The vulnerability of the JRockit software platform allows a malicious actor to compromise data privacy remotely.

The vulnerability of the JRockit software platform allows a malicious actor to compromise data confidentiality by using the JCE component...

Voter Database Leak Exposes 154 Million Sensitive Records

White hat hacker Chris Vickery uncovered a database of 154 million U.S. voter profiles on an unprotected server chockfull of sensitive data that includes voter names, addresses, email addresses, phone numbers, gun ownership information, preferences on gay marriage and links to individual social...

Top 4 Data Breaches reported in last 24 Hours

There is no doubt that data breaches are on the rise. Hardly a day goes without headlines about any significant data breach. According to the latest ‘Cyber Security Breaches Survey 2016’ report published by UK government, two-thirds of the biggest firm in the UK have experienced at least a cyber...

Critical Qualcomm flaw puts millions of Android devices at risk

Google has patched a high-severity vulnerability that has been around for the last five years, potentially leaving users' text messages, call histories, and other sensitive data open to snooping. The vulnerability, CVE-2016-2060, affects Android versions 4.3 and earlier that use the software...

CVE-2016-2813

CVE-2016-2813 affects Mozilla Firefox on Android earlier than 46.0. The issue: JavaScript can access device orientation and motion data without adequate restrictions, enabling a remote attacker to infer sensitive information about the device’s physical environment and potentially reveal PIN value...

Anti-Encryption Bill Released, would Kill your Privacy and Security

The United States anti-encryption bill will kill your Privacy. In the wake of the Apple vs. FBI case, two leading Intelligence Committee Senators have introduced an anti-encryption bill that would effectively ban strong encryption. Senators Richard Burr R-NC and Dianne Feinstein D-CA released the...

Uber: Brute Forcing rider-view Endpoint Allows for Counting Number of Active Uber Drivers

m.uber.com has an endpoint at https://m.uber.com/proxy-rt/product/city/rider-view that when called will return a list of nearby vehicles. By iterating through all latitudes and longitudes, it is possible to count the total number of active Uber drivers. The full URL to be called is...

CVE-2016-1780

CVE-2016-1780 affects WebKit in Apple iOS prior to 9.3, where hidden web views can access device orientation and motion data. The root issue allows a crafted web site to read the device’s physical environment information, potentially exposing sensitive data. Public references indicate this is mit...

ISPs Sell Your Data to Advertisers, But FCC has a Plan to Protect Privacy

The Federal Communication Commission FCC has put forward a proposal that aims to protect Internet user's privacy. The proposal pdf will regulate the amount of customers’ online data the Internet Service Providers ISPs are able to collect and sell to the advertising companies. Currently, there is ...

DTE Energy Insight app vulnerable to information exposure

Overview The DTE Energy Insight app API allows an authenticated user to obtain and query certain limited customer information from other customers. Description CWE-200: Information Exposure- CVE-2016-1562The DTE Energy Insight app lets DTE Energy customers track their energy usage. This informati...

uKnowKids Attacks Researcher Over Insecure Database

Child safety firm uKnowKids is blasting a security researcher who discovered the company exposed 1,700 identities of the children they were supposed to be protecting. On Monday, security researcher Chris Vickery alerted uKnowKids, a company that helps parents keep tabs on their kid’s online...

Apple Can Still Read Your End-to-End Encrypted iMessages

If you are backing up your data using iCloud Backup, then you need you watch your steps NOW! In government fight against encryption, Apple has positioned itself as a staunch defender of its user privacy by refusing the federal officials to provide encryption backdoors into its products. When it...

FreeBSD : Bugzilla security issues (54075861-a95a-11e5-8b40-20cf30e32f6d)

Bugzilla Security Advisory During the generation of a dependency graph, the code for the HTML image map is generated locally if a local dot installation is used. With escaped HTML characters in a bug summary, it is possible to inject unfiltered HTML code in the map file which the CreateImagemap...

New vulnerability: the use of a browser Cookie to bypass HTTPS and steal private information-bug warning-the black bar safety net

! Recently, a presence in the major browsers Web cookies in a serious vulnerability is found, it enables secure browsing mode HTTPS is vulnerable to MiTM attacks. In addition, most of the Web sites and popular open source applications may contain Cookie injection vulnerabilities, including: Googl...

Online Automated Tasks: Huginn

Huginn is a system for building agents that perform automated tasks for you online. They can read the web, watch for events, and take actions on your behalf. Huginn’s Agents create and consume events, propagating them along a directed graph. Think of it as a hackable Yahoo! Pipes plus IFTTT on yo...

My Government Doesn't Understand How Encryption and Cyber Security Work

Almost every day or every second day, When I come across various announcements in Newspaper, TV News Channels, and Press releases that... ...Indian Government and related Policy-making organizations are going to set up their so-called "CyberSecurity Task Forces" or drafted a "National Cyber...

This Computer Chip Self-Destructs in 10 Seconds (On Command) to keep Secrets Safe

The Secret Messages are often designed to be destroyed without a trace. In Spy thriller movie “Mission Impossible”, every time Tom Cruise receives a secret message, the last words state - “This Tape message will self-destruct in 5 seconds”...and BOOM! There’s a sudden explosion, and smoke comes o...

The vulnerability of the Berkeley DB database management system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the Data Store component of the Berkeley DB database management system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to compromise the confidentiality, integrity, and accessibility of data...

smashtrax.com XSS vulnerability

Vulnerable URL:...

Facebook Security Checkup Tool Keeps Tabs on Security Settings

Large technology companies have long led their users to security and privacy features. Some security technologies are transparent and are on by default, while others require a little prodding of users to turn them on. Even in an age of enhanced scrutiny of exactly what privacy is and means, and...