Researchers from the University of New Mexico discovered a vulnerability affecting Ubuntu, Fedora, Debian, FreeBSD, OpenBSD, macOS, iOS Android, and other Unix-based OSs. Vulnerability allows to listen, intercept and interfere with the operation of VPN connections. The bug got the identifier CVE-2019-14899, and the root of the problem lies in …
Read More »
This week, Google reported about its success in adopting the HTTPS standard: 80% of applications encrypt traffic by default. So, in the official blog of the IT giant, appeared a message that currently 4 out of 5 applications (80%) available through the Google Play Store encrypt traffic by default and …
Read More »
According to Reuters, the European Commission and European antitrust authorities are conducting a “preliminary investigation” regarding Google data collection methods. Therefore, the European antitrust monitors again tackle the search giant. “Competition enforcers on both sides of the Atlantic are now looking into how dominant tech companies use and monetise data. …
Read More »
This week it became known that due to the use of third-party SDKs, the data of Twitter and Facebook users leaked to the side (of course, without any knowledge). SDK (software development kit) is a set of developmental tools that allows software specialists to create applications for a specific software …
Read More »
Qihoo 360 Netlab analysts presented a report describing a large-scale hacker operation aimed at Kazakhstan. Chinese experts talked about cyberattacks on Kazakhstan companies and organizations. According to researchers, the hacker group Golden Falcon (or APT-C-34) was behind the many studied attacks. The victims of these incidents were not only private …
Read More »
Google increase the amount of rewards for the bug bounty program and now it will pay up to $ 1.5 million for hacking Android and Titan M. Now, researchers who have found vulnerabilities in Android and the Titan M security module (used in Google Pixel 3 and Pixel 4) can …
Read More »
Kryptowire company specialists conducted automatic analysis of applications that were preinstalled on Android-smartphones, and discovered more than 150 vulnerabilities. Among other permissions, preinstalled programs allow remote change of settings, side code execution and unpermitted audio recording. “In research funded by the US Department of Homeland Security, the Kryptowire found apps …
Read More »
Security researchers from Purdue and Iowa Universities (USA) discovered vulnerabilities in several popular Android phones, exploiting which an attacker through the accessories could gain access to the firmware of the radio module (baseband) and thus track their users. Criminals can trick vulnerable phones into revealing unique identifiers, such as IMEI …
Read More »
Facebook sued the Israeli company NSO Group, which develops and sells spyware solutions and the so-called “legal malware”. NSO Group was founded in 2010 and since then has been developing various legal malware, which, along with exploits for various 0-days, it sells to governments and intelligence agencies around the world. …
Read More »
Grant Hernandez, Ph.D. in science at the University of Florida’s Cybersecurity Institute, has published a PoC exploit for Android’s zero-day vulnerability that allows gaining superuser rights and take control of the device. At the beginning of October 2019, experts at the Google Project Zero team reported an unpleasant bug in …
Read More »
Adware Guru — in confrontation with adware —