Poorly Secured Family of Adult Web Sites Leak Account Info For those people who can think back to the hack of the Ashley Madison web site, this is kind of deja vu all over again. 100 megabytes of user authentication data was leaked – user names, IP addresses, passwords and email addresses. Not THE most […]
Continue reading → [DISPLAY_ACURAX_ICONS]Web Page Load Times Double Due to Trackers Trackers, those microscopic bits of pixie dust that web pages and advertisers insert into web pages to track our activities, make a significant negative contribution to user experience. Full disclosure – this study was done by Ghostery, who makes software – free software – that blocks these […]
Continue reading → [DISPLAY_ACURAX_ICONS]FBI Asks Google for Information on ALL People Near Certain Crimes Now that we know that Google tracks you even if you ask nicely for it not to, this news from BBC becomes more interesting. The FBI issued a search warrant to Google for information on all people within a 100 acre block around a […]
Continue reading → [DISPLAY_ACURAX_ICONS]Lack of Vendor Cyber Risk Management Hurts over 750 Banks TCM Bank, a company that helps hundreds of small banks issue credit cards had a problem with their third party vendor – the bank’s fourth party vendor risk. The small bank wants to issue credit cards so they hire TCM and TCM hires someone else […]
Continue reading → [DISPLAY_ACURAX_ICONS]Zip Slip Vulnerability Affects Thousands of Projects Researchers discovered a flaw in almost all zip-style file decompressors – RAR, TAR, 7ZIP-APK and others. The problem is caused by a very old attack vector called directory traversal that these libraries do not handle correctly. The decompressor libraries were likely downloaded from places like Github and Stack […]
Continue reading → [DISPLAY_ACURAX_ICONS]Israeli Startup Raises $12.5 Million to Help Governments Hack IoT Given the sad state of IoT security, I am not sure that governments need any help in hacking IoT devices, but just in case they do, Israeli startup Toka raised $12.5 million to help police hack iPhones, Alexas, Echos and Nests, along with other IoT […]
Continue reading → [DISPLAY_ACURAX_ICONS]