CVE-2021-38013

Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed a remote attacker who had compromised a WebUI renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2021-25525

Improper check or handling of exception conditions vulnerability in Samsung Pay US only prior to version 4.0.65 allows attacker to use NFC without user recognition...

MultiNer代码问题漏洞

National Library Of The Netherlands / Research MultiNer is used by National Library Of The Netherlands / Research to merge the output of five different Dutch named entity recognition packages into a single answer. A security vulnerability exists in MultiNer that stems from insufficient security...

Massive faceprint scraping company Clearview AI hauled over the coals

Life must be hard for companies that try to make a living by invading people’s privacy. You almost feel sorry for them. Except I dont. The UK’s Information Commissioner’s Office ICO—an independent body set up to uphold information rights—has announced its provisional intent to impose a potential...

A week in security (Nov 22 – Nov 28)

Last week on Malwarebytes Labs How to defend your website against card skimmers Security researchers play peek-a-boo with Conti ransomware server Windows 10 chills out, gives sysadmins a break Please dont buy this! 3 gift card scams to watch out for this Black Friday Millions of GoDaddy customer...

What is facial recognition?

Facebook recently announced it would give up on its facial recognition system. Facebook, or Meta, was using software to automatically identify people in images posted to its social network. Since facial recognition has become an increasingly toxic concept in many circles and Facebook was having...

Chromium: CVE-2021-38013 Heap buffer overflow in fingerprint recognition

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

GOCR Stack Buffer Overflow Vulnerability

GOCR is an open source OCR Optical Character Recognition program. A stack buffer overflow vulnerability exists in measurepitch in pgm2asc.c in GOCR 0.53-20200802 and earlier versions. No detailed vulnerability details are provided at this time...

file security update

5.33-20 - rebuild 1954434 5.33-18 - fix heap-based buffer overflow in cdfreadpropertyinfo CVE-2019-18218 5.33-17 - improve magic for script recognition and other changes 1903531...

Facebook to end facial recognition and delete billions of records

By Deeba Ahmed Facebook has announced that it will shut down its Facial Recognition System and delete the templates of over 1 billion people stored by this feature. This is a post from HackRead.com Read the original post: Facebook to end facial recognition and delete billions of records...

Facebook to Shut Down Facial Recognition System and Delete Billions of Records

Facebook's newly-rebranded parent company Meta on Tuesday announced plans to discontinue its decade-old "Face Recognition" system and delete a massive trove of more than a billion users' facial recognition templates as part of a wider initiative to limit the use of the technology across its...

Imperva Recognized as a Best Place to Work in Israel

It is not easy and takes many things to create a winning workplace, including and certainly not limited to: a vibrant culture, a balanced approach to professional and personal life, career advancement opportunities and, most importantly, a group of talented, world-class professionals who care abo...

Recog: Data Rules Everything Around Me

The recog project — a recognition framework used to identify products, operating systems, and hardware through matching network probe data against its extensive fingerprint collection — has been around for many years. In the beginning, Rapid7 used it internally as part of the Nexpose vulnerabilit...

The European Parliament Voted to Ban Remote Biometric Surveillance

Its not actually banned in the EU yet -- the legislative process is much more complicated than that -- but its a step: a total ban on biometric mass surveillance. To respect "privacy and human dignity," MEPs said that EU lawmakers should pass a permanent ban on the automated recognition of...

Army Testing Facial Recognition in Child-Care Centers

Live video feeds of daycare centers are common, but the Army wants to take their kid-monitoring capabilities to the next level. Under a new pilot program being rolled out at a Fort Jackson, S.C. child-care center, the military is looking for service providers to layer commercially available facia...

The NYPD Had a Secret Fund for Surveillance Tools

Documents reveal that police bought facial-recognition software, vans equipped with x-ray machines, and “stingray” cell site simulators—with no public oversight...

The vulnerability of the Windows Hello face recognition component on Microsoft Windows operating systems allows a perpetrator to bypass security measures.

The vulnerability of the Windows Hello facial recognition component on Microsoft Windows operating systems is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow attackers to bypass security measures...

Using “Master Faces” to Bypass Face-Recognition Authenticating Systems

Fascinating research: "Generating Master Faces for Dictionary Attacks with a Network-Assisted Latent Space Evolution." Abstract: A master face is a face image that passes face-based identity-authentication for a large portion of the population. These faces can be used to impersonate, with a high...

Congratulations to the MSRC 2021 Most Valuable Security Researchers!

The MSRC Researcher Recognition Program offers public thanks and acknowledgement to the researchers who help protect customers through discovering and sharing security vulnerabilities under Coordinated Vulnerability Disclosure. Today, we are excited to recognize this year’s Most Valuable Security...

Congratulations to the MSRC 2021 Most Valuable Security Researchers!

The MSRC Researcher Recognition Program offers public thanks and acknowledgement to the researchers who help protect customers through discovering and sharing security vulnerabilities under Coordinated Vulnerability Disclosure. Today, we are excited to recognize this year’s Most Valuable Security...