Collaborate Disseminate
This time, José Rodríguez came up with a way to trick the iOS 13 beta into showing its address book without the need to unlock the screen. Continue reading iPhone lockscreen bypass: iOS 13 tricked into showing your contacts
SandboxEscaper is back, with a second bypass for the recent CVE-2019-0841 Windows patch. Continue reading SandboxEscaper Debuts ByeBear Windows Patch Bypass
Researchers show how rogue web applications can be used to attack vulnerable browser extensions in a hack that gives adversaries access to private user data. Continue reading How Web Apps Can Turn Browser Extensions Into Backdoors
Our reader poll showed overwhelming support for 2FA even in the wake of a bypass tool being released — although lingering concerns remain. Continue reading Threatpost Survey Says: 2FA is Just Fine, But Go Ahead and Kill SMS
Take our short poll to weigh in on the state of two-factor authentication. Continue reading Threatpost Poll: Can We Fix 2FA?
Imagine that you discover an Unrestricted File Upload vulnerability and upload a web shell to the server. Or, you have a payload that allows you to execute commands on the system through Local File Inclusion (LFI) or Remote File Inclusion (RFI) vulnera… Continue reading Bypass of Disabled System Functions
Puzzles and check-boxes have been replaced with in-the-background behavioral analysis. Continue reading Google Updates reCAPTCHA: No More Boxes to Check
This is similar to taking a room key for a building and turning it into a skeleton key that works on every door in the building. Continue reading Microsoft Flaw Allows Full Multi-Factor Authentication Bypass
Edgy XSS bypass, hacking fitness tracking in China, Russian hackers love power, leaky backups, Google hates Phishing for Google employees, Apache Tomcat, Solaris vulnerabilities that weren’t really fixed, OpenWhisk fails to beat a vulnerability. … Continue reading Russian Hackers, OpenWhisk, and Tomcat – Hack Naked News #182
Edgy XSS bypass, hacking fitness tracking in China, Russian hackers love power, leaky backups, Google hates Phishing for Google employees, Apache Tomcat, Solaris vulnerabilities that weren’t really fixed, OpenWhisk fails to beat a vulnerability. … Continue reading Russian Hackers, OpenWhisk, and Tomcat – Hack Naked News #182