805 matches found
The vulnerability in the Google Chrome browser’s user interface allows a hacker to conceal the secure user interface.
The vulnerability of the user interface in full-screen mode of the Google Chrome browser is related to deficiencies in data storage. Exploiting this vulnerability allows a malicious actor to conceal the secure user interface by using a specially crafted HTML page...
EFF Talks the Corporate Surveillance of Consumers
You can’t protect your privacy if you don’t know how it’s being violated. That’s the essence of a report by the Electronic Frontier Foundation that shines a bright disinfecting light on how corporations are collecting data on consumers. Think Facebook-like data collection on steroids and you begi...
110 Nursing Homes Cut Off from Health Records in Ransomware Attack
A ransomware outbreak has besieged a Wisconsin based IT company that provides cloud data hosting, security and access management to more than 100 nursing homes across the United States. The ongoing attack is preventing these care centers from accessing crucial patient medical records, and the IT...
Vimeo Slapped With Lawsuit Over Biometrics Privacy Policy
Vimeo, the popular ad-free video platform, is facing a lawsuit that alleges it stored people’s facial biometrics without their consent or knowledge. The lawsuit, which was filed on Sept. 20, claims Vimeo violated the Illinois Biometrics Information Privacy Act BIPA. This is a law that imposes...
The vulnerability of microprogrammed software in Moxa MGate MB3170, MB3180, MB3270, MB3280, MB3480, and MB3660 protocols arises from the unencrypted storage of confidential information, allowing attackers to gain unauthorized access to protected data.
The vulnerability of the microprogrammed software of Moxa MGate MB3170, MB3180, MB3270, MB3280, MB3480, and MB3660 lies in the unencrypted storage of confidential information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the protected...
TGI Fridays Delivers Customer Indigestion Over Data Exposure
Customers of TGI Fridays Australia were “strongly recommended” to change their MyFridays membership rewards program passwords. According to an email sent to customers this week, the company had inadvertently left sensitive loyalty program data exposed on the internet. News of the leaky server...
Spam and phishing in Q2 2019
Quarterly highlights Spam through Google services In the second quarter of 2019, scammers were making active use of cloud-based data storage services such as Google Drive and Google Storage to hide their illegal content. The reasoning behind this is simple: a link from a legitimate domain is seen...
[SECURITY] Fedora 29 Update: gnupg2-2.2.17-1.fc29
GnuPG is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440 and the S/MIME standard as described...
DCMS Practical Guidelines. Actionable information
The DCMS guidelines for IoT security are an excellent set of recommendations. They help developers secure devices by outlining the basic ways one can prevent common security weaknesses from being present in their devices and infrastructure. The recommendations are well thought out, and encourage...
Unpatched Flaws in IoT Smart Deadbolt Open Homes to Danger
UPDATE Researchers have uncovered vulnerabilities in a popular smart deadbolt could allow attackers to remotely unlock doors and break into homes. The manufacturer behind the smart lock, Hickory Hardware, has deployed patches to the affected apps on the Google Play Store and Apple App Store. The...
[SECURITY] Fedora 30 Update: gnupg2-2.2.17-1.fc30
GnuPG is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440 and the S/MIME standard as described...
The vulnerability of the SCALANCE X switch’s microprogramming software, related to incorrect data storage formatting, allows a intruder to restore passwords.
The vulnerability of the SCALANCE X microcontroller’s software is related to incorrect storage of user credentials. Exploiting this vulnerability could allow an intruder to retrieve passwords from the device access to the device’s configuration files is required...
IBM Patches Critical, High-Severity Flaws in Spectrum Protect
IBM has disclosed critical and high-severity vulnerabilities in Spectrum Protect, Big Blue’s security tool under the umbrella of its Spectrum data storage software branding. The most severe of these flaws could cause a remote attacker to execute arbitrary code on impacted systems. Overall, IBM...
CVE-2019-12763
The Security Camera CZ application through 1.6.8 for Android stores potentially sensitive recorded video in external data storage, which is readable by any application...
CVE-2019-12763
CVE-2019-12763 affects the Security Camera CZ Android app up to version 1.6.8. The vulnerability is due to recorded video being stored in external storage, which is readable by any other app, enabling potential information disclosure. The connected sources (NVD/Red Hat/CVE records) confirm the st...
The vulnerability of the Enterprise Resource Management System “Galaktika ERP” lies in the fact that it stores user accounting data in an open manner, allowing a malicious actor to access and disclose the accounting information of privileged users.
The vulnerability of the Galaktika ERP resource management system lies in the fact that information related to user account data is stored publicly. This information is privileged administrator-sensitive and used for configuring software. Exploiting this vulnerability could allow a malicious acto...
Gmail wittingly storing your online purchase data for years
By Waqas Google knows "what, when, where & how much" about your online shopping but claims it does not use the data for advertisement. Gmail is home to more than 1.5 billion users which makes it a lucrative service for Google whose business model demands data collected from users' online searches...
Vulnerabilities in financial mobile apps put consumers and businesses at risk
Security hubris. It’s the phrase we use to refer to our feeling of confidence grounded on assumptions we all have but may not be aware of or care to admit about cybersecurity—and, at times, privacy. It rears its ugly head when 1 we share the common notion that programmers know how to code securel...
