6783 matches found
Securus lets cops perform real-time cellphone tracking of US Mobile Users
By Waqas We all are well-aware of the pervasive ways governments employ This is a post from HackRead.com Read the original post: Securus lets cops perform real-time cellphone tracking of US Mobile Users...
PoS Malware ‘TreasureHunter’ Source Code Leaked
Source code for the point-of-sale malware called TreasureHunter has been leaked, according to researchers who said the release offers them unique insights into the malware, but also gives them pause as they brace for expected variants. Not just was TreasureHunter’s source code leaked, but so was...
Configuring Imperva SecureSphere for GDPR Compliance: Part One
Time is running out. 23 days until GDPR enforcement The GDPR effective date is less than a month away and, given the significant risk and potential costs associated with a failure to comply, organizational readiness efforts continue to mount. GDPR non-compliance penalties can be severe up to 79...
ThaiCERT Seizes Hidden Cobra Server Linked to GhostSecret, Sony Attacks
Thailand’s Computer Emergency Response Team ThaiCERT has seized a server operated by the North Korea-linked Hidden Cobra APT, which is used to control the global GhostSecret espionage campaign. The campaign is still ongoing. ThaiCERT said in an alert on Wednesday that it is working with McAfee an...
chromium-browser: CSP bypass
Incorrect enforcement of CSP for tags in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass content security policy via a crafted HTML page...
F5 BIG-IP PEM Denial of Service Vulnerability (CNVD-2018-07870)
F5 BIG-IP is an all-in-one network appliance that integrates network traffic management, application security management, load balancing, etc. PEM is one of the policy enforcement managers. A security vulnerability exists in the F5 BIG-IP PEM. An attacker could exploit this vulnerability to cause...
Impact Of Chat Service Breach Expands To Best Buy, Kmart
The number of companies coming forward as victims of a data breach – that potentially exposed hundreds of thousands of credit card payment information – has expanded to include Best Buy and Kmart. Last week, software service provider 247.ai, a company that provides online chat services for Delta,...
CVE-2018-9234
GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey...
Take these steps to stay safe from counterfeit software and fraudulent subscriptions
This post is authored by Matt Lundy, Assistant General Counsel, Microsoft. Software piracy and fraudulent subscriptions are serious, industry-wide problems affecting consumers and organizations around the world. In 2016, 39 percent of all software installed on computers was not properly licensed,...
Apple Mac OS X Security Updates (HT208692)-02
Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Under Armour Reports Massive Breach of 150 Million MyFitnessPal Accounts
UPDATE Fitness apparel firm Under Armour said 150 million users of its MyFitnessPal app are victims in a breach exposing user names, email addresses and hashed passwords. The company said personal identifiable information such as credit card numbers and social security numbers were not part of th...
Unlocking iPhones with Dead People's Fingerprints
It's routine for US police to unlock iPhones with the fingerprints of dead people. It seems only to work with recently dead people...
F5 BIG-IP PEM Denial of Service Vulnerability
F5 BIG-IP is an all-in-one network appliance that integrates network traffic management, application security management, load balancing, etc. PEM is one of the policy enforcement managers. A security vulnerability exists in F5 BIG-IP PEM versions 13.0.0 through 13.1.0.3 and 12.0.0 through...
ATM hacker behind $1 billion malware heists arrested in Spain
By Waqas In a joint operation, Europol along with the law enforcement authorities from Belarus, This is a post from HackRead.com Read the original post: ATM hacker behind $1 billion malware heists arrested in Spain...
GreyKey iPhone Unlocker
Some details about the iPhone unlocker from the US company Greyshift, with photos. Little is known about Grayshift or its sales model at this point. We don't know whether sales are limited to US law enforcement, or if it is also selling in other parts of the world. Regardless of that, it's highly...
CVE-2018-8930
The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient enforcement of Hardware Validated Boot, aka MASTERKEY-1, MASTERKEY-2, and MASTERKEY-3...
A Mirai Botnet Postscript: Lessons Learned
The fall 2016 Mirai botnet compromised more than 300,000 IoT devices as part of a massive DDoS attack. After the crippling attack, Flashpoint and Akamai worked together with law enforcement to help bring those behind the botnet attack to justice. Threatpost’s Tom Spring sits down with Flashpoint’...
GrayKey iPhone unlocker poses serious security concerns
Ever since the case of the San Bernadino shooter pitted Apple against the FBI over the unlocking of an iPhone, opinions have been split on providing backdoor access to the iPhone for law enforcement. Some felt that Apple was aiding and abetting a felony by refusing to create a special version of...
EUVD-2018-1698
Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, Microsoft Excel 2013 SP1, Microsoft Excel 2016, Microsoft Office 2016 Click-to-Run and Microsoft Office 2016 for Mac allow a security feature bypass vulnerability due to how macro settings are enforced, aka "Microsoft Office Excel Security Featu...
