Security News

WhatsApp Phone Numbers Pop Up in Google Search Results — But is it a Bug?
2020-06-05 16:01

UPDATE. A researcher is warning that a WhatsApp feature called "Click to Chat" puts users' mobile phone numbers at risk - by allowing Google Search to index them for anyone to find. The phone numbers are revealed as part of a URL string and so, this in effect "Leaks" the mobile phone numbers of WhatsApp users in plaintext, according to the researcher's view.

Wallpaper that Crashes Android Phones
2020-06-03 11:11

The image, a seemingly innocuous sunset sky above placid waters, may be viewed without harm. The fault does not appear to have been maliciously created.

New Android Flaw Affecting Over 1 Billion Phones Let Attackers Hijack Apps
2020-05-26 07:40

A security vulnerability affecting Android that malicious apps can exploit to masquerade as any other app installed on a targeted device to display fake interfaces to the users, tricking them into giving away sensitive information. The same team of Norwegian cybersecurity researchers today unveiled details of a new critical vulnerability affecting the Android operating system that could allow attackers to carry out a much more sophisticated version of Strandhogg attack.

New Android Flaw Affecting Over 1 Billion Phones Let Attackers Hijack Apps
2020-05-26 07:40

A security vulnerability affecting Android that malicious apps can exploit to masquerade as any other app installed on a targeted device to display fake interfaces to the users, tricking them into giving away sensitive information. The same team of Norwegian cybersecurity researchers today unveiled details of a new critical vulnerability affecting the Android operating system that could allow attackers to carry out a much more sophisticated version of Strandhogg attack.

Signal secure messaging can now identify you without a phone number
2020-05-22 16:00

We've never bothered with Signal for the reason that signing up means handing over your phone number. As we mentioned you don't need to use a PIN to secure your Signal account - you can just use your phone number alone, as before, or choose a proper pass-phrase that's as long as you like.

Signal PINs Allow Users to Recover Data When Switching Phones
2020-05-22 04:01

Encrypted messaging service Signal has announced the introduction of a new feature that allows users to recover their data if they switch to a new device. The new feature, Signal PINs, is based on Secure Value Recovery, which the company introduced in December, and is meant to help users import data such as profile, settings, and blocked users when switching to a new device.

Campaign groups warn GCHQ can re-identify UK's phones from COVID-19 contact-tracing app data
2020-05-21 15:15

Campaign groups have written to the UK Prime Minister warning GCHQ and its digital arm, the National Cyber Security Centre, will have the capacity to re-identify the phones of people who have installed the nation's coronavirus contact-tracing app. "The centralised recording of data could facilitate mission creep; there is no guarantee that the Government will not add additional tracking features or later use the data for purposes other than COVID-19 tracking. Of particular concern is the fact that the National Cyber Security Centre and GCHQ will have the capacity toidentify the phones of people who have installed the app. Based on the UK Government's track record on surveillance, we consider these risks to be real," the letter said.

Campaign groups warn GCHQ can re-identify UK's phones from COVID-19 contact-tracing app data
2020-05-21 15:15

Campaign groups have written to the UK Prime Minister warning GCHQ and its digital arm, the National Cyber Security Centre, will have the capacity to re-identify the phones of people who have installed the nation's coronavirus contact-tracing app. "The centralised recording of data could facilitate mission creep; there is no guarantee that the Government will not add additional tracking features or later use the data for purposes other than COVID-19 tracking. Of particular concern is the fact that the National Cyber Security Centre and GCHQ will have the capacity toidentify the phones of people who have installed the app. Based on the UK Government's track record on surveillance, we consider these risks to be real," the letter said.

Campaign groups warn GCHQ can re-identify UK's phones from COVID-19 contract-tracing app data
2020-05-21 15:15

Campaign groups have written to the UK Prime Minister warning GCHQ and its digital arm, the National Cyber Security Centre, will have the capacity to re-identify the phones of people who have installed the nation's coronavirus contact-tracing app. "The centralised recording of data could facilitate mission creep; there is no guarantee that the Government will not add additional tracking features or later use the data for purposes other than COVID-19 tracking. Of particular concern is the fact that the National Cyber Security Centre and GCHQ will have the capacity toidentify the phones of people who have installed the app. Based on the UK Government's track record on surveillance, we consider these risks to be real," the letter said.

Far-right leader walks free from court after conviction for refusing to hand his phone passcode over to police
2020-05-21 13:43

The leader of far-right political group Britain First has been handed a judicial slap on the wrist after refusing to give his phone PIN to police at Heathrow Airport. He told police the party was "Not liberal like the Lib Dems in the UK, they're nationalist and right wing like Le Pen and Trump".