CVE-2021-3718

CVE-2021-3718 describes a denial-of-service issue in some ThinkPad systems where enabling the Enhanced Biometrics BIOS setting can cause the machine to crash. Public details indicate the impact is availability (system crash) with a physical attack vector and no user interaction required per NVD m...

Lenovo ThinkPad 安全漏洞

Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. The ThinkPad suffers from a security vulnerability that stems from the fact that when the Enhanced Biometrics setting is enabled in the BIOS, the vulnerability could cause the system to crash...

PT-2021-21556

Name of the Vulnerable Software and Affected Versions ThinkPad models affected versions not specified Description A denial of service issue was reported in some ThinkPad models. This issue could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS. Recommendations At th...

CVE-2021-3718: Improper Handling of Undefined Values

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS...

Facebook to Shut Down Facial Recognition System and Delete Billions of Records

Facebook's newly-rebranded parent company Meta on Tuesday announced plans to discontinue its decade-old "Face Recognition" system and delete a massive trove of more than a billion users' facial recognition templates as part of a wider initiative to limit the use of the technology across its...

The vulnerability of the “ASSaD-ID” biometrics system’s software lies in the improper restriction on XML links to external objects, which allows a perpetrator to carry out an SSRF attack.

The vulnerability of the “ASSaD-ID” biometrics system’s software is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack and execute arbitrary code within the system...

Securing mobile devices. A timely reminder

While home working might now be the norm for some, more and more people are going back to their place of work on a more regular basis. If you’re commuting again or if you’re responsible for securing your people’s devices it’s a good idea to revisit and review your security admin for mobile device...

You Can Now Sign-in to Your Microsoft Accounts Without a Password

Microsoft on Wednesday announced a new passwordless mechanism that allows users to access their accounts without a password by using Microsoft Authenticator, Windows Hello, a security key, or a verification code sent via SMS or email. The change is expected to be rolled out in the coming weeks...

Unauthorized Access Vulnerability in web3.0 of Central Time Attendance Machine of Entropy Base Technology Co.

Entropy Base Technology Co., Ltd Entropy Base Technology is a national high-tech enterprise specializing in providing smart identity verification, smart entrance/exit management and smart office products and solutions with biometrics as the core technology. Entropy Base Technology Co., Ltd. china...

New API Lets App Developers Authenticate Users via SIM Cards

Online account creation poses a challenge for engineers and system architects: if you put up too many barriers, you risk turning away genuine users. Make it too easy, and you risk fraud or fake accounts. The Problem with Identity Verification The traditional model of online identity –...

Weak Password Vulnerability in the web management platform of China Control Time & Attendance Machine

CCTC Intelligent Technology Co., Ltd. generally refers to Entropy Base Technology Co., Ltd. which is a globally recognized company with biometrics as its core technology. A weak password vulnerability exists in the web-based management platform of ZhongControl Time and Attendance Machine, which c...

Stored XSS Vulnerability in E-ZKEco pro Time & Security Granular Management Platform

hereinafter referred to as: Entropy Base Technology is a world-renowned enterprise with biometrics as its core technology, and is committed to the empowerment of biometrics core technology and the empowerment of intelligent entrance/exit software platforms for people, vehicles, and things, etc. T...

Unauthorized Access Vulnerability in ZKECO's Time & Security Management Platform

hereinafter referred to as: Entropy Base Technology is a national high-tech enterprise specializing in providing intelligent identity verification, intelligent entrance/exit management and intelligent office products and solutions with biometrics as the core technology. Unauthorized access...

A Post-Data Privacy World and Data-Rights Management

The reality is that today, almost everyone is being tracked and monitored 24/7 with cameras recording our expressions, interactions and speech to determine what we might be thinking, where we are going and who we are meeting. While privacy differs from nation to nation and culture to culture, one...

How one data scientist is pioneering techniques to detect security threats

Data science is an increasingly popular field of study that’s relevant to every industry. When Maria Puertas Calvo was a student, she never imagined that one day she would pioneer data science techniques to detect security threats. She started her Microsoft career on the Safety Platform team,...

How one data scientist is pioneering techniques to detect security threats

Data science is an increasingly popular field of study that’s relevant to every industry. When Maria Puertas Calvo was a student, she never imagined that one day she would pioneer data science techniques to detect security threats. She started her Microsoft career on the Safety Platform team,...

Weak Password Vulnerability in Bioventa V5000

Based on hybrid biometrics technology, BioRadar V5000 provides a comprehensive management platform for intelligent security that integrates human, vehicle and object inspection. A weak password vulnerability exists in BioRadar V5000, which can be exploited by attackers to obtain sensitive...

Top 4 Best and Safest Types of Biometrics

By Uzair Amir The use of biometrics has revolutionized the security game with lots of options available, but what are the safest types of biometrics technology you can use? This is a post from HackRead.com Read the original post: Top 4 Best and Safest Types of Biometrics...

How bad bots are targeting the healthcare sector

Credential cracking, or password spraying, is one of the most effective ways for cybercriminals to get access to user accounts. It refers to the brute-force automated cracking, or pairing of usernames and passwords by using sophisticated high-speed bots. According to a National Cyber Awareness...

Researchers Uncover Novel Way to De-anonymize Device IDs to Users' Biometrics

Researchers have uncovered a potential means to profile and track online users using a novel approach that combines device identifiers with their biometric information. The details come from a newly published research titled "Nowhere to Hide: Cross-modal Identity Leakage between Biometrics and...