Sunday, 15 April 2018

Popular Android Phone Manufacturers Caught Lying About Security Updates

Android ecosystem is highly broken when it comes to security, and device manufacturers (better known as OEMs) make it even worse by not providing critical patches in time.
According to a new study, most Android vendors have been lying to users about security updates and telling customers that their smartphones are running the latest updates.
In other words, most smartphone manufacturers including big players like Samsung, Xiaomi, OnePlus, Sony, HTC, LG, and Huawei are not delivering you every critical security patch they're supposed to, a study by Karsten Nohl and Jakob Lell of German security firm Security Research Labs (SRL) revealed.

Popular Android Phone Manufacturers Caught Lying About Security Updates

Sunday, 8 April 2018

Facebooks Data Scandal Has Affected 2.7 Million EU Citizens

Facebook has informed the European Commission that the data of 2.7 million EU citizens have been affected by the recent data scandal. The company has already revealed the statistics of which countries have been affected so far because of the data scandal.

Privacy is a fundamental right under Europes legal regime therefore the improper sharing of users data is completely illegal.

Sunday, 1 April 2018

Facebook Collected Your Android Call History and SMS Data For Years

Facebook knows a lot about you, your likes and dislikes—it's no surprise.

But do you know, if you have installed Facebook Messenger app on your Android device, there are chances that the company had been collecting your contacts, SMS, and call history data at least until late last year.

A tweet from Dylan McKay, a New Zealand-based programmer, which received more than 38,000 retweets (at the time of writing), showed how he found his year-old data—including complete logs of incoming and outgoing calls and SMS messages—in an archive he downloaded (as a ZIP file) from Facebook.

https://thehackernews.com/2018/03/facebook-android-data.html

Sunday, 25 March 2018

Bitcoin Ransomware Attack Halts Major American City’s Government and Police

Bitcoin Ransomware Attack Halts Major American City’s Government and Police
Many government services in Atlanta, Georgia, a major metropolitan US city, were brought to a halt this week. Ransomware appeared on municipal computers, urging a payment of $51,000 in equivalent bitcoin, otherwise vital city functions would be shut down. The hackers made good on their threat, and services all over the city were impacted, including police. Into the weekend, the issue has not yet been resolved.

Bitcoin Ransomware Attack Halts Major American City’s Government and Police

Saturday, 17 March 2018

Pre-Installed Malware Found On 5 Million Popular Android Phones

Security researchers have discovered a massive continuously growing malware campaign that has already infected nearly 5 million mobile devices worldwide.

Dubbed RottenSys, the malware that disguised as a 'System Wi-Fi service' app came pre-installed on millions of brand new smartphones manufactured by Honor, Huawei, Xiaomi, OPPO, Vivo, Samsung and GIONEE—added somewhere along the supply chain.

All these affected devices were shipped through Tian Pai, a Hangzhou-based mobile phone distributor, but researchers are not sure if the company has direct involvement in this campaign.

Pre-Installed Malware Found On 5 Million Popular Android Phones

Saturday, 10 March 2018

Germany Says Hackers Infiltrated Main Government Network

BERLIN — Hackers using highly sophisticated software penetrated the German government’s main data network, a system that was supposed to be particularly secure and is used by the chancellor’s office, ministries and the Parliament, government officials have said.

German news outlets, citing security sources, have widely blamed a Russian hacking group backed by the Russian government — either one called Snake, or another known as APT28, or Fancy Bear. But Berlin has not publicly said who was behind the attack.

Saturday, 3 March 2018

Half Of The World’s Organizations Don’t Change Their Security Strategy, Even After Having Undergone An Attack

Around half of the do not put in enough effort to make the required changes to their security strategy even after being under a cyber-attack once.

This something stated by the CyberArk Global Advanced Threat Landscape Report 2018. In this report, 1300 IT security decision-makers were surveyed by the security vendor so that the present state of the enterprise security practices could be explored.

Cyber Security in the Context of International Security

 Cyber security is everyone’s responsibility. What are the current trends in threats, risks, and vulnerabilities? How do threat actors explo...