Browsing tag

flaw

Android Flaw Lets Camera Spy On You Even When Your Phone Is Locked

A security flaw in Android OS makes it possible for rogue apps to hijack a user’s smartphone camera and take pictures, record video, audio, and upload those files to an external server — all without users’ knowledge, even when the phone is locked! Cybersecurity firm Checkmarx uncovered these flaws back in July, but the findings […]

WhatsApp, Telegram Vulnerable To ‘Media File Jacking’: Change Your Settings Now!

Instant messaging apps like WhatsApp and Telegram keep your messages encrypted in transit, but once a media file reaches your phone, the same cannot be guaranteed. Researchers from Symantec have demonstrated how a vulnerability in WhatsApp and Telegram can be exploited by hackers to hijack the media files that are sent through these services. How […]

Critical SHAREit Flaw Gives Attackers Full Access To Device Files

Data sharing apps like SHAREit and Xender have transformed the way files are shared, since their release a few years ago. The apps transfer files over wifi which is much faster compared to sending files using Bluetooth. However, a recent report by Threat Post disclosed two major vulnerabilities in the popular file sharing app, SHAREit, which […]

Twitter bug exposed private tweets of Android users to public for years

A security bug in Twitter exposed private tweets of users to the public. The flaw only affected Android users of the Twitter app while iPhone users were not affected. According to Twitter, private tweets of users from November 3, 2014, to January 14, 2019, were exposed. Although the company did not say how many people were affected […]

Thousands of Orange routers are leaking WiFi passwords

This flaw would allow hackers to perform various malicious activities Cybersecurity and ethical hacking experts from the International Institute of Cyber Security Report that a critical vulnerability present in about 20k routers from the manufacturer Orange has resulted in a SSID and WiFi passwords leaking. In addition to the information leaking devices, over 2k routers […]

A bug stored Twitter passwords in plain text so change your password

Twitter, the social network, and online news giant is sending notifications to each and every registered user (336 million in total) urging them to change their account password. This is because a bug in its system saved user passwords on an unprotected internal log in plain text format. Although the bug has been fixed and there […]

Security flaw in Moto G5 Plus allows anyone to bypass lockscreen

A critical security flaw or bug in Motorola Moto G5 Plus lets anyone easily bypass the lockscreen without going through the authentication process. Amazon’s Prime Exclusive program has been running successfully from quite some time now; under this program, Amazon partners with mobile phone vendors to sell their phones on a considerably low price if customers choose to […]

Uber dismissive about security flaw that lets hackers bypass its 2FA

Uber has no plans to fix a critical security flaw in its two-factor authentication (2FA) protocol reported by an IT security researcher. An Indian IT security researcher Karan Saini has discovered a critical security flaw in the two-factor authentication protocol used by the ride-hailing giant Uber to protect user accounts from hijacking and prevent their data from hackers. The […]

chaiOS “Text Bomb” Can Freeze & Crash Your iPhone

A software developer Abraham Masri has managed to identify a new iMessage bug dubbed as chaiOS, which can infect Apple’s iPhone and Mac devices and crashes or freezes them. The developer posted about his findings on GitHub this Tuesday. According to Masri, the vulnerability was identified when he was attempting to break the operating system […]

Researcher reports how to hack Facebook account with Oculus Integration

How to hack a Facebook account is something that almost everyone wants to know – And now, a security researcher has reported to Facebook that Oculus Integration allowed him to hijack Facebook accounts. According to the findings of a security researcher, Oculus app is vulnerable to exploitation because a malicious actor can hack Facebook account […]

Critical Intel AMT Flaw Lets Attackers Hack Laptops in Mere Seconds

It has been a matter of days when we found out about the flaws in AMD, ARM and Intel’s computer microchips that allowed attackers to carry out Spectre and Meltdown attacks. Since these microchips are widely used in almost all desktops/laptops, smartphones and tablets, therefore, the discovery sent out shockwaves among high-profile tech giants including […]

WhatsApp Vulnerability Lets Anyone Spy on Group Chats

A critical vulnerability in WhatsApp has been discovered that lets anyone join the chat and spy on conversations without admin’s permission. With the increasing emphasis on digital privacy, companies are trying their level best to make their services secure and reliable for users. Two years back mobile messaging app WhatsApp was equipped with end-to-end encryption […]

Multiple Intel Processors Generations Hit by Serious Security Flaw

Almost all Intel Processors Generations are impacted by the flaw while Intel CPUs are facing 30% performance hit. A Linux kernel development site LWN has reported that there is a serious hardware bug in modern Intel CPUs due to which an attacker can access low-level kernel memory. The memory normally is protected from higher level access from […]

15-year-old Unpatched Root Access Bug found in Apple’s macOS

An IT security researcher has leaked details on an unpatched Apple’s macOS bug which lets attackers gain root access and take complete control of a targeted device. After a disastrous 2017, where Apple faced all sorts of security-related issues and complaints, the company is in trouble again right from the first day of the New Year! On […]

Two critical and unpatched flaws identified in vBulletin

According to the latest research from Italy based security company TRUELIT’s researcher and an independent security expert, the widely used internet forum software vBulletin has two critical yet unpatched security flaws. One of these flaws can lead to letting an attacker remotely execute malicious code on the application server of vBulletin. It must be noted […]

macOS High Sierra bug lets anyone unlock Mac without password

Apple’s Latest OS High Sierra Plagued With Critical Security Vulnerability Allowing Anyone To Login Into Mac Without A Password. Lemi Ergin, a Turkey-based software developer has discovered a critical security bug in Apple’s recently released operating system macOS High Sierra. The flaw was revealed to the public via Twitter. According to his tweet, this flaw is […]

iOS Flaw Makes Apple ID Passwords Prone to Phishing Attacks

According to the findings of Felix Krause, a mobile app developer and founder of Fastlane, there is a flaw in iOS that is potentially dangerous for the security of users’ passwords. In his blog post, Krause explained that cybercriminals could use pop-up dialog boxes to carry out phishing attacks so that an unsuspecting user could […]

Microsoft Patches 85 Flaws, One Allowed FinFisher Spyware Installation

Microsoft Releases Patch for Dangerous .NET Vulnerability in Latest Security Updates. Microsoft has finally patched a vulnerability in Microsoft Windows that was used by law enforcement agencies to target Windows users in Russia. The patch, (OS Build 15063.608), was part of Microsoft’s monthly “Patch Tuesday” series containing security updates for 85 different flaws including the […]

Researchers bought MacBook for $1 using critical vulnerabilities

Why buy expensive MacBook Pro when you can get it for $1? But then you will be the bad guy. The IT security researchers at ERPScan discovered a bunch of critical vulnerabilities in SAP Point-of-Sales systems (SAP POS), a client/server point-of-sale (POS) solution allowing them to buy an expensive MacBook for just $1. According to […]

Critical vulnerability lets hackers play with safety system of modern cars

According to the latest research from a collaborative team of researchers from Linklayer Labs, Politecnico di Milano and Trend Micro’s Forward-looking Threat Research (FTR) the modern vehicles are all plagued with a vulnerability that allows a denial-of-service (DoS) attack to be carried out. This vulnerability is so extensive that it would need a generation of cars […]

Siemens medical scanner on Windows 7 vulnerable; patch coming soon

German Firm Siemens will Update PET Scanner Software as DHS Issues Security Threat to Machines. Cyber-attacks on medical equipment are intensifying every passing day. The latest to join the list of unsecured medical equipment is the Positron Emission Tomography scanners or PET scanners manufactured by the Munich based company Siemens. These scanners require Microsoft Windows […]