Posts

The premier investigative agency of United States of America, Federal Bureau of Investigations (FBI) had its website content management system hacked. A hacker with Twitter handle of CyberZeist claimed that he had managed to breach into Plone CMS used by FBI for its website. CyberZeist also leaked around 150 logins, including email addresses and encrypted passwords online. CyberZeist said he breached the Plone CMS, also being used by the FBI, in late December using a zero-day that was discovered by somebody else....

According to the report, FBI investigators in Ohio used a third-party hacking device called GrayKey to extract data from a locked iPhone 11 Pro Max. The phone in question belonged to Baris Ali Koch, who was accused of helping his brother convicted of hate crime escape the country by using his passport and lying to the authorities. He is currently awaiting sentencing. As part of the investigation, FBI authorities acquired Koch’s iPhone 11 Pro Max on October 11, 2019, which according to his lawyer, Ameer Mabjis was locked and protected by a passcode....

The data leaked are provided in a paste, and are in plain text. The data leaked contains the Personal contact details of The Higher Ranked government Officials. The Data leaked can be seen from below:

Flaw In Visa’s Contactless Card Lets Anyone Charge It Upto $999,999Convenience turns flawThe ProcessVisa’s response Convenience turns flaw As a way of speeding up transactions, Visa allows its users to bypass the step of entering their PINs when making a transactions of amounts $20 or less.Researchers from Newcastle University have discovered serious flaw in this process . They discovered that this amount could be increased simply by converting the currency into a foreign one (GBP to USD or EURO)....

Telegram cross-platform messaging flaws allow hackers to bypass encryption and access user messagesApparently the Secret Chat feature of Telegram saves messages in plain text in the memory dump Researchers from security firm Zimperium have discovered that Telegram can be hacked by cyber criminals in two ways. Zimperium’s founder and CTO stated on Zimperium blog that after conducting research on Telegram App, the researcher have found that there are at least two methods that can be leveraged to bypass encryption and obtain messages....

EaseUS Data Recovery Wizard is a free professional data recovery software that helps to recover up to 2GB of deleted, formatted or lost data from PC, laptop and removable storage devices (SD card recovery, flash drive recovery and so on) . Be it an accidental format, partly deleted data, hard drive crash or a virus attack, everything is possible to recover in a matter of seconds. EaseUS Data Recovery Wizard provides a well-polished and easy to use UI (user interface)....

“We’re happy to announce we’re making private repositories with unlimited collaborators available to all GitHub accounts. All of the core GitHub features are now free for everyone,” GitHub CEO Nat Friedman wrote in a blog post. Learn more: https://t.co/fQ3r2ABtTR pic.twitter.com/HHOyG5ypgU — GitHub (@github) April 14, 2020 For those unaware, previously developers could only work with up to three collaborators per repository for their private projects on GitHub Free plan. However, companies had to subscribe to one of GitHub’s paid plans if they wanted to work on their private development with unlimited private repositories and collaborators....

GoDaddy has patched a CSRF vulnerability that could have allowed attackers to take over domains registered with GoDaddyFlaw in DNSProof of Concept (PoC)Patch Flaw in DNS Saccomanni said that he noticed the flaw in GoDaddy’s DNS management actions. The DNS management actions on GoDaddy website are state-changing POST requests (no CSRF token in request body or headers, and no enforcement of Referer or Content-Type). POST requests that the server accept the entity enclosed in the request as a new subordinate of the web resource identified by the URI....

“We’re changing the way we name our releases. Our engineering team has always used internal code names for each version, based off of tasty treats, or desserts, in alphabetical order. This naming tradition has become a fun part of the release each year externally, too. But we’ve heard feedback over the years that the names weren’t always understood by everyone in the global community,” Google said in its official blog post....

So here’s everything you need to know about the Google Chrome Exploit and how to fix it. ALSO READ: Google Chrome’s Dark Mode For macOS To Arrive In Early 2019 Google Chrome Exploit: The Issue Google Chrome is one of the most feature-rich web browsers that is very well optimized for Windows OS. According to some reliable sources, a new bug which seems to be a tech support scam completely crashes Windows 10 and informs the users that their computer has been affected by a virus....

