Foursquare vulnerability that exposes 45 million users' email addresses

A location based Social Networking platform with 45 million users,'Foursquare' was vulnerable to the primary email address disclosed. Foursquare is a Smartphone application that gives you details of nearby cafes, bars, shops, parks using GPS location and also tells about your friends nearby...

10th Anniversary of the World’s first Mobile Malware 'Cabir'

The year 2014 starts with the formation of new mobile malware like ‘Android.HeHe’, with the ability to steal text messages, intercept phone calls, and other malware such as ‘XXXX.apk’ uses WiFi networks or hotspots to steal information, infected more than 24,000 Devices. But it should not be...

gnupg -- RSA Key Extraction via Low-Bandwidth Acoustic Cryptanalysis attack

Werner Koch reports: CVE-2013-4576 has been assigned to this security bug. The paper describes two attacks. The first attack allows to distinguish keys: An attacker is able to notice which key is currently used for decryption. This is in general not a problem but may be used to reveal the...

Vendor Customizations Lead to Android Security Issues

When Android phone manufacturers tweak devices and customize phones with special software, apps and code, it has a direct effect on the security of each device. In some cases, the changes made can account for more than 60 percent of vulnerabilities found in devices. That’s according to a paper “T...

Turning your iPhone or Android camera into Microscope

Have you ever been wanting to take a picture of something you're looking at under your microscope but you just can't? Well, but now the Microphone Lens turns your iPhone or Android camera phone into a portable handheld microscope. By attaching a lightweight, inexpensive device to the back of a...

Turning your iPhone or Android camera into Microscope

Have you ever been wanting to take a picture of something you're looking at under your microscope but you just can't? Well, but now the Microphone Lens turns your iPhone or Android camera phone into a portable handheld microscope. By attaching a lightweight, inexpensive device to the back of a...

NSA: Steve Jobs is the real Big Brother and iPhone buyers are zombies

As we reported yesterday that, your Smartphone is a goldmine for the US National Security Agency NSA, they have the full access to your Data available on your Smartphones including Android, iPhone and Blackberry. But among other Smartphones, iPhone apparently is the most popular with the National...

NSA: Steve Jobs is the real Big Brother and iPhone buyers are zombies

As we reported yesterday that, your Smartphone is a goldmine for the US National Security Agency NSA, they have the full access to your Data available on your Smartphones including Android, iPhone and Blackberry. But among other Smartphones, iPhone apparently is the most popular with the National...

Cellular IDS Enables Monitoring of BYOD Devices for Malware

Organizations struggle with securing consumer mobile devices in the enterprise because A they don’t own the device; and B mobile traffic often isn’t accessible to network managers making it difficult to scan for infections or anomalous behavior. At DEF CON last weekend, a team of researchers...

Chinese Hackers discovered second Android master key vulnerability

Android Security Squad, the China-based group that uncovered a second Android master key vulnerability that might be abused to modify smartphone apps without breaking their digital signatures. The whole point of digitally signing a document or file is to prove the file hasn't been modified. The...

Samsung Galaxy S4 SMS欺骗漏洞

BUGTRAQ ID: 60756 Samsung Galaxy S是三星的Android系统的智能手机。 Samsung Galaxy S4在Cloud Backup功能中存在SMS欺骗漏洞，攻击者通过发送特制的SMS到受影响设备，利用此漏洞可进行网络钓鱼攻击。 0 Samsung Galaxy S4 厂商补丁： Samsung ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

MobileIron Virtual Smartphone Platform Privilege Escalation

MobileIron Virtual Smartphone Platform Privilege Escalation Exploit 0day ======================================================================== The MobileIron Virtual Smartphone Platform is the first solution to combine data-driven smartphone and tablet management with real-time wireless cost...

MobileIron Virtual Smartphone Platform Privilege Escalation Exploit

Exploit for hardware platform in category remote exploits MobileIron Virtual Smartphone Platform Privilege Escalation Exploit 0day ======================================================================== The MobileIron Virtual Smartphone Platform is the first solution to combine data-driven...

New Android malware forwards incoming messages to hacker

A new type of Android malware that can intercept text messages and forwarding to hackers is discovered by the Russian firm Doctor Web. This is a very serious threat to users, because using this malware attackers can easily get two factor authentication code of your Email or bank accounts. The...

New Android malware forwards incoming messages to hacker

A new type of Android malware that can intercept text messages and forwarding to hackers is discovered by the Russian firm Doctor Web. This is a very serious threat to users, because using this malware attackers can easily get two factor authentication code of your Email or bank accounts. The...

Lock Screen Bypass Flaw Found in Viber for Android

Another day, another smartphone lock screen bypass vulnerability. This time a flaw in a popular messaging application for the Android mobile platform is to blame. Viber, which is similar to Skype in that it allows users to make free phone calls and send instant messages, is vulnerable to a flaw...

CALL FOR PAPERS - The Hackers Conference 2013

The call for papers for The Hackers Conference 2013 is now open. THC2013 is a hacker conference taking place in New Delhi, India on August 25th, 2013. The Hackers Conference is an unique event, where the best of minds in the hacking world, leaders in the information security industry and the cybe...

[SPF v0.1.7] Smartphone Pentest Framework - Support of the SMS shell pivot

The smartphone penetration testing framework, the result of a DARPA Cyber Fast Track project, aims to provide an open source toolkit that addresses the many facets of assessing the security posture of these devices. We will look at the functionality of the framework including information gatherin...

Smartphones cache poses huge risk for Cloud Storage Security

A couple of years ago, the tech world was abuzz about the cloud. Cloud computing refers to computing where the processing or storage takes place on a networked series of computers rather than on the device that you're using. Whether you're using a PC, laptop, tablet, smartphone, television, or...

Smartphones cache poses huge risk for Cloud Storage Security

A couple of years ago, the tech world was abuzz about the cloud. Cloud computing refers to computing where the processing or storage takes place on a networked series of computers rather than on the device that you’re using. Whether you’re using a PC, laptop, tablet, smartphone, television, or...