Subterms
Whisper is a secret-sharing app where you can post anonymous messages, but security failures ensured user content and profiles were available for anyone online to view. The inadvertent data exposure was caused by an open database with no credentials or password protection in place, as reported by the Washington Post. See also: Chinese hackers use decade-old […] More
Certain PIN codes are blacklisted on iOS. For example, iOS recommends you don’t use 0000 or 0011, but doesn’t have a problem with 0001 or 1001. But what combination of numbers are blacklisted, and does having this blacklist this improve security? Also, is a 6-digit PIN better than a 4-digit PIN? Security researchers Philipp Markert, […] More
The University of Hertfordshire has avoided an investigation by the ICO into its data-sharing practices after exposing student information. The security incident took place in November 2019, in which a bulk email promoting an art lecture also included an attachment containing the names and email addresses of approximately 2,000 students. Once the university realized its […] More
The Senate Legal and Constitutional Affairs Legislation Committee has made one recommendation after reviewing the proposed amendments to Australia’s Anti-Money Laundering and Counter-Terrorism Financing Amendment and Other Legislation Bill 2019 (AML/CTF Bill), asking for it be passed. “The committee recommends that the Senate pass the Bill,” it wrote in its report [PDF]. “The committee considers that the Bill […] More
Image: Harrison Broadbent According to new research published today, modern RAM cards are still vulnerable to Rowhammer attacks despite extensive mitigations that have been deployed by manufacturers over the past six years. These mitigations, collectively referred to as Target Row Refresh (TRR), are a combination of software and hardware fixes that have been slowly added […] More
Microsoft has released today its monthly roll-up of security updates known as Patch Tuesday. This month, the Redmond-based company patched 115 vulnerabilities, marking this month’s patches as the biggest in the company’s history. However, despite this month’s pretty bulky release, nobody will be talking about it today. Instead, they’ll be busy talking about how a […] More
Image: Geralt on Pixabay Details about a new “wormable” vulnerability in the Microsoft Server Message Block (SMB) protocol have accidentally leaked online today during the preamble to Microsoft’s regular Patch Tuesday update cycle. No technical details have been published, but short summaries describing the bug have been posted on the websites of two cyber-security firms, […] More
Microsoft announced today a coordinated takedown of Necurs, one of the largest spam and malware botnets known to date, believed to have infected more than nine million computers worldwide. The takedown effort came after Microsoft and industry partners broke the Necurs DGA — the botnet’s domain generation algorithm, the component that generates random domain names. […] More
