German COVID-19 Contact-Tracing Vulnerability Allowed RCE

Bug hunters at GitHub Security Labs help shore up German contact tracing app security, crediting open source collaboration. Continue reading German COVID-19 Contact-Tracing Vulnerability Allowed RCE

Six Hackers Have Now Pocketed $1M From Bug Bounty Programs

Up to 25 percent of valid vulnerabilities found in bug bounty programs are classified as being of high or critical severity. Continue reading Six Hackers Have Now Pocketed $1M From Bug Bounty Programs

Amid Bug Bounty Hype, Sometimes Security is Left in the Dust

Amidst the PR glitz and popularity of bug bounty programs, experts worry that actual smart security strategy is being left behind. Continue reading Amid Bug Bounty Hype, Sometimes Security is Left in the Dust

Skype flaw grants access to the photos on your Android phone without a passcode

A design flaw in Microsoft’s Skype app can be exploited to grant access to the data on your Android phone without passcode authentication, a researcher has shown. Kosovo-based bug-hunter Florian Kunushevci demonstrates in the YouTube video below … Continue reading Skype flaw grants access to the photos on your Android phone without a passcode