TikTok Surreptitiously Collected Android User Data Using Google-Prohibited Tactic
App concealed the practice of gathering device unique identifiers using an added layer of encryption.
Source: Threat Post – Mobile Security –
[...]
AuthorElizabeth Montalbano
Researcher Publishes Bypass for Patch for vBulletin 0-Day Flaw
Three separate proof-of-concepts on Bash, Python and Ruby posted to outsmart fix issued last year to remedy pre-auth RCE bug.
Source: Threat
[...]
NSA Warns Smartphones Leak Location Data
The agency known for its own questionable surveillance activity advised how mobile users can limit others’ ability to track where they are.
[...]
Apple Knocked Off Perch as Most Imitated Brand for Phishing Attacks
COVID-19 pandemic spurs spoofing preference changes, plus a surge in email-based attacks.
Source: Threat Post – Web Security – Apple Knocked Off
[...]
Twitter: Epic Account Hack Caused by Mobile Spearphishing
Hackers “mislead certain employees” to gain access to internal tools to take over high-profile accounts and push out a Bitcoin scam.
Source:
[...]
Malicious ‘Blur’ Photo App Campaign Discovered on Google Play
Twenty-nine bad mobile apps with a combined 3.5 million downloads bombard users with out-of-context ads.
Source: Threat Post – Mobile Security –
[...]
Twitter: Hackers Accessed Private Messages for Elite Accounts
A Dutch elected official is among those whose DMs were hijacked, the company said.
Source: Threat Post – Web Security – Twitter:
[...]
Leak Exposes Private Data of Genealogy Service Users
An exposed ElasticSearch server belonging to Software MacKiev put 60,000 users of Ancestry.com’s Family Tree Maker software at risk.
Source: Threat Post
[...]
Threat Actors Introduce Unique ‘Newbie’ Hacker Forum
CryptBB becomes more inclusive by inviting less experienced hackers to learn from expert cybercriminals and one another.
Source: Threat Post – Web
[...]
Report: Most Popular Home Routers Have ‘Critical’ Flaws
Common devices from Netgear, Linksys, D-Link and others contain serious security vulnerabilities that even updates don’t fix.
Source: Threat Post – Web
[...]