126 matches found
CVE-2021-3145
In Ionic Identity Vault before 5, a local root attacker on an Android device can bypass biometric authentication...
CVE-2018-21062
An issue was discovered on Samsung mobile devices with N7.x and O8.x software. When biometric authentication is disabled, an attacker can view Streams content e.g., a Gallery slideshow of a locked Secure Folder via a connection to an external device. The Samsung ID is SVE-2018-11766 August 2018...
The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems allows attackers to perform spoofing attacks.
The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems is related to insufficient detection or processing of adversarial input anomalies. Exploiting this vulnerability can allow attackers to perform spoofing attacks...
The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems allows a perpetrator to circumvent existing security restrictions.
The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...
Android's New Identity Check Feature Locks Device Settings Outside Trusted Locations
Google has launched a new feature called Identity Check for supported Android devices that locks sensitive settings behind biometric authentication when outside of trusted locations. "When you turn on Identity Check, your device will require explicit biometric authentication to access certain...
Сrimeware and financial cyberthreats in 2025
Kaspersky's Global Research and Analysis Team constantly monitors known and emerging cyberthreats directed at the financial industry, with banks and fintech companies being the most targeted. We also closely follow threats that aim to infiltrate a wider range of industries, namely ransomware...
Insights and highlights from DEF CON 32
TL; DR Event Dates : August 8-11, 2024, in Las Vegas. PTP Presentations : Windows Hello : Our Ceri Coburn with Outsider Security's Dirk-Jan Mollema revealed vulnerabilities in biometric authentication. Maritime Security : Paul Brownridge discussed vulnerabilities in maritime systems and...
CVE-2023-3938 Bypassing ZkTeco-based OEM devices/ZKTeco biometric authentication system via SQLi in QR code
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ZkTeco-based OEM devices allows an attacker to authenticate under any user from the device database. This issue affects ZkTeco-based OEM devices ZkTeco ProFace X, Smartec ST-FR043, Smartec...
CVE-2023-3938 Bypassing ZkTeco-based OEM devices/ZKTeco biometric authentication system via SQLi in QR code
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ZkTeco-based OEM devices allows an attacker to authenticate under any user from the device database. This issue affects ZkTeco-based OEM devices ZkTeco ProFace X, Smartec ST-FR043, Smartec...
Vulnerabilities fixed in Owncloud
Vulnerabilities have been fixed in Owncloud. A malicious party could exploit the vulnerabilities to cause a denial-of-service cause, or to bypass authentication and gain access to the victim's data. Owncloud has released updates to fix the vulnerabilities in Owncloud. For more information, see:...
PIN-Stealing Android Malware
This is an old piece of malware--the Chameleon Android banking Trojan--that now disables biometric authentication in order to steal the PIN: The second notable new feature is the ability to interrupt biometric operations on the device, like fingerprint and face unlock, by using the Accessibility...
New iPhone Security Features to Protect Stolen Devices
Apple is rolling out a new "Stolen Device Protection" feature that seems well thought out: When Stolen Device Protection is turned on, Face ID or Touch ID authentication is required for additional actions, including viewing passwords or passkeys stored in iCloud Keychain, applying for a new Apple...
New Flaws in Fingerprint Sensors Let Attackers Bypass Windows Hello Login
A new research has uncovered multiple vulnerabilities that could be exploited to bypass Windows Hello authentication on Dell Inspiron 15, Lenovo ThinkPad T14, and Microsoft Surface Pro X laptops. The flaws were discovered by researchers at hardware and software product security and offensive...
The vulnerability of biometric authentication functions in operating systems iPadOS, iOS, and macOS allows attackers to disclose protected information.
The vulnerability of biometric authentication functions in operating systems iPadOS, iOS, and macOS lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by these systems...
PT-2023-6036 · Apple · Macos Monterey +4
Name of the Vulnerable Software and Affected Versions: macOS Monterey versions prior to 12.7 iOS versions prior to 17 iPadOS versions prior to 17 macOS Ventura versions prior to 13.6 iOS versions prior to 16.7 iPadOS versions prior to 16.7 Description: An out-of-bounds read issue was addressed wi...
About the security content of macOS Monterey 12.7
About the security content of macOS Monterey 12.7 This document describes the security content of macOS Monterey 12.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...
About the security content of iOS 16.7 and iPadOS 16.7
About the security content of iOS 16.7 and iPadOS 16.7 This document describes the security content of iOS 16.7 and iPadOS 16.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...
About the security content of macOS Ventura 13.6
About the security content of macOS Ventura 13.6 This document describes the security content of macOS Ventura 13.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...
PT-2023-3124 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Windows Hello biometric authentication function of Windows operating systems. This can be exploited to execute arbitrary code...
AI voice cracks telephone banking voice recognition
Voice ID is slowly rolling out across various banks worldwide as a way to perform user authentication over the phone. However, questions remain about just how secure it is. Now that we have freely available artificial intelligence AI happily replicating peoples voices, could it be a security risk...