Deepfake Creators Are Revictimizing GirlsDoPorn Sex Trafficking Survivors

The most notorious deepfake sexual abuse website is hosting altered videos originally published as part of the GirlsDoPorn operation. Experts say this new low is only the beginning...

Safe Connections Act could help domestic abuse survivors take control of their digital lives

A bill introduced in the US Senate could help domestic abuse and sex trafficking survivors—including those tracked by stalkerware-type applications—regain digital independence through swift, shared phone plan termination and the extension of mobile phone plan subsidies. Titled the Safe Connection...

Defending online anonymity and speech with Eva Galperin: Lock and Code S02E03

This week on Lock and Code, we discuss the top security headlines generated right here on Labs. In addition, we talk to Eva Galperin, director of cybersecurity for Electronic Frontier Foundation, about the importance of protecting online anonymity and speech. In January, the New York Times expose...

FEMA leaks sensitive details of 2.3 million disaster survivors

By Carolina The Department of Homeland Security’s Office of the Inspector General has released a report revealing that FEMA Federal Emergency Management Agency couldn’t protect the private and confidential information of about 2.3 million hurricane survivors. In 2017, residents of Harvey, Maria,...

FEMA Leaked Data From 2.3 Million Disaster Survivors

The Homeland Security Department inspector general released a damning report about FEMA's inability to safeguard the personal info of the people it helped...

Survivors: The Quest® - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Survivors: The Quest® published at the 'play' market has multiple vulnerabilities...

Design/Logic Flaw

The Alien War Survivors aka com.ly.a13.gp application 1.3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...