7226 matches found
Now Stores Must Tell You How They're Tracking Your Every Move
California's new privacy law has spurred a torrent of online notices. But the law is also forcing changes offline, in traditional stores...
CVE-2020-0601
creationtimestamp| type| source ---|---|--- 2020-01-14 07:00:00+00:00| seen| https://msrc.microsoft.com/blog/2020/01/january-2020-security-updates-cve-2020-0601/ 2020-01-14 18:44:30+00:00| seen| https://t.me/alexmakus/3235 2020-01-14 19:15:15+00:00| seen| https://t.me/antichat/7636 2020-01-14...
The vulnerability of the Jira bug tracking system, related to improper code generation management, allows a violator to execute arbitrary code.
The vulnerability of the Jira bug tracking system is related to improper management of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
All the Ways Facebook Tracks You—and How to Limit It
If you have a Facebook account—and even if you don't—the company is going to collect data about you. But you can at least control how it gets used...
Threat hunting in Azure Advanced Threat Protection (ATP)
As members of Microsoft’s Detection and Response Team DART, we’ve seen a significant increase in adversaries “living off the land” and using compromised account credentials for malicious purposes. From an investigation standpoint, tracking adversaries using this method is quite difficult as you...
3 Google Play Store Apps Exploit Android Zero-Day Used by NSO Group
Watch out! If you have any of the below-mentioned file managers and photography apps installed on your Android phone—even if downloaded from the official Google Store store—you have been hacked and being tracked. These newly detected malicious Android apps are Camero, FileCrypt, and callCam that...
ToTok Returned to Google Play Despite ‘Spy Tool’ Claims
Mobile application ToTok has been reinstated to the Google Play app ecosystem, after it was removed last month due to claims that it was being used for government espionage. ToTok, a social app that was released in 2019 and has been downloaded by millions, gained rapid popularity in the United Ar...
WordPress WooCommerce Conversion Tracking plugin <=2.0.4 - Cross-Site Request Forgery (CSRF) to XSS vulnerability
Cross-Site Request Forgery CSRF to XSS vulnerability found in WordPress WooCommerce Conversion Tracking plugin versions =2.0.4. Solution Update the WordPress WooCommerce Conversion Tracking plugin to the latest available version at least 2.0.6...
WooCommerce Conversion Tracking < 2.0.5 - CSRF to XSS
The settings page of the plugin is lacking CSRF checks as well as input sanitisation, leading to stored XSS. ' /...
WooCommerce Conversion Tracking < 2.0.5 - CSRF to XSS
The settings page of the plugin is lacking CSRF checks as well as input sanitisation, leading to stored XSS. PoC...
Hacking School Surveillance Systems
Lance Vick suggesting that students hack their schools' surveillance systems. "This is an ethical minefield that I feel students would be well within their rights to challenge, and if needed, undermine," he said. Of course, there are a lot more laws in place against this sort of thing than there...
A week in security (December 16 – 22)
Last week on Malwarebytes Labs, we signalled that Mac threat detections have been on the rise in 2019, discussed how a new Consumer Online Privacy Rights Act COPRA would empower American users, warned that the Spelevo exploit kit debuts a new social engineering trick, and let our own Statler and...
CVE-2019-8620
A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A device may be passively tracked by its WiFi MAC address...
CVE-2019-8620
A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A device may be passively tracked by its WiFi MAC address...
CVE-2019-8567
A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in iOS 12.2. A device may be passively tracked by its WiFi MAC address...
CVE-2019-8567
A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in iOS 12.2. A device may be passively tracked by its WiFi MAC address...
CVE-2019-8541
A privacy issue existed in motion sensor calibration. This issue was addressed with improved motion sensor processing. This issue is fixed in iOS 12.2, watchOS 5.2. A malicious app may be able to track users between installs...
Code injection
A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in iOS 12.2. A device may be passively tracked by its WiFi MAC address...
Design/Logic Flaw
A privacy issue existed in motion sensor calibration. This issue was addressed with improved motion sensor processing. This issue is fixed in iOS 12.2, watchOS 5.2. A malicious app may be able to track users between installs...
Code injection
A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A device may be passively tracked by its WiFi MAC address...