[Bug] macOS High Sierra App Store Preferences Can Be Unlocked Without a Password

Yet another password vulnerability has been uncovered in macOS High Sierra, which unlocks App Store System Preferences with any password (or no password at all).

A new password bug has been discovered in the latest version of macOS High Sierra that al… Continue reading [Bug] macOS High Sierra App Store Preferences Can Be Unlocked Without a Password

WhatsApp Flaw Could Allow ‘Potential Attackers’ to Spy On Encrypted Group Chats

A more dramatic revelation of 2018—an outsider can secretly eavesdrop on your private end-to-end encrypted group chats on WhatsApp and Signal messaging apps.

Considering protection against three types of attackers—malicious user, network attacker, and… Continue reading WhatsApp Flaw Could Allow ‘Potential Attackers’ to Spy On Encrypted Group Chats

Critical Unpatched Flaws Disclosed In Western Digital ‘My Cloud’ Storage Devices

Security researchers have discovered several severe vulnerabilities and a secret hard-coded backdoor in Western Digital’s My Cloud NAS devices that could allow remote attackers to gain unrestricted root access to the device.

Western Digital’s My Cloud… Continue reading Critical Unpatched Flaws Disclosed In Western Digital ‘My Cloud’ Storage Devices

[Guide] How to Protect Your Devices Against Meltdown and Spectre Attacks

Recently uncovered two huge processor vulnerabilities called Meltdown and Spectre have taken the whole world by storm, while vendors are rushing out to patch the vulnerabilities in its products.

The issues apply to all modern processors and affect nea… Continue reading [Guide] How to Protect Your Devices Against Meltdown and Spectre Attacks

Hundreds of GPS Location Tracking Services Leaving User Data Open to Hackers

Security researchers have unearthed multiple vulnerabilities in hundreds of GPS services that could enable attackers to expose a whole host of sensitive data on millions of online location tracking devices managed by vulnerable GPS services.

The serie… Continue reading Hundreds of GPS Location Tracking Services Leaving User Data Open to Hackers

Huge Flaws Affect Nearly Every Modern Device; Patch Could Hit CPU Performance

UPDATE: Researchers have finally disclosed complete technical details of two kernel side-channel attacks, Meltdown and Spectre—which affect not only Intel but also systems and devices running AMD, ARM processors—allowing attackers to steal sensitive da… Continue reading Huge Flaws Affect Nearly Every Modern Device; Patch Could Hit CPU Performance

15-Year-Old Apple macOS 0-Day Kernel Flaw Disclosed, Allows Root Access

A security researcher on New Year’s eve made public the details of an unpatched security vulnerability in Apple’s macOS operating system that can be exploited to take complete control of a system.

On the first day of 2018, a researcher using the onlin… Continue reading 15-Year-Old Apple macOS 0-Day Kernel Flaw Disclosed, Allows Root Access

Forever 21 Confirms Security Breach Exposed Customer Credit Card Details

First notified in November of a data breach incident, popular clothing retailer Forever 21 has now confirmed that hackers stole credit card information from its stores throughout the country for several months during 2017.

Although the company did not… Continue reading Forever 21 Confirms Security Breach Exposed Customer Credit Card Details

Two Romanians Charged With Hacking Police CCTV Cameras Before Trump Inauguration

Remember how some cybercriminals shut down most of Washington D.C. police’s security cameras for four days ahead of President Donald Trump’s inauguration earlier this year?

Just a few days after the incident, British authorities arrested two people in… Continue reading Two Romanians Charged With Hacking Police CCTV Cameras Before Trump Inauguration

Satori IoT Botnet Exploits Zero-Day to Zombify Huawei Routers

Although the original creators of the infamous IoT malware Mirai have already been arrested and sent to jail, the variants of the notorious botnet are still in the game due to the availability of its source code on the Internet.

Hackers have widely us… Continue reading Satori IoT Botnet Exploits Zero-Day to Zombify Huawei Routers