14031 matches found
Millions of Oklahoma Gov Files Exposed by Wide-Open Server
Millions of sensitive files on a storage server belonging to the Oklahoma Department of Securities were left exposed for a week – including credentials, internal docs and personal data stretching back decades. Researchers at UpGuard who discovered the data leak said that the publicly accessible...
CVE-2019-2426
Vulnerability in the Java SE component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...
Drupal Releases Security Updates
Drupal has released security updates addressing vulnerabilities in Drupal 7.x, 8.5.x, and 8.6.x. A remote attacker could exploit these vulnerabilities to take control of an affected system. The National Cybersecurity and Communications Integration Center NCCIC, part of the Cybersecurity and...
Judge: Law Enforcement Can't Force Suspects to Unlock iPhones with FaceID
A U.S. federal judge has ruled that law enforcement can’t force people to unlock their iPhones using the phone’s biometric capabilities – like FaceID or TouchID. The ruling comes from a Jan. 10 filing, for which police were seeking a search warrant as part of a cyber-extortion case. The victim wa...
Information Disclosure
Mozilla Firefox is vulnerable to information disclosure. A privacy flaw was discovered in Firefox. In Private Browsing mode, a web worker could write persistent data to IndexedDB, which was not cleared when exiting and would persist across multiple sessions. A malicious website could exploit the...
Police Can't Force You To Unlock Your Phone Using Face or Fingerprint Scan
Can feds force you to unlock your iPhone or Android phone? ..."NO" A Northern California judge has ruled that federal authorities can't force you to unlock your smartphone using your fingerprints or other biometric features such as facial recognition—even with a warrant. The ruling came in the ca...
Oracle Releases January 2019 Security Bulletin
Oracle has released its Critical Patch Update for January 2019 to address 284 vulnerabilities across multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The National Cybersecurity and Communications Integration Center NCCIC, part...
INTEL SA 00203 - PoC Exploitation CVE-2018-18098
Document Title: =============== INTEL SA 00203 - PoC Exploitation CVE-2018-18098 References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2179 Video: https://www.youtube.com/watch?v=E49kBAouNY Acknowledgements:...
CVE-2018-4217
In macOS High Sierra before 10.13.5, a privacy issue in the handling of Open Directory records was addressed with improved indexing...
CVE-2018-4217
In macOS High Sierra before 10.13.5, a privacy issue in the handling of Open Directory records was addressed with improved indexing...
Open redirect
In macOS High Sierra before 10.13.5, a privacy issue in the handling of Open Directory records was addressed with improved indexing...
CVE-2018-4217
In macOS High Sierra before 10.13.5, a privacy issue in the handling of Open Directory records was addressed with improved indexing...
CVE-2018-4217
CVE-2018-4217 affects Identity Services in macOS High Sierra (prior to 10.13.5). The issue is a privacy disclosure due to improper handling/indexing of Open Directory records. Apple lists this vulnerability among High Sierra 10.13.5 security updates; remediation is to apply the 10.13.5 security u...
Does WhatsApp Have A Privacy Bug That Could Expose Your Messages?
In-short conclusion—Whatsapp service or its 45-days deletion policy doesn't seem to have a bug. For detailed logical explanation, please read below. An Amazon employee earlier today tweeted details about an incident that many suggest could be a sign of a huge privacy bug in the most popular...
Does WhatsApp Have A Privacy Bug That Could Expose Your Messages?
In-short conclusion—Whatsapp service or its 45-days deletion policy doesn't seem to have a bug. For detailed logical explanation, please read below. An Amazon employee earlier today tweeted details about an incident that many suggest could be a sign of a huge privacy bug in the most popular...
At CES, Focus is On ‘Cool Factor’ Not IoT Security
With the Consumer Electronics Show CES afoot this week, headlines are crammed with the offbeat connected products from the show – including everything from a smart belt all the way down to a connected toilet. But one important topic seems to be missing from the troves of CES news and even from th...
Google DNS Service (8.8.8.8) Now Supports DNS-over-TLS Security
Almost every activity on the Internet starts with a DNS query, a key function of the Internet that works as an Internet's directory where your device looks up for the server IP addresses after you enter a human-readable web address e.g., thehackernews.com. Since DNS queries are sent in clear text...
Google DNS Service (8.8.8.8) Now Supports DNS-over-TLS Security
Almost every activity on the Internet starts with a DNS query, a key function of the Internet that works as an Internet's directory where your device looks up for the server IP addresses after you enter a human-readable web address e.g., thehackernews.com. Since DNS queries are sent in clear text...
Biometrics in 2019: Increased Security or New Attack Vector
This year thousands of consumers unwrapped new smartphones and laptops which come with biometric sensors that are intended to protect their data and identities through strong authentication. Apple continues to gain popularity with its iPhone X facial recognition feature while more laptops and...
Juniper Networks Releases Multiple Security Updates
Juniper Networks has released multiple security updates to address vulnerabilities in various Juniper products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The National Cybersecurity and Communications Integration Center NCCIC, part of the...