IBM Settles Lawsuit Over Weather Channel App Data Privacy

IBM, the owner of the Weather Channel mobile app, has reached a settlement with the Los Angeles city attorney’s office after a 2019 lawsuit alleged that the app was deceiving its users in how it was using their geolocation data. The 2019 lawsuit claimed, the app’s permission prompt for users to...

Senate Bill Would Expand Facial-Recognition Restrictions Nationwide

A bill making its way through the U.S. Senate aims to extend nationwide some of the restrictions on the collection of facial-recognition information already imposed by an Illinois state law, as well as expand private citizens’ legal powers to sue companies that violate them. The news comes as...

Copying a Key by Listening to It in Action

Researchers are using recordings of keys being used in locks to create copies. Once they have a key-insertion audio file, SpiKey's inference software gets to work filtering the signal to reveal the strong, metallic clicks as key ridges hit the lock's pins and you can hear those filtered clicks...

File Upload Vulnerability in 07FLY-CRM of Sichuan Trust Technology Co.

07FLY-CRM CRM system is developed by Zero Takeoff Network, based on the GPLv3 protocol release, for small and medium-sized enterprise management activities, providing customer relationship management CRM, sales and marketing inventory JXC, human resources HRM and other functions. A file upload...

Unauthorized Access Vulnerability in JeewxBoot of Beijing National Torch Information Technology Co.

JeewxBoot is a SpringBoot-based open source WeChat housekeeper system , using SpringBoot2.1.3 Mybatis + Velocity framework technology. Beijing State Torch Information Technology Co. JeewxBoot has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive informati...

mail.mainetechnology.org Improper Access Control vulnerability OBB-1265728

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

XDR: The Next Level of Prevention, Detection and Response [New Guide]

One new security technology we keep hearing about is Extended Detection and Response XDR. This new technology merges multiple prevention and detection technologies on a single platform to better understand threat signals so that you don't need to purchase, integrate, and manage various control an...

Beijing Kuangshi Technology MEGVII Koala Access Control Error Vulnerability

Beijing Kuangshi Technology MEGVII Koala is a set of intelligent real estate solutions dedicated to commercial real estate scenarios from Beijing Kuangshi Technology, which provides front-end image acquisition units, people access management, video surveillance and other functions. A security...

SQL Injection Vulnerability in East Technology Limited's Website Building System

East Technology Limited is a Hong Kong based web design and mobile application company. A SQL injection vulnerability exists in East Technology Limited's website builder system, which can be exploited by attackers to obtain sensitive information from the database...

Logic Flaw Vulnerability in UTS Integrated Threat Probe at Beijing Shenzhou Green Alliance Technology Co.

Green Alliance UTS is equipped with IDS and WAF dual detection engine system, combining threat intelligence, malicious file detection, DDoS detection, Webshell detection and anomalous behavior detection and other means to quickly detect traditional and advanced threats. There is a logic flaw in t...

SQL Injection Vulnerability in Xi'an Bailian Network Technology Co.

Xi'an Bailian Network Technology Co., Ltd's website building system is widely used in bearing, seal, transmission parts, lubrication, motor and other mechanical parts industry. There is a SQL injection vulnerability in the website building system of Xi'an BaiLian Network Technology Co., Ltd, whic...

Control Flow Guard for Clang/LLVM and Rust

As part of our ongoing efforts towards safer systems programming, we’re pleased to announce that Windows Control Flow Guard CFG support is now available in the Clang C/C++ compiler and Rust. What is Control Flow Guard? CFG is a platform security technology designed to enforce control flow...

Control Flow Guard for Clang/LLVM and Rust

As part of our ongoing efforts towards safer systems programming, we’re pleased to announce that Windows Control Flow Guard CFG support is now available in the Clang C/C++ compiler and Rust. What is Control Flow Guard? What is Control Flow Guard? CFG is a platform security technology designed to...

Control Flow Guard for Clang/LLVM and Rust

As part of our ongoing efforts towards safer systems programming, we’re pleased to announce that Windows Control Flow Guard CFG support is now available in the Clang C/C++ compiler and Rust. What is Control Flow Guard? CFG is a platform security technology designed to enforce control flow...

QiHang Media Web Digital Signage 3.0.9 Remote Code Execution Vulnerability

Exploit for hardware platform in category web applications function uploadShellPoC var xhr = new XMLHttpRequest; xhr.open"POST", "http://192.168.1.74:8090/QH.aspx", true; xhr.s...

Explosive technology and 3D printers: a history of deadly devices

Hackers: They’ll turn your computer into a BOMB! "Hackers turning computers into bombs" is a now legendary headline, taken from the Weekly World News. It has rather set the bar for "people will murder you with computers" anxiety. Even those familiar with the headline may not have dug into the sto...

SQL injection vulnerability in the ne***_vi***.asp page of the website building system of Wenzhou Qiaoyu Technology Co.

Wenzhou Qiaoyu Technology Co., Ltd. is an enterprise focusing on network marketing integration services. Wenzhou Qiaoyu Technology Co., Ltd. station-building system nevi.asp page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Shanghai Zhihu Information Technology Co., Ltd. website builder system te***_de*** has SQL injection vulnerability

Shanghai Zhihu Information Technology Co., Ltd. is a technology enterprise focusing on software customization and product development. Shanghai Zhihu Information Technology Co., Ltd. building system tede SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensiti...

SQL Injection Vulnerability in Standard PepsiCo***.ashx Page of RunShen Information Technology (Shanghai) Co.

R&S Information Technology Shanghai Co., Ltd. is a high-tech company specializing in software development and information services. Ltd. SQL injection vulnerability exists in the Standard PepsiCo.ashx page, which can be exploited by attackers to obtain sensitive information from the database...

QiHang Media Web Digital Signage 3.0.9 Arbitrary File Disclosure

QiHang Media Web QH.aspx Digital Signage 3.0.9 Arbitrary File Disclosure Vulnerability Vendor: Shenzhen Xingmeng Qihang Media Co., Ltd. Guangzhou Hefeng Automation Technology Co., Ltd. Product web page: http://www.howfor.com Affected version: 3.0.9.0 Summary: Digital Signage Software. Desc: The...