WhatsApp Messenger Adds End-to-End Encryption by Default

Good news for all Privacy Lovers!! Finally the wildly popular messaging app WhatsApp has made end-to-end encryption a default feature, stepping a way forward for the online privacy of its users around the world. WhatsApp, most popular messaging app with 600 Million users as of October 2014, has...

Design/Logic Flaw

Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses...

Microsoft Internet Explorer Cross-domain Information Disclosure (MS14-065: CVE-2014-6345)

An Information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to improper enforcement of cross-domain policies. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of Interne...

Chinese Telecom Routes Russian Domestic Internet Traffic through China

Russian Internet traffic, including the domestic one, has continuously been re-routed outside the country due to routing errors by China Telecom, which could result in compromising the security of Russian communications. Internet monitoring service Dyn reported Thursday in a blog post that the...

More than 400 Underground Sites seized by FBI in 'Operation Onymous'

The joint operation by authorities of the U.S. Federal Bureau of Investigation FBI and European law enforcement seized Silk Road 2.0, an alternative to the notorious online illegal-drug marketplace last week, and arrested 26-year-old operator Blake Benthall, but that wasn't the end. US and Europe...

The PCI Enforcement Hammer is Ready to Drop

The time for nervous anticipation for PCI breach response is over …. VISA has issued dramatic PCI Data Security Standard Compliance enforcement guidance for Level 1 and 2 merchants and all Service Providers. Effective January 1st, 2015, noncompliance costs will be applied sooner and will escalate...

AOL Releases Transparency Report Lobbies for USA FREEDOM Act

Noting that Saturday was the 13th anniversary of the passage of the USA PATRIOT Act, the Web giant AOL this week released its latest transparency report, detailing estimations of how many Foreign Intelligence Surveillance Act FISA orders and National Security Letters NSLs it’s received in the las...

Staples Investigating Payment Data Card Breach

The office supply chain Staples Inc. is reportedly looking into a payment card breach, potentially making it the latest in a long line of retail establishments to suffer a compromise over the last year. “Staples is in the process of investigating a potential issue involving credit card data and h...

CVE-2014-4446

Mail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service restart, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a change made by an administrator...

Mobile Device Encryption Could Lead to a 'Very, Very Dark Place', FBI Director Says

FBI Director James Comey said Thursday that the recent movement toward default encryption of smartphones and other devices could “lead us to a very, very dark place.” Echoing comments made by law enforcement officials for the last several decades, Comey said that the advanced cryptosystems...

F5 Networks BIG-IP : GnuTLS vulnerability (SOL15637)

The gnutlsciphertext2compressed function in lib/gnutlscipher.c in GnuTLS 2.12.23 allows remote attackers to cause a denial of service buffer over-read and crash via a crafted padding length. NOTE: this might be due to an incorrect fix for CVE-2013-0169. C Tenable Network Security, Inc. The...

Tyupkin Malware Hacking ATM Machines Worldwide

Money is always a perfect motivation for cyber criminals who tries different tricks to solely target users with card skimmers that steal debit card numbers, but now the criminals are using specialized malware that targets ATM Automated Teller Machine systems to withdraw cash even without the need...

Reverse Incremental – Animation of Method and Retention

Purpose This article is intended to document how Reversed Incremental works, and how its retention is enforced. Reverse Incremental Backup Method For information regarding this Backup Method please review the user guide. Reverse Incremental Restore Point Creation The following is an animation...

Forward Incremental – Animation of Method and Retention

Purpose This article is intended to document how Forward Incremental works, and how its retention is enforced. Solution There are two distinct methods of Forward Incremental: Forever Forward Incremental Forward Incremental with Periodic Fulls Forever Forward Incremental For more information...

FBI to Open Up Malware Investigator Portal to External Researchers

SEATTLE–The FBI has developed an internal malware-analysis tool, somewhat akin to the systems used by antimalware companies, and plans to open the system up to external security researchers, academics and others. The system is known as Malware Investigator and is designed to allow FBI agents and...

FBI Not Happy With Apple & Google's Encryption Policy

Users might have praised the technology companies for efforts to encrypt their latest devices that would prevent law enforcement agencies’ hands on users’ private data, but the FBI is not at all happy with Apple and Google right now. The Federal Bureau of Investigation director, James Comey, said...

Users in Dark about Permissions Granted to Mobile Apps

It’s no secret that mobile applications are a greedy bunch, often grasping for many more permissions than necessary. The UK’s Information Commissioner’s Office ICO this week released the results of a study conducted by the Global Privacy Enforcement Network GPEN that quantified just how bad the...

Home Depot Urges Credit Monitoring Vigilance

Home Depot told its customers today to monitor their bank and credit card accounts for fraud as it continues to investigate the “unusual activity” on its networks that could turn out to be one of the biggest data breaches in U.S. history. “We’re looking into some unusual activity that might...

Home Depot Investigating Massive Data Breach

Home Depot may be the latest retailer to suffer a costly data breach, and if early indications are correct, the hackers may have been on the home giant’s network longer than hackers were on Target’s systems, and a greater number of consumers may be at risk. A Home Depot representative confirmed...

Data Breach Exposes Customer Payment Card Information

Grocery giants Albertsons and SUPERVALU announced yesterday that a data breach may have exposed the credit and debit card information of an unknown number of its customers at various grocery store locations in more than 18 states. Behind Kroger’s, Albertsons is the second largest grocery store...