A group of pentest researchers has demonstrated ability to passively identify session details and perform hijacking, allowing phishing attacks. According to the International Institute of Cyber Security, researchers have found vulnerabilities inRead More →
A hacker managed to download voter’s information. The Tasmanian Electoral Commission states that an attacker still unknown gained access and downloaded a backup file containing voters’ information such as names,Read More →
The sale of zero-day exploits is a very profitable business that most people completely ignore. The International Institute of Cyber Security talks about this practice using the example of Zerodium,Read More →
LTE was supposed to fix security and privacy shortcomings—now it’s broken, too. The Long Term Evolution mobile device standard used by billions of people was designed to fix many ofRead More →
Researchers have found a new variation of the Rowhammer attack technique they have dubbed RAMpage. The vulnerability could allow an adversary to create an exploit to gain administrative control overRead More →
Smartphone’s batteries are a smart device themselves, smart enough to store information about how people use their phones to implement energy-saving mechanisms that result in a higher smartphone performance. TheseRead More →
Data breaches are always bad news, and this is peculiarly bad. Gentoo, a popular Linux distribution (or distro), has suffered the hacking of its repository on GitHub. The bad news is thatRead More →
Pentest specialists argue that social platforms can be a tool used for psychological warfare operations (PSYOPS) and malicious web campaigns, which is why Twitter has implemented new security features to identify andRead More →
Malicious software on third-party customer support product Inbenta Technologies caused the hack, the firm said on Twitter. “Some personal or payment information may have been accessed by an unknown thirdRead More →
During one of my engagements, I discovered some Windows devices that were affected by the MS17-010vulnerability. One of these devices caught my attention as it’s something I haven’t encountered yet –Read More →
The increased deals with cryptocurrencies such as Bitcoin and its various alternatives have led to the creation of coordinated phishing attacks from the so-called “Bitcoin Airdrops”. Computer users look forRead More →
According to Big Brother Watch, a British civil liberties defense organization, Her Majesty’s Revenue and Customs (HMRC) voice identification system has stored voice records from more than 5 million ofRead More →
A severe vulnerability affecting CISCO ASA and Firepower devices is being exploited after an exploit was released online, as revealed by late pentest. According to reports from the company itselfRead More →
Wi-Fi Alliance officially launched WPA3, the next-generation Wi-Fi security standard that, according to them, will eliminate all known security vulnerabilities and wireless attacks that occur today, including KRACK attacks. As pentest expertsRead More →
Fast food franchise PDQ has informed its customers that information of the cards with which they have made their purchases could be compromised due to a security breach in oneRead More →
Last week, the torrent portal The Pirate Bay was put offline and more than five days have passed without the website being online. The Pirate Bay visitors can see a briefRead More →
A new malware was discovered on sale for the amount of 50 dollars in its beta version, but promising the possibility of allowing customers to open their own botshop toRead More →
After issuing a patch, users are encouraged to make sure they are using the latest version of the browser. According to reports of experts in information security training fromRead More →
A researcher specialized in information security training recently discovered an Apple operating system failure that allows anyone with a Lightning cable the ability to bypass the password attempts limit ofRead More →
Information security training specialists report a new ruling from The Supreme Court, establishing that, in most cases, the Government will need an order to maintain long-term location surveillance using cell phone records,Read More →
