Collaborate Disseminate
Chinese app maker Sungy Mobile may have exposed the information of more than 50.5 million of its customers, according to researchers who were able to access dozens of the company’s databases through a pair of IP addresses that did not require any login… Continue reading 50.5 million Sungy Mobile customers exposed through open ports
Three newly discovered speculative execution vulnerabilities found in Intel CPUs may turn out to be even more serious than their Spectre and Meltdown cousins, because they affect microprocessors supporting Intel Software Guard Extensions, as well as ot… Continue reading New family of new speculative execution bugs, Foreshadow, adds to Spectre-Meltdown misery
US-Cert announced updates and patch releases for VMware, Samba, Internet Key Exchange, and Linux kernel, respectively, to address a host of vulnerabilities. Continue reading Security updates issued for VMware, Samba, Internet Key Exchange, and Linux
The former Microsoft employee who had been charged with, and initially plead not guilty to, helping launder the gains made through the distribution of Reveton ransomware has been sentenced to 18 months in prison. Continue reading Former Microsoft worker and Reveton ransomware bag man sentenced to 18 months
A presentation at Def Con 2018 last week revealed an unpatched vulnerability in macOS devices that can allow malware to bypass certain security checks using a technique that fakes user mouse clicks. Continue reading Def Con presenter: ‘Synthetic clicks’ exploit can help attackers install malware on Macs
An Associated Press report found Google continues to track a user’s location even when that person attempts to turn off the various location services provided through the Android operating system and its apps. Continue reading Google location tracker is tough dodge
Some Instagram users found themselves logged out of their accounts and when they tried to reset their passwords they discovered that their recovery email addresses had been set to .ru accounts. Continue reading Instagram users report hack, note recovery emails changed to .ru addresses
Check Point researchers discovered a new attack surface for Android applications that leverages external storage, dubbed Man-in-the-Disk attacks. Continue reading Man-in-the-Disk attacks leave Android users exposed to data manipulation