Security News > 2016 > November

iOS 10 Passcode Bypass Can Access Photos, Contacts (Threatpost)
2016-11-17 19:38

A vulnerability in iOS 8, 9, 10, and even the most recent beta version, 10.2 beta 3, could allow an attacker to access photos and contacts on a locked iPhone.

iPhone Call History Synced to iCloud Without User Consent, Knowledge (Threatpost)
2016-11-17 18:51

Security experts warn iPhone call history data may be synced to iCloud accounts without user knowledge, making personal phone records an easy target for a determined third-party.

Low-cost PoisonTap tool can compromise locked computers (Help Net Security)
2016-11-17 18:40

A new attack tool devised by security researcher Samy Kamkar will leave you wishing you could take your computer with you everywhere you go. Dubbed PoisonTap, the tool consists of a Raspberry Pi...

Final warning: Popular browsers will soon stop accepting SHA-1 certificates (Help Net Security)
2016-11-17 17:20

Starting with Chrome 56, planned to be released to the wider public at the end of January 2017, Google will remove support for SHA-1 certificates. Other browser makers plan to do the same. “The...

Gang Up on the Problem, Not Each Other (Threatpost)
2016-11-17 15:18

The security community often thrives on controversy, but when it comes to vulnerability disclosures in life-saving medical devices, ego and attention-grabbing must be put aside.

Hacking Password-Protected Computers via the USB Port (Schneier on Security)
2016-11-17 14:22

PoisonTap is an impressive hacking tool that can compromise computers via the USB port, even when they are password protected. What's interesting is the chain of vulnerabilities the tool exploits....

The new age of quantum computing (Help Net Security)
2016-11-17 13:45

Quantum encryption is the holy grail of truly secure communications. If and when quantum computing becomes a widespread reality, many public-key algorithms will become obsolete. This includes...

Ransoc browser locker/ransomware blackmails victims (Help Net Security)
2016-11-17 13:30

An unusual combination of browser locker and ransomware, dubbed Ransoc by researchers, is targeting users who visit adult sites. Ransoc targets victims’ reputation The malware is delivered via...

The decline of cyber resilience: Organizations unprepared to face attacks (Help Net Security)
2016-11-17 13:15

Only 32 percent of IT and security professionals say their organisation has a high level of cyber resilience – down slightly from 35 percent in 2015, according to a global study involving 2,400...

Researchers identify domain-level service credential exploit (Help Net Security)
2016-11-17 13:00

CyberArk Labs unveiled new research detailing what it considers to be a significant risk across all Windows endpoints, including those on Windows 10 with Credential Guard enabled. The exploit...