4172 matches found
Alleged Spy App ToTok Puts Apple in a Bind
Apple and Google both banned ToTok after reports that it was a UAE government surveillance tool. After Google reinstated it, Apple has a hard choice to make...
Facebook Cracks Down on Deepfake Videos
Facebook is banning deepfake videos, which stem from a technique of human-image synthesis based on artificial intelligence AI to create fake content. Over the past year, security experts and lawmakers have voiced concerns about malicious deepfake applications, particularly as a vessel for...
ToTok Returned to Google Play Despite ‘Spy Tool’ Claims
Mobile application ToTok has been reinstated to the Google Play app ecosystem, after it was removed last month due to claims that it was being used for government espionage. ToTok, a social app that was released in 2019 and has been downloaded by millions, gained rapid popularity in the United Ar...
Hackers Deface U.S. Gov Website With Pro-Iran Messages
UPDATE A U.S. government website was vandalized late Saturday by hackers who posted images of a bloodied President Donald Trump being punched in the face and pro-Iran messages. The defaced website was the Federal Depository Library Program FDLP website, which makes U.S. federal government...
Iranian hackers deface US government & African bank website
By Waqas Iranian hackers are back in action and this time they have found targets in the US and Africa. Here's what happened: This is a post from HackRead.com Read the original post: Iranian hackers deface US government & African bank website...
Cambridge Analytica scandal: Facebook hit with $1.6 million fine
By Waqas Brazilian Government is not happy with Facebook over the Cambridge Analytica breach. This is a post from HackRead.com Read the original post: Cambridge Analytica scandal: Facebook hit with $1.6 million fine...
Uninstall ToTok, an Alleged Emirati Spy App, From Your Phone Now
A messaging app called ToTok had scores of positive reviews, particularly from users in the UAE. US intelligent officials say it may be spying for that government instead...
Birth Certificate Data Laid Bare on the Web in Multiple States
A third-party government supplier has exposed hundreds of thousands of applications containing birth-certificate data. The trove of information is owned by a company that provides an online platform to state governments – including California, New York and Texas – that allows residents to request...
The Story of Tiversa
The New Yorker has published the long and interesting story of the cybersecurity firm Tiversa. Watching "60 Minutes," Boback saw a remarkable new business angle. Here was a multibillion-dollar industry with a near-existential problem and no clear solution. He did not know it then, but, as he turn...
CISA Pushing U.S. Agencies to Adopt Vulnerability Disclosure Policies
The U.S. government’s cybersecurity agency has issued a draft directive mandating all agencies to develop vulnerability disclosure policies, which would give ethical hackers clear guidelines for submitting bugs found in government systems. Security experts hope that the directive will light a fir...
regulation.tambov.gov.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1025441 Security Researcher devl00p Helped patch 3018 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting regulation.tambov.gov.ru...
NSO Group President Defends Controversial Tactics
In a rare public appearance by Shiri Dolev, the president of the secretive NSO Group Technologies, the company leader vented over what she called “false myths” about the firm. Dolev also took indirect aim at secure messaging platforms, offered by the likes of Facebook, explaining surveillance...
Over 12,000 Google Users Hit by Government Hackers in 3rd Quarter of 2019
As part of its active efforts to protect billions of online users, Google identified and warned over 12,000 of its users who were targeted by a government-backed hacking attempt in the third quarter of this year. According to a report published by Google's Threat Analysis Group TAG, more than 90...
Over 12,000 Google Users Hit by Government Hackers in 3rd Quarter of 2019
As part of its active efforts to protect billions of online users, Google identified and warned over 12,000 of its users who were targeted by a government-backed hacking attempt in the third quarter of this year. According to a report published by Google's Threat Analysis Group TAG, more than 90...
Phishing Trends Position ISPs to Protect Subscribers
Akamai just released the 2019 State of the Internet SOTI security report: Phishing - Baiting the Hook featuring findings from the enterprise and carrier research teams. They've been collaborating for two years to develop better methods for evaluating massive volumes of anonymized, live-streamed D...
saa.gouv.qc.ca Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1020928 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2019-15073
An Open Redirect vulnerability for all browsers in MAIL2000 through version 6.0 and 7.0, which will redirect to a malicious site without authentication. This vulnerability affects many mail system of governments, organizations, companies and universities...
CVE-2019-15072
The login feature in "/cgi-bin/portal" in MAIL2000 through version 6.0 and 7.0 has a cross-site scripting XSS vulnerability, allowing execution of arbitrary code via any parameter. This vulnerability affects many mail system of governments, organizations, companies and universities...
CVE-2019-15071
The "/cgi-bin/go" page in MAIL2000 through version 6.0 and 7.0 has a cross-site scripting XSS vulnerability, allowing execution of arbitrary code via ACTION parameter without authentication. The code can executed for any user accessing the page. This vulnerability affects many mail system of...
Cross site scripting
The "/cgi-bin/go" page in MAIL2000 through version 6.0 and 7.0 has a cross-site scripting XSS vulnerability, allowing execution of arbitrary code via ACTION parameter without authentication. The code can executed for any user accessing the page. This vulnerability affects many mail system of...