Skip to main content

Security

Face ID doesn’t work when you’re wearing a mask—Apple’s about to address that

posted onApril 30, 2020
by l33tdawg
Credit: Arstechnica

Apple's Face ID method for authenticating on recent iPhones offers a number of security benefits, and it's a neat trick to boot. But in a pandemic-stricken world where many people either opt to or are even required to wear protective masks, users have discovered that Face ID doesn't usually work when they need it to. Those masks interfere with the iPhone's ability to read your face, and at the moment, there's no easy solution.

Google Chrome issues critical security warning for 2 billion users: Here's the fix

posted onApril 20, 2020
by l33tdawg
Credit: Laptop Mag

Google revealed a "critical" security vulnerability in Chrome last weeks but remained tight-lipped about what exactly had gone wrong. We now have an idea, and "critical" is putting it lightly.

Sophos security researcher Paul Duckling wrote in a blog post that the fix in Chrome version 81.0.4044.113 patches a vulnerability that lets attackers avoid Chrome's usual security checks (via Tom's Guide). It also bypasses what Duckling calls "are you sure" dialog boxes -- those pop-ups that appear when you might be approving something you shouldn't.

Microsoft AI can detect security flaws with 99% accuracy

posted onApril 20, 2020
by l33tdawg
Credit: IT Pro

Microsoft has released an artificial intelligence (AI)-powered tool to help developers categorise bugs and features that need to be addressed in forthcoming releases.

The software giant’s machine learning system classifies bugs as security or non-security with a 99% accuracy, and also determines whether a bug is critical or non-critical with a 97% accuracy rating.

Chinese hackers targeted company behind 'Ragnarok Online' MMORPG

posted onApril 20, 2020
by l33tdawg
Credit: ZDNet

One of China's largest state-sponsored hacking groups has attempted to breach the internal network of Gravity, the South Korean gaming company behind popular Ragnarok Online MMORPG (Massive Multiplayer Online Role-Playing Game).

The intrusion attempts are believed to have taken place earlier this year, although it is unclear if they were successful or not.

Zoom took months to repair a flaw that would allow hackers to take complete control of a computer, even after multiple researchers and clients reported the vulnerability to the company

posted onApril 20, 2020
by l33tdawg
Credit: Business Insider

Last year, Zoom took three months to fix a security flaw that allowed hackers to potentially gain control over certain user's computers running Apple's macOS, according to a report from The New York Times on Monday.

The issue, which Zoom addressed and fixed last July, was brought to the company's attention from multiple security researchers who participated in a hackathon hosted by Dropbox, the report said. Dropbox, which is a Zoom customer and partner, then presented the findings to Zoom, which only fixed the issues after another researcher found the same flaw.

Russian state hackers behind San Francisco airport hack

posted onApril 14, 2020
by l33tdawg
Credit: ZDNet

Hackers believed to be operating on behalf of the Russian government have hacked two websites operated by the San Francisco International Airport, cyber-security firm ESET said today.

The hacks took place last month, in March, according to a data breach notification posted on the airport's website.The attacks targeted SFOConnect.com, a website used by airport employees, and SFOConstruction.com, a portal used by airport construction contractors.

Zoom security: Your meetings will be safe and secure if you do these 10 things

posted onApril 14, 2020
by l33tdawg
Credit: Flickr

As the novel coronavirus spread across the globe, the business landscape was forced to make a number of swift changes.

Lockdowns and social isolation measures, restricted travel, and the closure of firms not considered to be "essential" services proved to be a catalyst for home working, of which many of us were woefully unprepared to accommodate.

Medical device “jailbreak” could help solve the dangerous shortage of ventilators

posted onApril 14, 2020
by l33tdawg
Credit: Arstechnica

As infections from the ongoing COVID-19 pandemic continue to climb, hospitals around the world are struggling with a potentially fatal shortage of ventilators, the bedside machines that help patients breathe when they’re unable to do so on their own. Meanwhile, hundreds of thousands of lower-grade breathing devices known as continuous positive airway pressure machines sit idle in closets or warehouses because their manufacturers say they can’t perform the same life-saving functions.