On Friday i.e. 30th November, 2018, Quora, the popular platform to ask questions and connect with people who contribute unique insights and quality answers has suffered with a sensitive data breach regarding its users. As per their “SECURITY UPDATE” mail, a third party had gained access to the following data of users in an unauthorized […]
A security researcher with the github handle pwnsdx has found a way to crash and restart any Apple device using Safari by just rendering a webpage ! POC Code: https://gist.github.com/pwnsdx/ce64de2760996a6c432f06d612e33aea CLICK ON THIS LINK ONLY IF YOU ARE NOT USING SAFARI BROWSER ON AN APPLE DEVICE Sabri Haddouche tweeted a proof-of-concept webpage with just 15 lines of […]
Back in 2016, there was a news based on NIST publication, that SMS based Second Factor Authentication (2FA) is no more secure as it can be intercepted and there is no way for the application owner to confirm if the OTP sent to the designated user was the actual user who passed it back to […]
If you’re a web developer, you’ve probably had to make a user account system. The most important aspect of a user account system is how user passwords are protected. User account databases are hacked frequently, so you absolutely must do something to protect your users’ passwords if your website is ever breached. The best way […]
What is a Wildcard Certificate? In computer networking, a wildcard certificate is a public key certificate which can be used with multiple subdomains of a domain. The principal use is for securing web sites with HTTPS, but there are also applications in many other fields. Compared with conventional certificates, a wildcard certificate can be cheaper and more convenient than a certificate for […]
Not just Facebook, a new vulnerability discovered in Linkedin’s popular AutoFill functionality found leaking its user’s sensitive information to third party websites without the user even knowing about it. LinkedIn provides an AutoFill plugin for a long time that other websites can use to let LinkedIn users quickly fill in profile data, including their full name, […]
Introduction and Details WhiteRose ransomware crypto-extortion encrypts user data with AES, and then requires a redemption in #Bitcoin(BTC) to decrypt the files. File naming pattern: randomname_ENCRYPTED_BY.WHITEROSE Example of an encrypted file: BT2cJMtNeYlaKJHP_ENCRYPTED_BY.WHITEROSE The activity of this crypto-extortioner is now being seen in the second half of March 2018. It is oriented towards English-speaking users, which […]
Facebook’s recent controversies relating to Cambridge Analytica, consumers have been looking closer at the data Facebook collects from its users. You can take a look at all of the data Facebook has collected from you over the years at this webpage which is a lot—wall posts, photos, videos, messages and more. While it may be pretty scary how […]
No Serious HACKS, No Tough Trials, Just a Google Search Away ! The infamous French Security researcher named as “Robert Baptiste” who goes with his twitter handle @fs0c131y with the Mr. Robot FameName “Eliot Anderson” just retweeted in public giving out a simple google search keyword to find all the aadhar cards that have been stored by multiple […]
A malware infected computer of ISRO exposed India’s premier space research agency to hackers, claimed Indian and French security researchers on Sunday. The researchers also claimed that hackers could have taken control of ISRO’s command rocket launches using the vulnerability. Express has not been able to independently verify this claim. The trojan malware, known as […]