Found: 280 Android apps that use OCR to steal cryptocurrency credentials
Optical Character Recognition converts passwords shown in images to machine-readable text.
US charges Russian military officers for unleashing wiper malware on Ukraine
by Dan Goodin
WhisperGate campaign targeted Ukrainian critical infrastructure and allies worldwide.
Zyxel warns of vulnerabilities in a wide range of its products
by Dan Goodin
Most serious vulnerabilities carry severity ratings of 9.8 and 8.1 out of a possible 10.
YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel
by Dan Goodin
Sophisticated attack breaks security assurances of the most popular FIDO key.
City of Columbus sues man after he discloses severity of ransomware attack
by Dan Goodin
Mayor said data was unusable to criminals; researcher proved otherwise.
Commercial spyware vendor exploits used by Kremlin-backed hackers, Google says
by Dan Goodin
Findings undercut pledges of NSO Group and Intgellexa their wares won’t be abused.
Unpatchable 0-day in surveillance cam is being exploited to install Mirai
by Dan Goodin
Vulnerability is easy to exploit and allows attackers to remotely execute commands.
Hackers infect ISPs with malware that steals customers’ credentials
by Dan Goodin
Zero-day that was exploited since June to infect ISPs finally gets fixed.
Android malware steals payment card data using previously unseen technique
by Dan Goodin
Attacker then emulates the card and makes withdrawals or payments from victim’s account.
Novel technique allows malicious apps to escape iOS and Android guardrails
by Dan Goodin
Web-based apps escape iOS “Walled Garden” and Android side-loading protections.
“Something has gone seriously wrong,” dual-boot systems warn after Microsoft update
by Dan Goodin
Microsoft said its update wouldn’t install on Linux devices. It did anyway.
Windows 0-day was exploited by North Korea to install advanced rootkit
by Dan Goodin
FudModule rootkit burrows deep into Windows, where it can bypass key security defenses.
Nashville man arrested for running “laptop farm” to get jobs for North Koreans
by Dan Goodin
Laptop farm gave the impression North Korean nationals were working from the US.
512-bit RSA key in home energy system gives control of “virtual power plant”
by Dan Goodin
It took $70 and 24 hours for Ryan Castellucci to gain access to 200 MW of capacity.
Students scramble after security breach wipes 13,000 devices
by Dan Goodin
Mass wiping occurs after hack of mobile device management platform.
Mac and Windows users infected by software updates delivered over hacked ISP
by Dan Goodin
DNS poisoning attack worked even when targets used DNS from Google and Cloudflare.
Cloudflare once again comes under pressure for enabling abusive sites
by Dan Goodin
Cloudflare masks the origin of roughly 10% of abusive domains, watchdog says.
Mysterious family of malware hid in Google Play for years
by Dan Goodin
Mandrake’s ability to go unnoticed was the result of designs not often seen in Android malware.
Hackers exploit VMware vulnerability that gives them hypervisor admin
by Dan Goodin
Create new group called “ESX Admins” and ESXi automatically gives it admin rights.
Chrome will now prompt some users to send passwords for suspicious files
by Dan Goodin
Google says passwords and files will be deleted shortly after they are deep-scanned.
Secure Boot is completely broken on 200+ models from 5 big device makers
by Dan Goodin
Keys were labeled “DO NOT TRUST.” Nearly 500 device models use them anyway.
Vulnerability in Cisco Smart Software Manager lets attackers change any user password
by Dan Goodin
Yep, passwords for administrators can be changed, too.
Rite Aid says breach exposes sensitive details of 2.2 million customers
by Dan Goodin
Stolen data includes customer names, addresses, birth dates, and driver’s license numbers.
Here’s how carefully concealed backdoor in fake AWS files escaped mainstream notice
by Dan Goodin
Files available on the open source NPM repository underscore a growing sophistication.
Google makes it easier for users to switch on Advanced Account Protection
by Dan Goodin
The strict requirement for two physical keys is now eased when passkeys are used.
Recent Posts
- Meta shares how WhatsApp and Messenger will interact with other messaging apps in the EU
- How to use a VPN on Roku
- Boeing’s Starliner is back without the astronauts it flew to the ISS
- I held the world’s thinnest foldable phone, and it made my Samsung Galaxy Z Fold 6 look outdated
- Call Center Quality Monitoring: Real-Time vs Post-Call
Recent Comments
No comments to show.