Apple Pay, which launched last year, reached deals with big banks and other credit card issuers to receive 0.15 % of the value of each credit card transaction, the journal said on Friday. Apple is collecting a 0.5% per purchase on bank debit cards, it said. Google’s service will not receive anymore fees for the transactions, the newspaper reported, citing unidentified people familiar with the situation. It said Visa Inc and Mastercard Inc have already made their “tokenization” card-security service free, which prevents payments services from charging fees to issuers....

Follow the below steps to access the feature: Quite simple! So what’s the fissure between the idea and the reality? This is the first time that such feature would appear on mobile devices and hence created a huge buzz. However based on Engadget report, it seems just a mere talk as this feature is not working as anticipated. The current version still has a lot of bugs that had lowered down customer’s experience....

For those unaware, Apple’s tracking device called AirTag is a small circular tag that can be attached to valuable personal objects (e.g. keys, bags, apparel, small electronic devices, vehicles), which are more likely to be misplaced. The user can activate the tracking device by using their Apple device and track it using Bluetooth in the ‘Find My Feature’ app when they are lost. According to developer and reliable leaker, Kuba Wojciechowski, the tech giant’s smart tracker is said to be codenamed Grogu (after the name of the Baby Yoda character from the Star Wars series ‘The Mandalorian’)....

For those unfamiliar, RAISR is a new method for image processing that takes a low-res upload of a photo and uses machine learning technology to fill in the gaps between the pixels, so that the end-user gets the full resolution of the photo while using a fraction of the bandwidth and download time. According to Google, this new technology is now ready for mobile use also: “RAISR produces results that are comparable to or better than the currently available super-resolution methods, and does so roughly 10 to 100 times faster, allowing it to be run on a typical mobile device in real-time....

In Magic Cat Academy, the player stars as Momo, a sorcerer kitty who summoned a ghost that stole his school’s master spellbook. Momo is based on the real-life cat that belongs to Google doodler Juliana Chen. “This year’s Halloween Doodle follows freshman feline Momo on her mission to rescue her school of magic,” Google notes. “Help her cast out mischievous spirits by swiping in the shape of the symbols above the ghosts’ heads....

They have hacked Canon EOS DSLR and run the Linux kernel on it. This was possible because the Canon EOS camera models have a processor (ARM 946E-S) and RAM (256MB/512MB depending on the model.) The Magic Lantern guys first accessed the Canon EOS bootloader and ported latest Linux kernel (3.19) onto it. They confirmed that the same binary runs on ML-enabled cameras which means that Canon EOS models 60D, 600D, 7D, 5D2 and 5D3 can be hacked using this method....

Brian also says that the cyber criminal gang which hacked Book2Park seems to be the same gang which hacked Target and Home Depot and stole more than 100 million credit and debit cards from them. Brian reports that a new batch of credit card numbers [dubbed “Denarius“] went up for sale on Rescator[dot]cm last week. Rescator is a online bazaar that earned became famous or rather infamous by selling the credit and debit cards stolen from Target and Home Depot....

How would like to hack a military facility with the help of your friends? You can now do so in a simulated gameplay on your Android smartphones/tablets and iOS devices like iPhone with the multiplayer cyberwarfare strategy game called Hackers. Hackers is a multiplayer cyberwarfare strategy game where users have to build a network and carry out various kinds of hacks around the world. The game has been developed by Indie game studio Trickster and has been released today....

The previously-unknown critical flaw allows the hackers to deliver the hack hidden inside an innocuous-looking photo in a social media or chat app. The flaw is so critical that smartphone owner doesn’t even have to click on the evil photo: as soon as its data is parsed by the phone, it will let the remote hacker take over the smartphone or simply brick it. Tim Strazzere, from security firm SentinelOne who uncovered the vulnerability says that the flaw resides in the way images used by certain Android apps parse the Exif data in an image....

As many as 200,000 websites use Magento e-commerce platform, which is owned by eBay. The security companies have warned the owners and webmasters using Magento’s e-commerce platform to ensure they’re using its latest software. Check Point, which found the flaw, reported it to Magento, which issued a patch (SUPEE-5344) on Feb. 9. Since Check Point revealed the flaw earlier this week, it appears attackers have picked up on it and are trying to find unpatched applications....