CVE-2017-2733

Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have an information leak vulnerability due to improper file permission configuration. An attacker tricks a user into installing a malicious application on the smart phone, and the...

Design/Logic Flaw

Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have an information leak vulnerability due to improper file permission configuration. An attacker tricks a user into installing a malicious application on the smart phone, and the...

CVE-2017-2733

Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have an information leak vulnerability due to improper file permission configuration. An attacker tricks a user into installing a malicious application on the smart phone, and the...

PT-2017-15520

Name of the Vulnerable Software and Affected Versions Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 Honor 6X smartphones with software versions earlier than BLN-AL20C00B357 Description The issue is caused by improper file permission configuration, leading to an...

CVE-2017-2733: Exposure of Sensitive Information to an Unauthorized Actor

Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have an information leak vulnerability due to improper file permission configuration. An attacker tricks a user into installing a malicious application on the smart phone, and the...

Equifax Reopens Salary Lookup Service

Equifax has re-opened a Web site that lets anyone look up the salary history of a large portion of the American workforce using little more than a person's Social Security number and their date of birth. The big-three credit bureau took the site down just hours after I wrote about it on Oct. 8, a...

October 17, 2017—KB4041688 (OS Build 14393.1794)

None None...

New Android Ransomware Permanently Changes PIN, Demands Ransom

By Waqas DoubleLocker Android Ransomware Encrypts Data and Changes PIN to Permanently This is a post from HackRead.com Read the original post: New Android Ransomware Permanently Changes PIN, Demands Ransom...

2017 Flare-On Challenge Solutions

Another year, another successful Flare-On Challenge. I’d first like to thank our challenge authors for their hard work developing each of the challenges, and also for writing up their solutions: Challenge 1: Dominik Weber @Invalidhandle Challenge 2: Nhan Huynh Challenge 3: Matt Williams...

New Ransomware Not Just Encrypts Your Android But Also Changes PIN Lock

DoubleLocker—as the name suggests, it locks device twice. Security researchers from Slovakia-based security software maker ESET have discovered a new Android ransomware that not just encrypts users’ data, but also locks them out of their devices by changing lock screen PIN. On top of that:...

Android Lockscreen Patterns Less Secure Than PINs

An academic study set out to prove whether it’s better to protect your Android phone with a PIN or a swipe pattern. The answer is PIN. At least when it comes to proximity attacks, namely someone lurking about trying to guess your PIN or unlock pattern. The study PDF, published Friday by researche...

FAQ: XenMobile Client Properties

Question: What does XenMobile Client properties do? Options to enable/disable client properties Answer : Client properties contain information that is provided directly to Secure Hub on user devices. Client properties are located in the XenMobile console inSettings Client Client Properties. Clien...

Experian Flaw Lets Attacker Obtain Credit Freeze PIN and Access Account

By Waqas Plenty of consumers decided to go for a credit freeze This is a post from HackRead.com Read the original post: Experian Flaw Lets Attacker Obtain Credit Freeze PIN and Access Account...

Experian Site Can Give Anyone Your Credit Freeze PIN

An alert reader recently pointed my attention to a free online service offered by big-three credit bureau Experian that allows anyone to request the personal identification number PIN needed to unlock a consumer credit file that was previously frozen at Experian. Experian's page for retrieving...

Fixing HPKP with Certificate Constraints

This is the third post in my series on HPKP. In my first post I declared HPKP dead, and in my second post I explored the possibility of fixing it by introducing pin revocation. Today I will consider an entirely different approach to make HPKP much safer, by changing how it’s activated. In my...

Authentication flaw

Huawei E5756S before V200R002B146D23SP00C00 allows remote attackers to read device configuration information, enable PIN/PUK authentication, and perform other unspecified actions...

CVE-2015-4629

Huawei E5756S before V200R002B146D23SP00C00 allows remote attackers to read device configuration information, enable PIN/PUK authentication, and perform other unspecified actions...

CVE-2015-4629

Huawei E5756S before V200R002B146D23SP00C00 allows remote attackers to read device configuration information, enable PIN/PUK authentication, and perform other unspecified actions...

PT-2017-6774

Name of the Vulnerable Software and Affected Versions Huawei E5756S versions prior to V200R002B146D23SP00C00 Description The issue allows remote attackers to read device configuration information and enable PIN/PUK authentication, among other unspecified actions. Recommendations For versions prio...

CVE-2015-4629: Undefined Security Weakness

Huawei E5756S before V200R002B146D23SP00C00 allows remote attackers to read device configuration information, enable PIN/PUK authentication, and perform other unspecified actions...