1146 matches found
Credential-Stuffing Attack Hits The North Face
The North Face has reset its customers’ passwords after attackers launched a credential-stuffing attack against the popular outdoor outfitter’s website. In a recent data-breach notification, the company told customers that it was alerted to “unusual activity involving its website,”...
Fitbit Spyware Steals Personal Data via Watch Face
A wide-open app-building API would allow an attacker to build a malicious application that could access Fitbit user data, and send it to any server. Kev Breen, director of cyber threat research for Immersive Labs, created a proof-of-concept for just that scenario, after realizing that Fitbit...
face-h.eu Cross Site Scripting vulnerability OBB-1349605
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Headwinds and Tailwinds - Cycling For Climate Awareness in a Global Pandemic
If you told me at the beginning of 2020 that I'd be cycling 250 miles in the remote Upper Peninsula of Michigan, fundraising for an organization called "Climate Ride", and wearing a face mask to go grocery shopping - I would not have believed you. Yet, since March 2020, we've all been living the...
The vulnerability of the FACE component of the Oracle Communications Interactive Session Recorder, related to insufficient validation of input data, allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.
The vulnerability of the FACE component of the Oracle Communications Interactive Session Recorder relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or to modify, add, or delete data...
SQL Injection Vulnerability in Face Recognition Management System of Hanvon Technology Co.
The team is committed to the research and development of face recognition application management system, using face recognition technology as the entry point, combined with Internet technology, cloud computing, big data analysis, cloud storage and other technologies, to develop a series of...
aliciasfacepainting.com Cross Site Scripting vulnerability OBB-1245233
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Friday Squid Blogging: Squid Proteins for a Better Face Mask
Researchers are synthesizing squid proteins to create a face mask that better survives cleaning. And you thought there was no connection between squid and COVID-19. The military thinks this might have applications for self-healing robots. As usual, you can also use this squid post to talk about t...
Facial-Recognition Flop: Face Masks Thwart Virus, Stump Security Systems
Face masks not only have shown in research to slow the spread of COVID-19, they also deter facial-recognition technology from correctly identifying people, according to a new study. New research from the National Institute of Standards and Technology NIST found that even the best of 89 commercial...
About the security content of iOS 13 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
New privacy tool ‘Fawkes’ blocks your images from facial recognition
By Sudais Asif Fawkes was tested against Facial AI including Microsoft Azure Face API... This is a post from HackRead.com Read the original post: New privacy tool 'Fawkes' blocks your images from facial recognition...
CVE-2020-14574
Vulnerability in the Oracle Communications Interactive Session Recorder product of Oracle Communications Applications component: FACE. Supported versions that are affected are 6.1-6.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...
Design/Logic Flaw
Vulnerability in the Oracle Communications Interactive Session Recorder product of Oracle Communications Applications component: FACE. Supported versions that are affected are 6.1-6.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...
Huawei Mate 30 Pro License Issue Vulnerability
Huawei Mate 30 Pro is a smartphone from Chinese company Huawei Huawei. A security vulnerability exists in previous versions of Huawei Mate 30 Pro 10.1.0.150 C00E136R5P3, which stems from the device not adequately verifying user face credentials. An attacker could exploit the vulnerability by...
How to use Signal messenger face blur tool on Android & iOS
By Sudais Asif Signal messenger has introduced a new tool that lets users blur their faces. This is a post from HackRead.com Read the original post: How to use Signal messenger face blur tool on Android & iOS...
ACLU Sues Clearview AI Over Faceprint Collection, Sale
The American Civil Liberties Union ACLU has sued a New York-based startup for amassing a database of biometric face-identification data of billions of people and selling it to third parties without their consent or knowledge The U.S. citizens’-rights watchdog organization has filed suit in the...
Dahua Network Keyboard and Face All-in-One Mainframe with Information Leakage Vulnerability
DH-NHB5000 is a new generation of full-touch network keyboard designed and developed by Dahua Corporation. An information leakage vulnerability exists in the Dahua Network Keyboard and Face All-in-One Host. An attacker can exploit the vulnerability to bypass authentication to obtain sensitive...
Type confusion
The CSS parser khtml/css/cssparser.cpp in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service crash and possibly read memory via a crafted font face source, related to "type confusion."...
CVE-2012-4512
The CSS parser khtml/css/cssparser.cpp in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service crash and possibly read memory via a crafted font face source, related to "type confusion."...
