What is XSS? Cross-site scripting (XSS) is a type of computer security vulnerability typically found in Web applications. XSS enables attackers to inject client-side script into Web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same origin policy. Cross-site scripting carried out on websites accounted for roughly 84% of all security vulnerabilities documented by Symantec as of 2007....

Announcing the decision on Facebook, Zuckerberg wrote in the post: “Today we’re announcing a new program called Facebook Community Boost to help small businesses in the US grow, and to help more people get the digital skills those businesses need. Since 2011, Facebook has invested more than $1 billion dollars to support small businesses. This is the next step.” Facebook will be investing tens of millions of dollars into the program that will travel to 30 cities around the U....

According to Facebook product engineer Bob Baldwin, video comments are supported on desktop web, iOS, and Android. Videos can be uploaded in response to posts by people and pages, as well as within groups and events. Baldwin explained that it was “no small feat to add support across interfaces and within two heavy traffic services, like comments and videos.” The update will likely result in a lot more data being pushed on to Facebook’s servers....

Facebook is finally focussing on a second research center on new artificial intelligence laboratory in Paris after building a dedicated artificial intelligence team or popularly known as AI team that are spanning its offices in New York and Silicon Valley. The Paris AI lab will be made up of six researchers with expertise in image processing, text analysis, speech recognition and real-time strategy games. The new Facebook AI Research (FAIR) team will also work with existing teams in New York and California....

The Hamburg Data Protection Authority said that the social network could not force users to replace pseudonyms with real names, nor could it ask to see official identification, which has ruled that the site’s “real name” policy violates the right to privacy. The ruling came after the Facebook account of a woman in Hamburg was blocked when she objected to demands for ID authentication and a requirement to alter her user name....

Security researchers from PhishLabs have uncovered a new phishing trend that targets smartphone owners, mostly Facebook users. This phishing scam conceals the URLs of fake websites by making it appear that they are forwarded from a trusted source. As a result, victims are tricked into clicking malicious links, thereby giving away their credentials for login request. “The tactic we’re seeing is a tactic for phishing specifically mobile devices,” said Crane Hassold, a senior security threat researcher at PhishLabs’ Research, Analysis, and Intelligence Division (RAID) to Bleeping Computer....

when the mail is opened in a html web browser it shows you have a New Voicemail on whatsApp, and shows a play button.If the windows user clicks on the link, a Zipped file is saved into the system, named something as ‘Voicemail_abc_123(456).zip’. 5 days back when the malware was idscovered only 6 of 48 popular Antivirus Program were able to detect the Malware. but now it is Identified as Malware by almost every popular Antivirus program....

Apparently, the scammers are contacting users via Facebook and its photo-sharing site Instagram, pretending to be Mark Zuckerberg, and informing them they’ve supposedly won a lottery with a huge amount of winnings. However, in order to receive the prize-money, the victims were asked to wire a “delivery fee” to Facebook. While some were asked to send cash, some were told to transfer hundreds of dollars worth of iTunes gift card redemption codes....

The FBI’s face recognition tool can access a whopping 412 million images including foreigners according to a new US government report. The US Government Accountability Office (GAO) report which released yesterday, reveals that FBI’s face recognition system, known as Facial Analysis, Comparison, and Evaluation (FACE) access to more photos than previously thought, totaling over 411.9 million images. This figure is much much more that the conservative estimate of 30 million that FBI has been peddling to US public till now....

Freenode’s IRC server was compromised and passwords were possibly breached by unidentified hackers, Freenode said in a online notice to its users. It has also warned all its users that they should reset their passwords as a precaution. The security breach was identified on Saturday, as a notice by Freenode explains. “Earlier today the freenode infra team noticed an anomaly on a single IRC server. We have since identified that this was indicative of the server being compromised by an unknown third party,” “We immediately started an investigation to map the extent of the problem and located similar issues with several other machines and have taken those offline....

