Facebook Will Limit Your WhatsApp Features For Not Accepting Privacy Policy

WhatsApp on Friday disclosed that it won't deactivate accounts of users who don't accept its new privacy policy rolling out on May 15, adding it will continue to keep reminding them to accept the new terms. "No one will have their accounts deleted or lose functionality of WhatsApp on May 15 becau...

Exploit for Code Injection in Voipmonitor

CVE-2021-30461 VOIP RCE Technical details https://ssd-disclos...

Facebook bans Signal ads that reveal the depth of what it knows about you

Most of our readers are well aware of the fact that the big tech corporations, especially those that run social media know a great deal about us and our behavior. But it rarely hits home how much personal data they have about us and how they can guess, quite correctly, even more. Lots more. Signa...

Facebook blocks Signal from using ads to show Instagram data collection

By Habiba Rashid Signal attempted to use the Facebook ad program to show how much data is being collected by Instagram to push targeted ads and got banned. This is a post from HackRead.com Read the original post: Facebook blocks Signal from using ads to show Instagram data collection...

Don’t Buy Into Facebook’s Ad-Tracking Pressure on iOS 14.5

The company tells Apple users that tracking helps keep those platforms “free of charge,” but opting out now doesn't mean paying up later...

A week in security (April 19 – 25)

Last week on Malwarebytes Labs, we interviewed Youssef Sammouda, a 21-year-old bug bounty hunter who is focused on finding vulnerabilities on Facebook. We looked into the CodeCov supply-chain attack, the vulnerabilities in Pulse Secure VPN that are being actively exploited by attackers, and the...

A New Facebook Bug Exposes Millions of Email Addresses

A recently discovered vulnerability discloses user email addresses even when they’re set to private...

Facebook Busts Palestinian Hackers' Operation Spreading Mobile Spyware

Facebook on Wednesday said it took steps to dismantle malicious activities perpetrated by two state-sponsored hacking groups operating out of Palestine that abused its platform to distribute malware. The social media giant attributed the attacks to a network connected to the Preventive Security...

Palestinian Hackers Tricked Victims to Install iOS Spyware

The groups used social engineering techniques on Facebook to direct targets to a wide range of malware, including custom tools...

Facebook ads used in spreading Facebook Messenger phishing scam

By Waqas So far, the phishing scam has targeted users in 80 countries. This is a post from HackRead.com Read the original post: Facebook ads used in spreading Facebook Messenger phishing scam...

Interview with a bug bounty hunter: Youssef Sammouda

Behind the scenes there are many people working in cyber-security that make the internet a safer place. Youssef Sammouda is one of these people. He has submitted at least a hundred reports to Facebook which have been resolved, making Facebook a safer platform along the way. Generally speaking,...

CVE-2021-24028

An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2021.02.22.00...

CVE-2021-24028

An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2021.02.22.00...

Design/Logic Flaw

An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2021.02.22.00...

WordPress Plugin Cross-Site Request Forgery Vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . Cross-site request forgery vulnerability exists in the...

CVE-2021-24028

CVE-2021-24028 : A flaw in Facebook Thrift’s table-based serialization causes an invalid free, which can crash the application and potentially allow code execution. Affected software is Facebook Thrift prior to v2021.02.22.00. Remediation: upgrade to v2021.02.22.00 or newer. Note: exploitation de...

CVE-2021-24028

An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2021.02.22.00...

CVE-2021-24028

An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2021.02.22.00...

CVE-2021-24028: Release of Invalid Pointer or Reference

An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2021.02.22.00...

PT-2021-15652

Name of the Vulnerable Software and Affected Versions: Facebook Thrift versions prior to 2021.02.22.00 Description: The issue is caused by an invalid free in Thrift's table-based serialization, which can lead to application crashes or potentially result in code execution or other undesirable...