10 key announcements from Microsoft Ignite 2019 you should know about
This year’s Microsoft Ignite was jam-packed with new releases and upgrades in Microsoft’s line of products and services. The company elaborated on its growing focus to address the needs of its customers to help them do their business in smarter, more productive and more efficient ways. Most of the products ... Read More
Renovate joins WhiteSource to help developers spend less time on manually resolving dependency updates
Israel-based open source security and license compliance management company, WhiteSource, today announced its acquisition of Renovate, an open-source project for dependency updates. Renovate’s offerings will now be available for free under its new name, WhiteSource Renovate. WhiteSource Renovate will be integrated into the WhiteSource product portfolio, which includes WhiteSource Core ... Read More
Smart Spies attack: Alexa and Google Assistant can eavesdrop or vish (voice phish) unsuspecting users, disclose researchers from SRLabs
In a new study security researchers from SRLabs have exposed a serious vulnerability – Smart Spies attack in smart speakers from Amazon and Google. According to SRLabs, smart speaker voice apps – Skills for Alexa and Actions on Google Home can be abused to eavesdrop on users or vish (voice-phish) ... Read More
Google Project Zero discloses a zero-day Android exploit in Pixel, Huawei, Xiaomi and Samsung devices
Google’s Project Zero disclosed a zero-day Android exploit in popular devices from Pixel, Huawei, Xiaomi, and Samsung, last Friday. This flaw unlocks root-level access and requires no or minimal customization to root a phone that’s exposed to the bug. A similar Android OS flaw was fixed in 2017 but has ... Read More
“621 U.S. government, schools, and healthcare entities are impacted by ransomware attacks since January’19”, highlights Emisoft report
A report released by antivirus company Emisoft on October 1 sheds light on the increase in ransomware attacks on government and municipal entities. Per the report, in the first nine months of 2019, at least 621 government entities, healthcare service providers and school districts, colleges, and universities were affected by ... Read More
How Chaos Engineering can help predict and prevent cyber-attacks preemptively
It’s no surprise that cybersecurity has become a major priority for global businesses of all sizes, often employing a dedicated IT team to focus on thwarting attacks. Huge budgets are spent on acquiring and integrating security solutions, but one of the most effective tools might be hiding in plain sight ... Read More
New iPhone exploit checkm8 is unpatchable and can possibly lead to permanent jailbreak on iPhones
An unnamed iOS researcher that goes by the Twitter handle @axi0mX has released a new iOS exploit, checkm8 that affects all iOS devices running on A5 to A11 chipsets. This exploit explores vulnerabilities in Apple’s bootroom (secure boot ROM) which can give phone owners and hackers deep level access to ... Read More
Moscow’s blockchain-based internet voting system uses an encryption scheme that can be easily broken
Russia is looking forward to its September 2019 elections for the representatives at the Parliament of the city (the Moscow City Douma). For the first time ever, Russia will use Internet voting in its elections. The internet-based system will use blockchain developed in-house by the Moscow Department of Information Technology ... Read More
You can now use fingerprint or screen lock instead of passwords when visiting certain Google services thanks to FIDO2 based authentication
Google has announced a FIDO2 based local user verification for Google Accounts, for a simpler authentication experience when viewing saved passwords for a website. Basically, you can now use fingerprint or screen lock instead of passwords when visiting certain Google services. This password-free authentication service will leverage the FIDO2 standards, ... Read More
Google’s Project Zero reveals several serious zero-day vulnerabilities in a fully remote attack surface of the iPhone
Security analysts from Google’s Project Zero investigated the remote attack surface of the iPhone and reviewed SMS, MMS, VVM, Email, and iMessage. They found several serious zero-day vulnerabilities in the remote, interaction-less attack surface of the iPhone. The majority of vulnerabilities occurred in iMessage due to its broad and difficult ... Read More
