Information Security News feed from around the world.
Google Home devices reportedly recorded noises even without the “Hey Google” prompt due to the inadvertent rollout of a home security system feature. Source: Threatpost.com Google Fixes Mysterious Audio Recording Blip in Smart Speakers
Continue ReadingRemote, unauthenticated attackers could exploit the TeamViewer flaw to execute code and crack victims’ passwords. Source: Threatpost.com TeamViewer Flaw in Windows App Allows Password-Cracking
Continue ReadingResearchers went into detail about the discovery and disclosure of 19 security flaws they found in Mercedes-Benz vehicles, which have all been fixed. Source: Threatpost.com Black Hat 2020: Mercedes-Benz E-Series Rife with 19 Bugs
Continue ReadingCisco recently patched the high-severity flaw, which could allow remote, unauthenticated attackers to launch DoS attacks against its popular small business switches. Source: Threatpost.com High-Severity Cisco DoS Flaw Plagues Small-Business Switches
Continue ReadingAt Black Hat 2020, Patrick Wardle disclosed an exploit chain that bypasses Microsoft’s malicious macros protections to infect MacOS users. Source: Threatpost.com Black Hat 2020: ‘Zero-Click’ MacOS Exploit Chain Uses Microsoft Office Macros
Continue ReadingVoting machine technology seller Election Systems & Software (ES&S) offered an olive branch to security researchers with new safe harbor terms and vulnerability disclosure policies at Black Hat USA 2020. Source: Threatpost.com Black Hat 2020: In a Turnaround, Voting Machine Vendor Embraces Ethical Hackers
Continue ReadingA vulnerability in Twitter for Android could have allowed attackers to access private direct messages (DMs) and other data. Source: Threatpost.com Twitter Fixes High-Severity Flaw Affecting Android Users
Continue ReadingThe explosion of open-source AI models are lowering the barrier of entry for bad actors to create fake video, audio and images – and Facebook, Twitter and other platforms aren’t ready. Source: Threatpost.com Black Hat 2020: Open-Source AI to Spur Wave of ‘Synthetic Media’ Attacks
Continue ReadingGoogle addressed high-severity and critical flaws tied to 54 CVEs in this month’s Android security bulletin. Source: Threatpost.com High-Severity Android RCE Flaw Fixed in August Security Update
Continue ReadingDuring Black Hat USA 2020, Threatpost talks to Sherrod DeGrippo, with Proofpoint, about Emotet’s recent return -and how a cyber vigilante is attempting to thwart the malware’s comeback. Source: Threatpost.com A Cyber ‘Vigilante’ is Sabotaging Emotet’s Return
Continue Reading