Security researchers at say -backed are likely behind the mass-exploitation of a recently discovered in ' security gear, which prompted a warning to customers to remove and replace affected devices. Their goal was to spy on and accounts techcrunch.com/2023/06/15/mand

#mandiant #China #hackers #zeroday #securityflaw #barracudanetworks #email #government #academic

Last updated 1 year ago

Manuel Bissey · @mbissey
16 followers · 298 posts · Server cyberplace.social

Beware the new two-factor authentication tool from Google doesn’t seem to be end-to-end encrypted, which could expose users to significant security risks☝️🤖

packetstormsecurity.com/news/v

#2fa #securityflaw

Last updated 1 year ago

Got an old iOS device?

Time to patch that up, too!

Apple just updated iOS 12 to patch a critical security flaw macworld.com/article/1483041/i

#apple #ios12 #iphone #securityflaw #infosec #technews

Last updated 2 years ago

Rob Pomeroy · @robpomeroy
480 followers · 469 posts · Server infosec.exchange

This one's fairly fresh and hasn't seen much coverage: CloudSek has discovered a cookie-stealing authentication bypass that works against a bunch of Atlassian products: Jira, Confluence, Trello and BitBucket. No word as yet from Atlassian on a patch. Keep an eye out.

Not super easy to exploit, but still troubling.

cloudsek.com/security-flaw-in-

#atlassian #jira #confluence #trello #bitbucket #securityflaw #exploit

Last updated 2 years ago

Ames :verified: :donor: · @HillClimber
83 followers · 239 posts · Server infosec.exchange

: the following toot went viral on infosec.exchange mastodon server

"Just found out that the new iOS update has a major security flaw that allows hackers to gain access to your personal information. Update your phone ASAP to protect yourself!"

Are we getting too predictable? Asking for a friend.

#chatgpt #infosec #ios #securityflaw #notreal #fakenews

Last updated 2 years ago

Tina Anton (She/Her) · @Ti_does_art
17 followers · 163 posts · Server socel.net

An interesting article on Mastodon-related security. And a reminder that it is safest to have two factor authentication turned on if possible. 💖

portswigger.net/research/steal

#securityflaw

Last updated 2 years ago

Tech News Worldwide · @TechNews
11235 followers · 97973 posts · Server aspiechattr.me
Marc Véron · @mveron
94 followers · 683 posts · Server tooting.ch

"may currently have foreign intelligence agents on the payroll" and is a threat for : "The disclosure also claims that Twitter has taken money from Chinese sources and shared information in return that could potentially lead to the identification of Chinese Twitter users who have illegally circumvented government censorship in order to access the platform."
edition.cnn.com/2022/08/24/tec

#securityflaw #security #cnn #Zwitsch #Zatko #dissidents #twitter

Last updated 2 years ago

MusiqueNow :newpride: · @MusiqueNow
354 followers · 11187 posts · Server todon.eu

🔴
ATTENTION

Warns Of For iPhones, iPads, Macs

Apple released two security reports about the issue on Wednesday, although they didn't receive wide attention outside of tech publications. Apple's explanati...

youtube.com/watch?v=RyNP_xAsGg

#ListenUp #apple #securityflaw

Last updated 2 years ago

Coyote · @Coyote
471 followers · 5155 posts · Server noagendasocial.com

@CSB having bluetooth you have to disable with software switches,
=
@adam might agree?

#securityflaw

Last updated 3 years ago

ITSEC News · @itsecbot
687 followers · 32461 posts · Server schleuss.online

Critical Intel Active Management Technology Flaw Allows Privilege Escalation - The critical Intel vulnerability could allow unauthenticated attackers gain escalated privileges o... threatpost.com/critical-intel-

#patch #intel #hacks #intelpatch #securityflaw #criticalflaw #intelsecurity #vulnerabilities #privilegeescalationflaw

Last updated 4 years ago

ITSEC News · @itsecbot
687 followers · 32461 posts · Server schleuss.online
ITSEC News · @itsecbot
687 followers · 32461 posts · Server schleuss.online

Critical Zoho Zero-Day Flaw Disclosed - A Zoho zero day vulnerability and proof of concept (PoC) exploit code was disclosed on Twitter. more: threatpost.com/critical-zoho-z

#zoho #zeroday #exploit #pocexploit #zerodayflaw #exploitcode #securityflaw #proofofconcept #vulnerabilities

Last updated 5 years ago

ITSEC News · @itsecbot
687 followers · 32461 posts · Server schleuss.online

Billions of Devices Open to Wi-Fi Eavesdropping Attacks - The Kr00k bug arises from an all-zero encryption key in Wi-Fi chips that reveals communications fr... more: threatpost.com/billions-of-dev -2019-15126 -fichips

#iot #rsac #krack #Kr00k #cypress #broadcom #wi #encryption #securityflaw #appledevices #cryptography #vulnerability #cve #mobilesecurity #vulnerabilities

Last updated 5 years ago

ITSEC News · @itsecbot
687 followers · 32461 posts · Server schleuss.online
Pablo · @Apitronics
212 followers · 4946 posts · Server mastodon.partecipa.digital
Cerdic · @cerdic
396 followers · 2044 posts · Server mamot.fr

"My voice is my password" dit au téléphone ma voisine d'open-space

#securityflaw

Last updated 6 years ago

marseye · @marseye
73 followers · 1250 posts · Server mamot.fr

Oups !
Des processeurs Intel parmi les dernières gammes Core sont susceptibles de hacking (nécessite toutefois un accès à la machine).

L'outil de détection (WIN/Linux) est là : downloadcenter.intel.com/downl

#intel #securityflaw

Last updated 7 years ago