Geomiq, who is working on behalf of an unnamed privately-funded robotics company, is inviting applications from the public who would like to be the face of a new “state-of-the-art humanoid.” The company will select a face and then fork it over thousands of humanoids that it has developed. “A few weeks ago we were approached by a robotics company asking if we could help it with the finishing touches of a state-of-the-art humanoid robot it’s been working on....

Gundotra, the creator and mastermind behind Google’s social network, made the announcement, appropriately enough, in a lengthy Google Plus post, praising his co-workers and saying that he is ‘excited about what’s next.’ 

Lockheimer had criticized Apple’s iMessage lock-in strategy and said that the company is not adopting RCS (Rich Communication Services), as it wants to keep its iMessage lock-in system intact. For those unaware, RCS is the new messaging protocol, which is offered by Google worldwide via its Android Messages app to all users who install and use it as a default texting app. This communication system is an alternative for SMS on Android devices that allows you to send richer, more engaging text messages than you could on SMS....

The firm’s DeepMind division says that the repurposed AI played 100 games against the world champion chess program, Stockfish 8, and won 28 of them and drew the remaining, according to a non-peer-reviewed research paper published with Cornell University Library’s arXiv. Released in 2008, Stockfish 8 has previously won 2016’s Top Chess Engine Championship. In fact, Stockfish 8 has already been defeated in chess by another program, Komodo, in two major challenges this year....

To make matters worse, Google has pushed out a major security update to the latest version of Chrome, the 67, that will increase Chrome’s RAM usage by over 10%. However, this time around, it is done to reduce any future security threats posed by the highly-publicized system vulnerabilities like Spectre and Meltdown that shook the technology industry in January. This was due to the design flaw that affected every CPU in the market, enabled hackers to launch attacks such as stealing sensitive information when victims visit malicious websites....

The complainant has accused Google of tracking activities of users in the Google Chrome web browser while in a private browsing session, called the Incognito mode. According to the filed complaint, Google gathers data through its products such as Google Chrome, Google Analytics, Ad Manager, and their smartphone OS(Android), apps to track user activity. As the news surfaced online, Jose Castaneda, a Google Public communication executive, denied any wrongdoing and stating “As we clearly state each time you open a new incognito tab, websites might be able to collect information about your browsing activity....

For those unaware, the EU Commission in July this year had imposed on Google a record $5 billion (4.34 billion euros) fine for illegally abusing the dominance of its Android operating system. Back then, EU said that the U.S. tech giant has been unlawfully using Android’s near-monopoly since 2011 to improve usage of its own search engine and browser and to strengthen its dominant position in general Internet search. Google argued that “Android has created more choice, not less”....

Hacking Global Positioning System with GPS ‘Spoofing’ Can Lead To FatalitiesGPS Spoofing With GPS becoming the mainstay for hundreds of Apps and a plethora of location-based services hitting the market, GPS hacking is a dangerous problem. Global Positioning System data can be hacked to used to create serious problems — even life-threatening ones — if control falls into the wrong hands. GPS Spoofing Meet Dinesh Manandhar, a project associate professor at the University of Tokyo, who is working on developing systems to prevent what’s called GPS spoofing — the falsification of location data....

However, recently, a former employee at Rockstar Games has hinted that the highly-awaited Grand Theft Auto VI may not be released “anytime soon” putting rumors regarding the game’s trailer release in February 2020 to rest. Darion Lowenstein, an ex-Rockstar employee who has experience as a producer with some massive gaming companies, such as Activision, Rockstar EA, and Scopely, recently had a talk with the equity research firm, Jefferies, which was reported by the Daily Star....

Jose Rodriguez, a Spanish security researcher, and an iPhone enthusiast has managed to find a passcode bypass bug that allows attackers to access the contacts list on a locked iPhone. Rodriguez shared a video (see below) with The Hacker News to show how the bug works. As detailed in the video, the passcode bypass bug is present in a new feature introduced in iOS 12.1 called Group FaceTime. This bug can be exploited by either receiving a phone call or asking Siri to make a phone, and by changing the call to FaceTime....