2252 matches found
New Air-Gap Attack Uses MEMS Gyroscope Ultrasonic Covert Channel to Leak Data
A novel data exfiltration technique has been found to leverage a covert ultrasonic channel to leak sensitive information from isolated, air-gapped computers to a nearby smartphone that doesn't even require a microphone to pick up the sound waves. Dubbed GAIROSCOPE, the adversarial model is the...
Can You Secure Your Smartphone with a Proxy?
By Owais Sultan A proxy can help you bypass restrictions and access blocked websites. It can also help you stay anonymous online, which is useful if you want to avoid being tracked by governments or advertisers. This is a post from HackRead.com Read the original post: Can You Secure Your Smartpho...
Xiaomi Phone Bug Allowed Payment Forgery
Smartphone maker Xiaomi, the world’s number three phone maker behind Apple and Samsung, reported it has patched a high-severity flaw in its “trusted environment” used to store payment data that opened some of its handsets to attack. Researchers at Check Point Research revealed last week in a repo...
Anonymous Source Leaks 4TB of Cellebrite Data After Cyberattack
By Waqas Cellebrite is an Israel-based smartphone hacking or cracking firm that previously made headlines for unlocking iPhone devices for… This is a post from HackRead.com Read the original post: Anonymous Source Leaks 4TB of Cellebrite Data After Cyberattack...
Mobile Cybersecurity Firm Cirotta Launches Anti-Hacking Phone Cases
By Deeba Ahmed Israeli Mobile Cybersecurity Startup Cirotta has launched smartphone cases that the company claims to provide complete protection while… This is a post from HackRead.com Read the original post: Mobile Cybersecurity Firm Cirotta Launches Anti-Hacking Phone Cases...
Overview of Top Mobile Security Threats in 2022
Your smartphone is your daily companion. The chances are that most of our activities rely on them, from ordering food to booking medical appointments. However, the threat landscape always reminds us how vulnerable smartphones can be. Consider the recent discovery by Oversecured, a security startu...
smartphone.lexpress.fr Cross Site Scripting vulnerability OBB-2686834
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Malicious code in pod-smartphone-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4871abc535226467611588874cd2d8858a140b4a2c5f82134459753587cd51e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5392 Malicious code in pod-smartphone-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4871abc535226467611588874cd2d8858a140b4a2c5f82134459753587cd51e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Cops Will Be Able to Scan Your Fingerprints With a Phone
Contactless fingerprinting uses a smartphone camera to capture your prints—and opens up a whole new set of privacy concerns...
Bluetooth Signals Can Be Used to Track Smartphones, Say Researchers
Researchers warn Bluetooth signals can be used to track device owners via a unique fingerprinting of the radio signal. The technique was presented via a paper presented at IEEE Security and Privacy conference last month by researchers at the University of California San Diego. The paper suggests...
Open-xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2022-62756)
Open-xchange OX App Suite is a web-based cloud desktop environment from Open-Xchange Open-xchange, a US-based company. The environment allows users to more intuitively manage email, tasks, files, etc. A cross-site scripting vulnerability exists in OX App Suite version 7.10.4 and earlier, which...
Remotely Controlling Touchscreens
Researchers have demonstrated controlling touchscreens at a distance, at least in a laboratory setting: The core idea is to take advantage of the electromagnetic signals to execute basic touch events such as taps and swipes into targeted locations of the touchscreen with the goal of taking over...
Critical UNISOC Chip Vulnerability Affects Millions of Android Smartphones
A critical security flaw has been uncovered in UNISOC's smartphone chipset that could be potentially weaponized to disrupt a smartphone's radio communications through a malformed packet. "Left unpatched, a hacker or a military unit can leverage such a vulnerability to neutralize communications in...
Attackers Can Use Electromagnetic Signals to Control Touchscreens Remotely
Researchers have demonstrated what they call the "first active contactless attack against capacitive touchscreens." GhostTouch, as it's called, "uses electromagnetic interference EMI to inject fake touch points into a touchscreen without the need to physically touch it," a group of academics from...
A Guide to Using VPNs on Your Smartphone
By Waqas A VPN these days is a must as we know it. The recent growth of VPN use has… This is a post from HackRead.com Read the original post: A Guide to Using VPNs on Your Smartphone...
Your Phone May Soon Replace Many of Your Passwords
Apple, Google and Microsoft announced this week they will soon support an approach to authentication that avoids passwords altogether, and instead requires users to merely unlock their smartphones to sign in to websites or online services. Experts say the changes should help defeat many types of...
Using Pupil Reflection in Smartphone Camera Selfies
Researchers are using the reflection of the smartphone in the pupils of faces taken as selfies to infer information about how the phone is being used: For now, the research is focusing on six different ways a user can hold a device like a smartphone: with both hands, just the left, or just the...
FirmWire -b Full-System Baseband Firmware Emulation Platform For Fuzzing, Debugging, And Root-Cause Analysis Of Smartphone Baseband Firmwares
FirmWire is a full-system baseband firmware analysis platform that supports Samsung and MediaTek. It enables fuzzing, root-cause analysis, and debugging of baseband firmware images. See theFirmWire documentation to get started! Experiments & Missing Parts? Upon a vendor's request, the current...