News

Vulnerability in the new design of Facebook can be used to delete the profile photo of any user. We are talking about the design of the FB5, which the social network presented in April at the F8 conference. The issue was reported by a cybersecurity researcher Philippe Harewood. According to …

Mozilla has released a Firefox update. In this release, developers have removed an interesting vulnerability that affects the password manager built into the browser. It turned out that the attacker could bypass the master password and gain access to the saved passwords from the sites. The vulnerability received a medium …

The Reuters news agency, citing its sources, announced that the US Department of Commerce intends to extend the validity of the temporary license for Huawei. This license will allow Huawei to buy telecommunications network equipment from US companies, as well as provide software updates for its mobile devices. According to …

Back in the fall of 2018, it was reported that Chrome and Firefox developers began to implement the idea of ending support for FTP in their browsers. Then the engineers noted that FTP is an unsafe legacy protocol, it is impossible to get rid of it once and for all, …

Researcher Pedro Cabrera demonstrated at Defcon how vulnerable modern smart TVs that use the HbbTV standard and connected to the Internet. HbbTV works throughout Europe and most of the rest of the world except the United States, which makes Smart TV vulnerable to hackers. Attackers can force TVs to display …

The Guardian, a UK-based periodical, reported about a database of insecure biometric data and other personal information found by security researchers Noam Rotem and Ran Locar. The public database contains data from more than a million users of the Suprema Biostar 2 security platform. This includes fingerprints, face recognition information, …

Google Project Zero Specialist Tavis Ormandy has discovered a dangerous MSCTF related issue. The bug appeared almost 20 years ago and affects all versions of Windows, starting with XP and ending with the latest versions of Windows 10. Attackers or malware that are already attached to the user’s computer can …

The Bluetooth vulnerability, called KNOB, facilitates the selection of the encryption key used when connecting devices, and allows to manipulate the data transmitted between the two devices. The problem affects Bluetooth BR / EDR (Bluetooth Classic) enabled devices with specification versions 1.0 – 5.1. Researcher from the Center for IT-Security, …

Security researchers from Pen Test Partners discovered numerous vulnerabilities in 4G routers from various companies. Their operation allows attackers to gain access to confidential user information and execute commands. Vulnerabilities affect 4G routers of various price categories, from consumer routers and dongles to very expensive devices intended for use in …

As was earlier reported, Valve has released a patch that removes the Steam Privilege Elevation Vulnerability (LPE) vulnerability for Windows systems. Nevertheless, experts in the field of cybersecurity believe that the problems are still relevant for this software. Initially, Valve did not want to release updates to eliminate this gap, …