Crazy! Hacker Implants NFC Chip In His Hand To Hack Android Phones

There is a very sleek line between hacking and security. The security used to protect the public could be misused by hackers against the public itself, and one shouldn’t forget that with the advance in technology, the techniques used by cyber criminals also improves. Today, What hackers need to...

(Mobile Pwn2Own) Google Android Bluetooth Forced Pairing Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Google Android. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Bluetooth application stack allowing for arbitrary Host Controller Interface comman...

Examining the Risks and Advantages of Biohacking

CANCUN – Hannes Sjoblad of the Swedish Biohacking Association throws a mean implant party, the latest of which was held today on stage at the Security Analyst Summit. Povel Torudd, head of European PR at Kaspersky Lab, bravely volunteered to have a NFC implant the side of a grain of rice shot int...

SecurityAdvisory 2015-04-14

The source code contains a logical flaw related to user PIN aka PW1 verification that allows an attacker with local host privileges and/or physical proximity NFC to perform security operations without knowledge of the user’s PIN code...

Smartwatch Hacked... Data Exchange with Smartphone Not So Secure

We are living in an era of smart devices that we sync with our smartphones and make our lives very simple and easy, but these smart devices that inter-operates with our phones could leave our important and personal data wide open to hackers and cybercriminals. Security researchers have demonstrat...

Windows Phone Sandbox Holds Up at Mobile Pwn2Own

The Mobile Pwn2Own hacking contest ended today as did the PacSec Applied Security Conference in Tokyo with hackers unable to gain complete control over a Windows Phone and the latest version of the Android mobile OS. Contest sponsors HP said two competitors, Nico Joly and Juri Aedla, were able to...

British security researchers have found VISA wireless payments vulnerability-vulnerability warning-the black bar safety net

Recently, UK Newcastle University, security researcher in the VISA contactless payment card, found a security vulnerability, exploit the vulnerability the attacker is simply using the phone from someone else's wallet to steal large amounts of cash. Contactless payment card using the encryption ch...

American Express Brings Tokenization to Payment Cards

American Express has taken steps toward lifting the burden from retailers having to store payment-card data with the announcement of its American Express Token Service. The service will replace traditional 16-digit credit card numbers with a digital token. Consumers carrying a card supporting the...

Android / MIUI multiple security vulnerabilities

Browser CSP restrictions bypass is possible, DoS via NFC, Keystore buffer overflow...

Android NFC Service Denial of Service

Android NFC Service Denial of Service ------------------------------------------------------------------ I. Summary NFC Service is a process of Android OS for providing access to NFC functionality, allowing applications to read NDEF message in NFC tags. A flaw has beend found in NFC Service...

MIUI Wifi Connection Message Vulnerability

MIUI Wifi Connection Message Vulnerability I. Summary Wifi Connection Message is written to a NFC tag, which can be touched by a NFC mobile phone for connecting wireless AP automatically. A logic flaw has been found in MIUI that is a Android ROM. The flaw can be used to turn on wifi, with the hel...

MIUI Torch Open Vulnerability

MIUI Torch Open Vulnerability I. Summary com.android.systemui is the corresponding package of MiuiSystemUI.apk, a MIUI system application that manages user interface and other functions. When started by NFC tag, the torch in NFC mobile phone will be open automatically...

Android Bluetooth Pairing Packet Processing Vulnerability（by wangzq from NCNIPC）

I. Summary Bluetooth Pairing Packet is written to a NFC tag, which can be touched by a NFC mobile phone for bluetooth pairing. A logic flaw has been found in some versions of Andorid mobile phone. The flaw can cause NFC phones'bluetooth turned on, regardless of whether the pairing succeeds or not...

Critical Android FakeID Bug Allows Attackers to Impersonate Trusted Apps

There is a critical vulnerability in millions of Android devices that allows a malicious app to impersonate a trusted application in a transparent way, enabling an attacker to take a number of actions, including inserting malicious code into a legitimate app or even take complete control of an...

openSUSE Security Update : kernel (openSUSE-SU-2013:1971-1)

The Linux Kernel was updated to fix various security issues and bugs. - sctp: Use correct sideffect command in duplicate cookie handling bnc826102, CVE-2013-2206. - Drivers: hv: util: Fix a bug in util version negotiation code bnc838346. - vmxnet3: prevent div-by-zero panic when ring resizing...

Ultrasonic Password Security for Google Accounts

Does a Strong Password Guarantee you the Security of your Online Account? If yes, then you should once check out our 'Data breaches' section on the website. A Startup Company, SlickLogin has developed a technology that enables you to login into online accounts using Ultrasonic sound, instead of...

ESXi 5.1 < Build 1483097 Multiple Vulnerabilities (remote check)

The remote VMware ESXi 5.1 host is affected by the following vulnerabilities : - A denial of service vulnerability exists in the bundled OpenSSL library that is triggered when handling OCSP response verification. A remote attacker can exploit this to crash the program. CVE-2013-0166 - An error...

VMSA-2014-0001 VMware ESXi address several security issues (remote check).

VMware ESXi address several security issues. OpenVAS Vulnerability Test $Id: gbVMSA-2014-0001remote.nasl 6769 2017-07-20 09:56:33Z teissa $ VMSA-2014-0001 VMware ESXi address several security issues remote check. Authors: Michael Meyer Copyright: Copyright c 2014 Greenbone Networks GmbH This...

VMware ESXi/ESX address several security issues (VMSA-2014-0001)

VMware ESXi and ESX address several security issues. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMware ESXi address several security issues (VMSA-2014-0001) - Remote Version Check

VMware ESXi address several security issues. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...