the ransomware have been found exploiti… Continue reading LockFile Ransomware Bypasses Protection Using Intermittent File Encryption