Is Your Smart Speaker Eavesdropping?

Jake Moore from WeLiveSecurity wrote an article about him helping a friend who thought she might have been hacked by her Ex-partner. This is because the Ex knew specific information about her private conversations. Eventually it was discovered that the Ex was using...

Update Your Apple Devices

Apple has released emergency security updates earlier this week for it’s iPhone, iPads and Macs. The updates fixes a WebKit issue that could result in code execution. This is a vulnerability that is actively exploited in the wild. The fixed versions are 13.2.1...

Online Stores are Leaking private data

According to research by website security company, Sansec, around 12% of online stores have their backups exposed due to human error or negligence. In a study of 2,036 stores of various sizes, 250 of them were found to have stored their backups files on publicly...

Fake Job Ads to steal data from Applicants

Trend Micro recently discovered an active campaign that uses a fake employment  pretext to steal information from applicants. The ads are crafted to target Eastern Europeans working in the cryptocurrency industry. An executable disguised as a word document is...

Earthquake Relief Donation Scams Spotted

The significant earthquake in Turkey and Syria are being abused by scammers to steal relief donations. As government, businesses and charities are steeping up to raise funds and aids for victims, the scammers are wasting no time in targeting unsuspecting donors....

Reddit Security Incident

Reddit recently reported that they had suffered a security incident. The incident resulted in the exposure of some internal documents, code and hundreds of company contacts and employee information. The attacker gained access by stealing a single employee’s...

Toyota Supplier Portal Vulnerability Disclosure

A security researcher has disclosed a backdoor vulnerability that allowed access to Toyota’s Global Supplier Preparation Information Management System. All that is needed to gain access, is to know the email address of an existing user account. The security...

Beware of Donation Scams about Earthquake in Turkey and Syria

A significant earthquake recently struck Turkey and Syria. Based on past experiences, such disasters will often be abused. The most common scams are fake donation websites, followed by malware disguised as a video or images from the affect region. Be vigilant, only...

2FA Bypass for Facebook

A security researcher from Nepal has done a write up on how he was able to bypass the two factor authentication on Facebook. The vulnerability that was exploited was that the two factor code is 6 digits long and there isn’t any limits or rate limiting on the...

Google Chrome No Longer Safe to Use for Millions of Users

From tomorrow, Google will be dropping support for Chrome browser for users on Windows 7, 8 and 8.1. What this means is that users on those operating systems will no longer be receiving security updates for their chrome browser, leaving their devices vulnerable to...