Patched Flaw in Bosch Diagnostic Dongle Allowed Researchers to Shut Off Engine

Two vulnerabilities were identified in Bosch’s Drivelog Connect OBD-II dongle and smartphone app that allowed researchers to shut off the engine of a vehicle. One of the issues was patched via server-side fix, Bosch said in an April 13 statement, while the other in the dongle itself will be handl...

Phone Hack Uses Sensors To Steal PINs

University researchers have created a method to steal a smartphone user’s PIN by leveraging sensor data generated by the targeted phone. Researchers say the method has a 74 percent success rate when it comes to accurately determining four-digit PIN data inputted by a phone’s owner. Researchers fr...

Hackers Can Steal Your Passwords Just by Monitoring SmartPhone Sensors

Do you know how many kinds of sensors your smartphone has inbuilt? And what data they gather about your physical and digital activities? An average smartphone these days is packed with a wide array of sensors such as GPS, Camera, microphone, accelerometer, magnetometer, proximity, gyroscope,...

Baseband Zero Day Exposes Millions of Mobile Phones to Attack

MIAMI—A previously undisclosed baseband vulnerability impacting Huawei smartphones, laptop WWAN modules and IoT components was revealed Thursday at the Infiltrate Conference by researcher Ralf-Phillip Weinmann, managing director at security firm Comsecuris. In one attack scenario, the vulnerabili...

Millions Of Smartphones Using Broadcom Wi-Fi Chip Can Be Hacked Over-the-Air

Millions of smartphones and smart gadgets, including Apple iOS and many Android handsets from various manufacturers, equipped with Broadcom Wifi chips are vulnerable to over-the-air hijacking without any user interaction. Just yesterday, Apple rushed out an emergency iOS 10.3.1 patch update to...

Somebody is watching you: IP camera, TV and Emma Watson’s smartphone

Today I want to talk today about privacy in a most natural sense. You probably have an internet-connected device with camera an microphone: smartphone, tablet, smart TV, ip camera, baby monitor, etc. - Can it be used to record video/audio and spy on you? - Of course, yes! - Only government and...

7 Things That Happened After WikiLeaks Dumped The CIA Hacking Files

This week WikiLeaks published "Vault 7" — a roughly 8,761 documents and files claiming to detail surveillance tools and tactics of the Central Intelligence Agency CIA. The leak outlined a broad range of flaws in smartphones and other devices that the agency uses to intercept communications and sp...

Frotcom for Smartphone - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Frotcom for Smartphone published at the 'play' market has multiple vulnerabilities...

Security Advisory - Camera DOS Vulnerability in ION Memory Management Module of Huawei Smart Phone

A denial of service DoS vulnerability exists in the ION memory management module of some Huawei mobile phones. An attacker may trick a user into installing a malicious app to send specific parameters to a Huawei mobile phone. Successful exploit could cause the system to restart. Vulnerability ID:...

Researchers Show How to Steal Tesla Car by Hacking into Owner's Smartphone

New technology is always a little scary, so are Smart Cars. From GPS system and satellite radio to wireless locks, steering, brakes, and accelerator, today vehicles are more connected to networks than ever, and so they are more hackable than ever. It's not new for security researchers to hack...

Pre-installed Backdoor On 700 Million Android Phones Sending Users' Data To China

Do you own an Android smartphone? You could be one of those 700 Million users whose phone is secretly sending text messages to China every 72 hours. You heard that right. Over 700 Million Android smartphones contain a secret 'backdoor' that surreptitiously sends all your text messages, call log,...

Teach you how to use the exploit to ROOT an Android phone-bug warning-the black bar safety net

As mobile the rapid development of Internet, smart phones, tablet PCs and other intelligent terminal equipment gradually popular, and slowly integrated into our lives. However at the same time the smartphone security issues are also increasingly prominent, the mobile payment vulnerabilities, mobi...

Android development APP end common security vulnerability interpretation-sensitive information disclosure vulnerability-vulnerability warning-the black bar safety net

As is known, Android system because of its open-source, open, flexible feature allows the smartphone industry with the rapid progress, the cut-off 2 0 1 5 in the fourth quarter, Android smartphone market share reached 8 0. 7%, but at the same time, Android Open, Open Source advantage from another...

iTrack Easy Man-in-the-Middle Attack Vulnerability

iTrack Easy is a multifunctional Bluetooth device. The device supports connecting with apps on your smartphone to find lost or misplaced things and more. A security vulnerability exists in iTrack Easy. An attacker could exploit this vulnerability to conduct a man-in-the-middle attack...

Search Warrant Targets Fingerprints to Crack Open iPhones

Civil libertarians and security experts say a Department of Justice search warrant goes too far in seeking fingerprint data to crack open smartphones. The warrant in question would allow law enforcement to search a Lancaster, Calif., residence for an undisclosed number of smartphones. The warrant...

Security Advisory - Multiple Security Vulnerabilities in Driver of Huawei Smart Phones

There are two stack overflow vulnerabilities in video driver. An attacker may trick a user into installing a malicious application and the application can send given parameter to video driver to crash the system or escalate user privilege. Vulnerability ID: HWPSIRT-2016-08056 and HWPSIRT-2016-080...

High Precision WiFi Indoor Positioning Framework: FIND

High Precision WiFi Indoor Positioning Framework The Framework for Internal Navigation and Discovery FIND allows you to use your Android smartphone or WiFi-enabled computer laptop or Raspberry Pi or etc. to determine your position within your home or office. You can easily use this system in plac...

Code injection

The Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564, CHM-TL00C01 before CHM-TL00C01B564, and CHM-TL00C00 before CHM-TL00HC00B564 allows attackers to cause a denial of service system crash or gain privileges via a crafted application, a different...

Code injection

The Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564, CHM-TL00C01 before CHM-TL00C01B564, and CHM-TL00C00 before CHM-TL00HC00B564 allows attackers to cause a denial of service system crash or gain privileges via a crafted application, a different...

CVE-2016-6182

CVE-2016-6182 affects Huawei Honor 4C devices via the Camera driver. Affected software variants include CHM-UL00C00 before CHM-UL00C00B564, CHM-TL00C01 before CHM-TL00C01B564, and CHM-TL00C00 before CHM-TL00HC00B564. The documented impact is a denial of service (system crash) or privilege escalat...