Google Patches Chrome Zero-Day Reported by Apple, Spyware Hunters

Google has released a Chrome 116 security update to patch CVE-2023-4863, the fourth Chrome zero-day vulnerability documented in 2023.
The post Google Patches Chrome Zero-Day Reported by Apple, Spyware Hunters appeared first on SecurityWeek.
Continue reading Google Patches Chrome Zero-Day Reported by Apple, Spyware Hunters

Email forwarding flaws enable attackers to impersonate high-profile domains

Sending an email with a forged address is easier than previously thought, due to flaws in the process that allows email forwarding, according to a research team led by computer scientists at the University of California San Diego. The issues researcher… Continue reading Email forwarding flaws enable attackers to impersonate high-profile domains

Apple patches two zero-days under attack (CVE-2023-41064, CVE-2023-41061)

Apple has patched two zero-day vulnerabilities (CVE-2023-41064, CVE-2023-41061) exploited to deliver NSO Group’s Pegasus spyware. “The exploit chain was capable of compromising iPhones running the latest version of iOS (16.6) without any interact… Continue reading Apple patches two zero-days under attack (CVE-2023-41064, CVE-2023-41061)

Update NOW! Pegasus Spyware Exploit Found in iPhones Running Latest iOS

By Waqas
If you are using an iPhone, it is time to update it to the latest version RIGHT NOW!
This is a post from HackRead.com Read the original post: Update NOW! Pegasus Spyware Exploit Found in iPhones Running Latest iOS
Continue reading Update NOW! Pegasus Spyware Exploit Found in iPhones Running Latest iOS

Spyware Vendor Hacked

A Brazilian spyware app vendor was hacked by activists:

In an undated note seen by TechCrunch, the unnamed hackers described how they found and exploited several security vulnerabilities that allowed them to compromise WebDetetive’s servers and access its user databases. By exploiting other flaws in the spyware maker’s web dashboard—used by abusers to access the stolen phone data of their victims—the hackers said they enumerated and downloaded every dashboard record, including every customer’s email address.

The hackers said that dashboard access also allowed them to delete victim devices from the spyware network altogether, effectively severing the connection at the server level to prevent the device from uploading new data. “Which we definitely did. Because we could. Because #fuckstalkerware,” the hackers wrote in the note…

Continue reading Spyware Vendor Hacked

Liberté, égalité, fraternité: France Loses Its Marbles On Internet Censorship

Over the years we’ve covered a lot of attempts by relatively clueless governments and politicians to enact think-of-the-children internet censorship or surveillance legislation, but there’s a law from France in …read more Continue reading Liberté, égalité, fraternité: France Loses Its Marbles On Internet Censorship

Get Norton 360 Standard on 2 Devices Plus Identity Theft Protection for $24.99

This exclusive bundle includes online dark web monitoring and identity theft support, so don’t miss out on this discounted year-long subscription. Continue reading Get Norton 360 Standard on 2 Devices Plus Identity Theft Protection for $24.99

LetMeSpy Android Spyware Service Shuts Down After Data Breach

By Waqas
LetMeSpy Faces Demise After Devastating Data Breach: Spyware Service Shuts Down Amidst Massive User Data Compromise.
This is a post from HackRead.com Read the original post: LetMeSpy Android Spyware Service Shuts Down After Data Breach
Continue reading LetMeSpy Android Spyware Service Shuts Down After Data Breach

Smashing Security podcast #333: Barbie and the stalking spouse

Carole takes us into the sinister side of Barbie, while Graham describes a stalkerware operation that has been spilling its secrets.

All this and more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Gr… Continue reading Smashing Security podcast #333: Barbie and the stalking spouse