Saturday, 30 June 2018

Researchers Uncover New Attacks Against LTE Network Protocol

If your mobile carrier offers LTE, also known as the 4G network, you need to beware as your network communication can be hijacked remotely. A team of researchers has discovered some critical weaknesses in the ubiquitous LTE mobile device standard that could allow sophisticated hackers to spy on users' cellular networks, modify the contents of their communications, and even can re-route them to


from The Hacker News https://ift.tt/2KylwYJ
via https://ifttt.com/ IFTTT

Friday, 29 June 2018

Typeform, Popular Online Survey Software, Suffers Data Breach

Typeform, the popular Spanish-based online data collection company specializes in form building and online surveys for businesses worldwide, has today disclosed that the company has suffered a data breach that exposed partial data of its some users. The company identified the breach on June 27th, and then quickly performed a full forensic investigation of the incident to identify the source of


from The Hacker News https://ift.tt/2Kz7ERc
via https://ifttt.com/ IFTTT

RAMpage Attack Explained—Exploiting RowHammer On Android Again!

A team of security researchers has discovered a new set of techniques that could allow hackers to bypass all kind of present mitigations put in place to prevent DMA-based Rowhammer attacks against Android devices. Dubbed RAMpage, the new technique (CVE-2018-9442) could re-enable an unprivileged Android app running on the victim's device to take advantage from the previously disclosed Drammer


from The Hacker News https://ift.tt/2tM6aK3
via https://ifttt.com/ IFTTT

Two Arrested for Hacking 700,000 Accounts

Russian law enforcement this week said two individuals were arrested for compromising accounts of loyalty program members from popular websites.

read more



from SecurityWeek RSS Feed https://ift.tt/2yUnktF
via https://ifttt.com/ IFTTT

Месяц до Код ИБ ПРОФИ: Лукацкий готовит киберучения в Сочи

Месяц до Код ИБ ПРОФИ: Лукацкий готовит киберучения в Сочи

24 мастер-класса от гуру ИБ, киберучения и приключения в горах и на море - такова программа сочинского “Кода ИБ ПРОФИ”, который состоится 26-29 июля.



from Новости информационной безопасности - Anti-Malware.ru https://ift.tt/2KkeryX
via https://ifttt.com/ IFTTT

Facebook App Exposes Data of 120 Million Users

A recently addressed privacy bug on Nametests.com resulted in the data of over 120 million users who took personality quizzes on Facebook to be publicly exposed.

read more



from SecurityWeek RSS Feed https://ift.tt/2tWIj9N
via https://ifttt.com/ IFTTT

В коде криптовалюты Tether обнаружена уязвимость

В коде криптовалюты Tether обнаружена уязвимость

Эксперты китайской компании SlowMist сообщили об обнаружении уязвимости в коде Tether, которая способна привести к «двойному расходованию» средств. Tether представляет собой криптовалюту-токен, стоимость которой привязана к стоимости каких-либо фиатных денег.



from Новости информационной безопасности - Anti-Malware.ru https://ift.tt/2KiPYdm
via https://ifttt.com/ IFTTT

Massive Breach at Data Broker Exactis Exposes Millions of Americans

Security Researcher Vinny Troia has discovered another sensitive database exposed on the internet. This one uses Elasticsearch, which allows easy data searching over the internet. Elasticsearch offers security including authentication and role-based access control -- but not all customers deploy it.

read more



from SecurityWeek RSS Feed https://ift.tt/2MA9kY5
via https://ifttt.com/ IFTTT

Researchers Devise Rowhammer Attacks Against Latest Android Versions

A team of researchers from universities worldwide have devised a new set of DMA-based Rowhammer attacks against the latest Android OS, along with a lightweight defense to prevent such attacks on ARM-based devices.

read more



from SecurityWeek RSS Feed https://ift.tt/2KgXAwQ
via https://ifttt.com/ IFTTT

Google Expands Android's Compiler-Based Mitigations

Google this week announced expanded compiler-based mitigations in Android P, in an attempt to make bugs harder to exploit and prevent specific types of issues from becoming vulnerabilities.

read more



from SecurityWeek RSS Feed https://ift.tt/2IBJoci
via https://ifttt.com/ IFTTT