71 matches found
About the security content of iOS 9.3.5
About the security content of iOS 9.3.5 This document describes the security content of iOS 9.3.5. For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on th...
Google Updates CA Trust Mechanisms in Android Nougat
Google last week announced changes in the way it will handle trusted Certificate Authorities in Nougat, the latest version of the Android operating system. The changes are expected to cut into the likelihood of a successful man-in-the-middle attack, or a device falling victim to an...
'DeathRing' Chinese Malware Found Pre-Installed On Several Smartphones
Malware authors are trying hard to create malicious software with more innovative ways to infect victims. A new mobile Trojan horse infection has been discovered by security researchers that comes pre-loaded onto low-cost Chinese-made Android smartphones popular in Asia and Africa. The trojan,...
Android Malware Mines Digital Cryptocurrency
On its surface, the idea of turning a smartphone into a cryptocurrency mining machine sounds novel. But practical and profitable? Not so much. That hasn’t stopped thieves from corrupting a number of popular Android applications for just that purpose, including two on the Google Play store called...
CVE-2013-5026
An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.7 allows remote attackers to execute arbitrary code by triggering the download of, and calls to, an arbitrary DLL file...
Code injection
An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.7 allows remote attackers to execute arbitrary code by triggering the download of, and calls to, an arbitrary DLL file...
CVE-2013-5026
An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.7 allows remote attackers to execute arbitrary code by triggering the download of, and calls to, an arbitrary DLL file...
CVE-2013-5026
CVE-2013-5026 affects National Instruments Lookout 6.5–6.7, where the ActiveX controls lookout650.ocx , lookout660.ocx , and lookout670.ocx allow remote code execution. The root cause is triggering the download of, and calls to, an arbitrary DLL file, enabling an attacker to run arbitrary code on...
CVE-2013-5026: Undefined Security Weakness
An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.7 allows remote attackers to execute arbitrary code by triggering the download of, and calls to, an arbitrary DLL file...
Google Patches QR Code Vulnerability in Google Glass
A Google Glass feature that gives the device the ability to automatically read text also leaves it vulnerable to malicious wireless networks. The feature is made possible by a technology called optical character recognition. It’s this feature that reportedly allows Google Glass to understand...
Hacking Google Glass with QR Code to sniff user data
Researchers at mobile security firm Lookout discovered a security flaw in Google Glass which allowed them to capture data without the user's knowledge, when the user merely took a photo that captured a malicious QR code. Lookout was able to force Google Glass to silently connect to a Wi-Fi access...
Code injection
The Lookout Mobile Security application before 8.17-8a39d3f for Android allows attackers to cause a denial of service application crash via a crafted application that sends an intent to com.lookout.security.ScanTell with zero arguments...
CVE-2013-3579
The Lookout Mobile Security application before 8.17-8a39d3f for Android allows attackers to cause a denial of service application crash via a crafted application that sends an intent to com.lookout.security.ScanTell with zero arguments...
CVE-2013-3579
The Lookout Mobile Security Android app (prior to 8.17-8a39d3f) is vulnerable to a denial-of-service via a crafted application sending an empty intent to com.lookout.security.ScanTell. Root cause: improper handling of a zero-argument intent in the ScanTell component, causing the application to cr...
CVE-2013-3579
The Lookout Mobile Security application before 8.17-8a39d3f for Android allows attackers to cause a denial of service application crash via a crafted application that sends an intent to com.lookout.security.ScanTell with zero arguments...
CVE-2013-3579: Undefined Security Weakness
The Lookout Mobile Security application before 8.17-8a39d3f for Android allows attackers to cause a denial of service application crash via a crafted application that sends an intent to com.lookout.security.ScanTell with zero arguments...
Lookout Mobile Security contains a denial-of-service vulnerability
Overview Lookout Mobile Security version 8.14.1-7fe5f1, and possibly earlier versions, contains a denial-of-service vulnerability. Description Lookout Mobile Security version 8.14.1-7fe5f1 crashes if an intent is sent to com.lookout.security.ScanTell with no arguments. --- Impact A malicious...
'BadNews' Android Malware downloaded up to 9 million times
It appears as if another malware scare has come to Android. Lookout Security said on Friday that it has discovered a new family of malware called BadNews. Malware that avoided detection and made its way onto the Google Play store has been downloaded around 9 million times by users from all over t...