Is It Legal for Cops to Force You to Unlock Your Phone?

Because the relevant Supreme Court precedents predate the smartphone era, the courts are divided on how to apply the Fifth Amendment...

How to Switch to Signal and Bring All your Texts With You

Thinking of boosting your SMS security by switching to Signal? These tips make sure your messages come with you—even to a new phone...

Beijing Tianying Jiuzhou Network Technology Co., Ltd. flipping novels APP there are logic flaws vulnerability

Flip Novel App is a reading app that allows you to read original novels. Beijing Tianying Jiuzhou Network Technology Co., Ltd Flip Novel APP has a logic flaw vulnerability. Attackers can use the vulnerability to arbitrarily bind other people's cell phone numbers that are not bound to the APP and...

Mail.ru: Брутфорс sms кода подтверждения для смены номера телефона в аккаунте LootDog.

SMS code for phone number change in lootdog.io was not sufficiently protected against bruteforce...

Tangalanga - The Zoom Conference Scanner Hacking Tool

Zoom Conference scanner. This scanner will check for a random meeting id and return information if available. Usage This are all the possible flags: tangalanga \ -token=user-token \ default: env TOKEN user token to use. -colors=false \ default: true enable/disable colors -censor=true \ default:...

How Covid-19 Contact Tracing Works on Your Phone

Developers are working on track-and-trace systems to keep infection levels low. The apps aren't here yet, but here's what they do—and how you can enable them...

Wallpaper that Crashes Android Phones

This is interesting: The image, a seemingly innocuous sunset or dawn sky above placid waters, may be viewed without harm. But if loaded as wallpaper, the phone will crash. The fault does not appear to have been maliciously created. Rather, according to developers following Ice Universe's Twitter...

Joomla Resources Directory (JRD) Portal Suffers Data Breach

Joomla, one of the most popular Open-source content management systems CMS, last week announced a new data breach impacting 2,700 users who have an account with its resources directory JRD website, i.e., resources.joomla.org. The breach exposed affected users' personal information, such as full...

CVE-2020-1809

HUAWEI Mate 10 smartphones with versions earlier than 10.0.0.143C00E143R2P4 have an information disclosure vulnerability. The attacker could wake up voice assistant then do a series of crafted voice operation, successful exploit could allow the attacker read certain files without unlock the phone...

The vulnerability of the configuration for connecting microprogramming software-based Cisco IP phones to web servers allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the configuration for connecting microprogrammed IP telephones to web servers is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure by using a specially created HTTP...

Huawei Mate 20 License Issue Vulnerability (CNVD-2020-31279)

Huawei Mate 20 is a smartphone from Chinese company Huawei Huawei. An authorization issue vulnerability exists in previous versions of Huawei Mate 20 10.0.0.195 SP31C00E74R3P8, which stems from the Healthy Use of Phone feature not adequately limiting the user's usage hours. An attacker can exploi...

Phone Halo TrackR Denial of Service Vulnerability

Phone Halo TrackR is a lost key finding device from Phone Halo USA. A security vulnerability exists in Phone Halo TrackR version 2020-05-06 and earlier. An attacker can exploit the vulnerability to trigger an alert feature that results in a denial of service when the battery is depleted...

Xiaomi tech Xiaomi 6 phone has denial of service vulnerability

Xiaomi Mi Phone 6 is a flagship device officially announced on April 19, 2017 by Xiaomi. Xiaomi Technology Xiaomi Phone 6 has a denial of service vulnerability that can be exploited by attackers to cause the device to crash...

Cisco IP Phone Denial of Service (CVE-2020-3161)

A denial of service vulnerability exists in Cisco IP Phone. A remote unauthenticated attacker can exploit this vulnerability to cause a denial of service condition on an affected system...

The vulnerability of the Microsoft Your Phone Companion App for Android, which involves authentication procedures that are flawed, allows unauthorized access to protected information and increases the privileges of attackers.

The vulnerability of the Microsoft Your Phone Companion App for Android, which is used for synchronizing and transferring files between the phone and a PC, is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to gain unauthorized access to...

Ukrainian Police Arrest Hacker Who Tried Selling Billions of Stolen Records

The Ukrainian police have arrested a hacker who made headlines in January last year by posting a massive database containing some 773 million stolen email addresses and 21 million unique plaintext passwords for sale on various underground hacking forums. In an official statement released on...

Ukrainian Police Arrest Hacker Who Tried Selling Billions of Stolen Records

The Ukrainian police have arrested a hacker who made headlines in January last year by posting a massive database containing some 773 million stolen email addresses and 21 million unique plaintext passwords for sale on various underground hacking forums. In an official statement released on...

CVE-2020-12860

COVIDSafe through v1.0.17 allows a remote attacker to access phone name and model information because a BLE device can have four roles and COVIDSafe uses all of them. This allows for re-identification of a device, and potentially identification of the owner's name...

Design/Logic Flaw

COVIDSafe through v1.0.17 allows a remote attacker to access phone name and model information because a BLE device can have four roles and COVIDSafe uses all of them. This allows for re-identification of a device, and potentially identification of the owner's name...

CVE-2020-12860

COVIDSafe through v1.0.17 allows a remote attacker to access phone name and model information because a BLE device can have four roles and COVIDSafe uses all of them. This allows for re-identification of a device, and potentially identification of the owner's name...