ACLU Sues Clearview AI Over Faceprint Collection, Sale

The American Civil Liberties Union ACLU has sued a New York-based startup for amassing a database of biometric face-identification data of billions of people and selling it to third parties without their consent or knowledge The U.S. citizens’-rights watchdog organization has filed suit in the...

The vulnerability of Google Chrome’s speech recognition function allows a perpetrator to trigger a service failure.

The vulnerability of Google Chrome’s speech recognition function is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

About the security content of iCloud for Windows 7.19

About the security content of iCloud for Windows 7.19 This document describes the security content of iCloud for Windows 7.19. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

ddacables.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1166166 Security Researcher geeknik Helped patch 8938 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting ddacables.com website and...

Lock and Code S1Ep6: Recognizing facial recognition’s flaws with Chris Boyd

This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to Chris Boyd, lead malware intelligence analyst at Malwarebytes, about facial recognition technology—its early history, its proven failures at accuracy, an...

Description of the cumulative update for Office Communications Server 2007 R2, Mediation Server: November 2010

Describes the Office Communications Server 2007 R2, Mediation Server issue that is fixed in the Office Communications Server 2007 R2, Mediation Server update package that is dated November 2010.SummaryThis article describes the Microsoft Office Communications Server 2007 R2, Mediation Server issu...

Fingerprint cloning: Myth or reality?

Phone, computer fingerprint scanners can be defeated with 3-D printing By Paul Rascagneres and Vitor Ventura. Executive summaryPasswords are the traditional authentication methods for computers and networks. But passwords can be stolen. Biometric authentication seems the perfect solution for that...

Google Android FPC Iris TZ App Out-of-Bounds Write Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA in the U.S. The FPC Iris TZ App is one of the iris recognition components. A security vulnerability exists in the FPC Iris TZ App in Android. An attacker can exploit the vulnerability to elevate...

Google Android FPC Iris TZ App Out-of-Bounds Read Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA in the U.S. The FPC Iris TZ App is one of the iris recognition components. A security vulnerability exists in the FPC Iris TZ App in Android. An attacker can exploit the vulnerability to elevate...

Google Android FPC Iris TZ App Out-of-Bounds Read Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA in the U.S. The FPC Iris TZ App is one of the iris recognition components. A security vulnerability exists in the FPC Iris TZ App in Android. The vulnerability can be exploited by an attacker to...

About the security content of iTunes 12.10.5 for Windows - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

latviainside.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1127847 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting latviainside.com website...

Facial Recognition for People Wearing Masks

The Chinese facial recognition company Hanwang claims it can recognize people wearing masks: The company now says its masked facial recognition program has reached 95 percent accuracy in lab tests, and even claims that it is more accurate in real life, where its cameras take multiple photos of a...

Covid-19 Privacy Poll: Phone Tracking, Public Health and Surveillance

As the coronavirus pandemic accelerates, authorities worldwide are plotting ways to flatten the curve of infection rates using potentially privacy-busting measures such as phone tracking, facial recognition and other tech. In this Threatpost poll, we want your take on whether sacrificing personal...

CVE-2020-10847

An issue was discovered on Samsung mobile devices with P9.0 Galaxy S8 and Note8 software. Facial recognition can be spoofed. The Samsung ID is SVE-2019-16614 February 2020...

CVE-2020-10847

An issue was discovered on Samsung mobile devices with P9.0 Galaxy S8 and Note8 software. Facial recognition can be spoofed. The Samsung ID is SVE-2019-16614 February 2020...

Code injection

An issue was discovered on Samsung mobile devices with P9.0 Galaxy S8 and Note8 software. Facial recognition can be spoofed. The Samsung ID is SVE-2019-16614 February 2020...

CVE-2020-10847

CVE-2020-10847 affects Samsung mobile devices running P(9.0) on Galaxy S8 and Note8, where the facial recognition system can be spoofed. The core issue is a vulnerability in biometric authentication allowing an attacker to bypass security controls. The connected Red Hat and NVD entries confirm th...

CVE-2020-10847

An issue was discovered on Samsung mobile devices with P9.0 Galaxy S8 and Note8 software. Facial recognition can be spoofed. The Samsung ID is SVE-2019-16614 February 2020...

CVE-2020-10847: Improper Authentication

An issue was discovered on Samsung mobile devices with P9.0 Galaxy S8 and Note8 software. Facial recognition can be spoofed. The Samsung ID is SVE-2019-16614 February 2020...