Thousands of internet connected devices, including, printers, cameras, DVRs, and other IoT gadgets can be used to amplify DDoS (distributed denial-of-service) attacks. These devices are misconfigured to listen for, and respond to WS-Discovery protocol requests. WS-Discovery (WSD) is a communications protocol used to automatically discover internet connected devices inside ofContinue Reading
According to ProPublica, the medical images with health care data of approximately 5 million Americans are freely available to view online if one only knows where to look. ProPublica worked with German broadcaster Bayerischer Rundfunk on this investigation finding not only the American patient files but millions more from aroundContinue Reading
A team of researchers from Northeastern University and the Imperial College of London found a variety of IoT devices are collecting and sharing data. The devices the research claim are collecting users data like smart TVs and set top boxes for streaming, are also sharing data with third parties includingContinue Reading
In a move that makes one think of a Steven Spielberg film, UK police have been using artificial intelligence to predict crime. According to Mirror Online UK police have used forms of “predictive policing” since at least 2004, but development of more advanced machine learning has lead to in increaseContinue Reading
A hacker has published the entire user database of Lumin PDF, this contains more than 24 million users records. According to ZDNet the hacker resorted to releasing user records after Lumin PDF administrators didn’t respond to numerous queries over the past several months. Lumin PDF is a cloud-based service letting usersContinue Reading
Et tu, LastPass? The popular password manager LastPass released an update last week fixing a security flaw that exposed credentials entered on previously visited websites. The bug was discovered last month by Project Zero, on August 29th. Project Zero is a white hat hacking team at Google who look forContinue Reading
On September 9, French police arrested a 20-year-old man for blackmailing thousands of people, both in France and internationally with so-called “sextortion” emails over the past few months. While his name has not yet been made public. Local French media report the man is a French citizen living in Ukraine.Continue Reading
The Hacker News reported that iOS 13 will ship out containing a vulnerability that is known to Apple. The flaw allows anyone with access to your phone to bypass the lockscreen gaining access to some sensitive information. The Hacker News spoke with Jose Rodriguez, the security researcher who discovered thisContinue Reading
It’s not just an indicted Attorney General, and 49 other AG’s after Google. The House Judiciary Committee today sent request for information letters to Amazon, Apple, Facebook, and Google, all part of an anti-competition probe started earlier this year. The U.S. lawmakers are investigating possible antitrust violations by the largest technolagy playersContinue Reading
U.S. Immigration and Customs Enforcement, known as ICE, is gearing up to take access of, aka hack, more smartphones. In 2017 ICE paid $2.2 million to Cellebrite. Now according to a federal filing ICE will contract with Cellebrite for between $30 and $35 million. Cellebrite is an Israeli company knownContinue Reading