Got the security controls wrong in OT and maritime? Watch as engineers work around them

Industrial control systems security is slowly improving, partly a result of attention from regulators and lawmakers. However, we often see security controls implemented that don’t take account of the unique challenges that engineers looking after OT environments face. We see controls brought in...

Clearview AI banned from selling facial recognition data in the US

Clearview AI, a facial recognition software and surveillance company, is permanently banned from selling its faceprint database within the United States. The company also cannot sell its database to state and law enforcement entities in Illinois for five years. This is a historic win for the...

Samsung Confirms Data Breach After Hackers Leak Galaxy Source Code

Samsung on Monday confirmed a security breach that resulted in the exposure of internal company data, including the source code related to its Galaxy smartphones. "According to our initial analysis, the breach involves some source code relating to the operation of Galaxy devices, but does not...

CVE-2022-23849

The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make failed biometric authentication attempts...

CVE-2022-23849

The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make failed biometric authentication attempts...

CVE-2022-23849

The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make failed biometric authentication attempts...

Authentication flaw

The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make failed biometric authentication attempts...

CVE-2022-23849

The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make failed biometric authentication attempts...

CVE-2022-23849

The CVE-2022-23849 affects Devolutions Password Hub for iOS prior to 2021.3.4. A biometric lock authentication bypass allows an attacker to access the app by rapidly issuing failed biometric attempts. Impact is the ability to access the application with partial confidentiality/ integrity/availabi...

PT-2022-16290 · Devolutions · Devolutions Password Hub

Name of the Vulnerable Software and Affected Versions: Devolutions Password Hub for iOS versions prior to 2021.3.4 Description: The biometric lock in the application allows attackers to access it due to an authentication bypass issue. This can be exploited by rapidly making failed biometric...

IRS: Selfies Now Optional, Biometric Data to Be Deleted

The U.S. Internal Revenue Service IRS said Monday that taxpayers are no longer required to provide facial scans to create an account online at irs.gov. In lieu of providing biometric data, taxpayers can now opt for a live video interview with ID.me, the privately-held Virginia company that runs t...

Facebook sued for siphoning facial recognition data without consent

Ken Paxton, the Attorney General of Texas, recently filed a lawsuit against Facebooks parent company, Meta, for harvesting the facial recognition data of millions of Texan residents—for a decade. Paxton filed the lawsuit on Monday in the states Harrison County District Court. The suit contains...

Facebook Agrees to Pay $90 Million to Settle Decade-Old Privacy Violation Case

Meta Platforms has agreed to pay $90 million to settle a lawsuit over the company's use of cookies to allegedly track Facebook users' internet activity even after they had logged off from the platform. In addition, the social media company will be required to delete all of the data it illegally...

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software lies in the lack of authentication mechanisms, which allows attackers to bypass the authentication process.

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software is related to the absence of authentication. Exploiting this vulnerability could allow a malicious actor to bypass authentication and cause service failures...

IRS To Ditch Biometric Requirement for Online Access

The Internal Revenue Service IRS said today it will be transitioning away from requiring biometric data from taxpayers who wish to access their records at the agencys website. The reversal comes as privacy experts and lawmakers have been pushing the IRS and other federal agencies to find less...

Shadow Credentials

Microsoft has introduced Windows Hello for Business WHfB to replace traditional password based authentication with a key based trust model. This implementation uses PIN or… Continue reading - Shadow Credentials...

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software, related to buffer overflow in the stack, allows a hacker to gain remote access to the device.

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to gain remote access to the device...

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software lies in the lack of authentication mechanisms, which allows attackers to bypass the authentication process.

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software is related to the absence of authentication. Exploiting this vulnerability could allow a malicious actor to bypass authentication and cause service failures...

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software, related to buffer overflow in the queue, allows a intruder to gain remote access to the device.

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software is related to buffer overflow attacks. Exploiting this vulnerability could allow attackers to gain remote access to the device...

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software relates to the possibility of it escaping the directory structure. This allows attackers to read/write device files.

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software relates to the possibility of it escaping from the directory structure. Exploiting this vulnerability could allow a malicious actor to remotely perform file reading/writing operations on the device...