Island Experiment - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Island Experiment published at the 'play' market has multiple vulnerabilities...

Experiment Z - Zombie Survival - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Experiment Z - Zombie Survival published at the 'play' market has multiple vulnerabilities...

Microsoft's Artificial Intelligence Tay Became a 'Racist Nazi' in less than 24 Hours

Tay, Microsoft’s new Artificial Intelligence AI chatbot on Twitter had to be pulled down a day after it launched, following incredibly racist comments and tweets praising Hitler and bashing feminists. Microsoft had launched the Millennial-inspired artificial intelligence chatbot on Wednesday,...

How-to — Stealing Decryption Key from Air-Gapped Computer in Another Room

Air-gapped computers that are believed to be the most secure computers on the planet have become a regular target for researchers in recent years. Air-gap computers are one that are isolated from the Internet or any other computers that are connected to the Internet or external network, so hacker...

It Works! Google's Quantum Computer is '100 Million Times Faster' than a PC

Announcing the results of its experiment, Google says Quantum Computer is More than 100 Million times faster than a regular PC. Two years ago, Google and NASA National Aeronautics and Space Administration bought a D-Wave 2X quantum computer, which they have been experimenting at the U.S. space...

[SECURITY] Fedora 22 Update: libsedml-0.3.1-4.fc22

C++ library that fully supports SED-ML Simulation Experiment Description Markup Language for SBML as well as CellML models for creation of the description just as for the execution of Simulation Experiments. This project makes use of libSBML XML layer as well as code generation as starting point ...

Apple Safari URI spoofing (CVE-2015-5764)

tl;dr Apple Safari for OS X was prone to URI spoofing vulnerability and more general a user interface spoofing. Apple released security updates for Safari 9 on OS X and assigned CVE-2015-5764. Accidentally this vulnerability was also present in iOS. Instant demo In Safari up to 8.0.8 : go to clic...

Three Politicians Hacked Using Unsecured Wi-Fi Network

If you are one of our readers who follow The Hacker News every update, you probably know that Public WiFi network is a security risk. But many people aren’t aware, including our great politicians. Internet security provider F-Secure carried out an experimental hack against three prominent UK...

ShrimpTest 1.0b2 - admin/experiment-new.php Multiple Unspecified XSS

The shrimptest WordPress plugin was affected by an admin/experiment-new.php Multiple Unspecified XSS security vulnerability...

Malicious Russian Tor Exit Relays Intercepting encrypted Traffic of Facebook Users

Tor is one of the best and freely available privacy software that lets people communicate anonymously online through a series of nodes that is designed to provide anonymity for users and bypass Internet censorship. When you use the Tor software, your IP address remains hidden and it appears that...

Password Strength Testers Work for Important Accounts

Many popular online services have started to deploy password strength meters, visual gauges that are often color-coded and indicate whether the password you’ve chosen is weak or strong based on the website’s policy. The effectiveness of these meters in influencing users to choose stronger passwor...

Symantec Experiment: Half Of Those Who Find Smartphones Don't Return Them

Good Samaritans are few and far between when it comes to lost cell phones, according to the conclusions of a social experiment conducted by security firm Symantec. Smart phones are unlikely to be returned by those who find them, but very likely to be perused for sensitive data including photos,...

Various Banks Cross Site Scripting

Title: Some bank websites that suffer from Cross-site scripting vulnerabilities. Author: Sony and Flexxpoint Data: 21.03.2012 Sony Blog: http://st2tea.blogspot.com Flexxpoint Blog : http://flexxpoint.blogspot.com/ Site: http://insecurity.ro We staged an experiment out of interest. We looked throu...

Security Research : Be friend to anyone on Facebook in 24 hours

Security Research : Be friend to anyone on Facebook in 24 hours "People have simply ignored the threat posed by adding a profile without checking if this profile is true. New Technologies have loopholes, but it is up to the users to be aware of this type of flaw. Social networks can be fantastic,...

freeSSHd 1.0.9 - Key Exchange Algorithm Buffer Overflow

!/usr/bin/env python """ Coded by Tauqeer Ahmad a.k.a 0x-Scientist-x0 ahmadtauqeeratyahoo.com Disclaimer: This Proof of concept exploit is for educational purpose only. Please do not use it against any system without prior permission. You are responsible for yourself for what you do with this cod...