A zero-day flaw in WhatsApp allowed attackers to install spyware on smartphones without any user interaction, Financial Times has reported.

Here is my writeup for VERYANDROIDOSO task. Ofcourse with frida :D App takes input from us and checks if it is correct flag. Length of flag should be 23 enclosed with OOO{..}. Also inside of brackets

So three(3) new hardware based vulnerabilities were released and whilst we all
remember Spectre or Meltdown from last year these ones, these new
vulnerabilities show that hardware based attacks are not going to go away any
time soon, not only that but the…

p2p speech encrypting device with analog audio interface suitable for GSM phones - gegel/jackpair

  Earlier today the Financial Times published that there is a critical vulnerability in the popular WhatsApp messaging application and that it is actively being used to inject spyware into victims phones. According to the report, attackers only need to issue…

Let’s start at the end. This one got me seriously confused. It all started a few months ago when a colleague was hacking away at some Google website. After some poking around, he detected a persistent XSS vulnerability – the attacker’s payload is stored on…

As part of our initiative to contribute to and improve CNCF projects, I’ve recently found a bypass vulnerability in Sysdig – CVE-2019-8339. This allows bypassing its syscall detection and as a result, allows bypassing Falco rules and running any system calls…

0 votes and 1 comment so far on Reddit

Re-play Adversarial Techniques. Contribute to Cyb3rWard0g/mordor development by creating an account on GitHub.

http://thepersistenceofchaos.com, a laptop running 6 pieces of malware that have caused financial damages totaling $95B

The American Registry for Internet Numbers, Ltd. (ARIN) has won a legal case against an elaborate multi-year scheme to defraud the Internet community of approximately 735,000 IPv4 addresses, the organization has revealed. While the specifics of the findings…

President Trump on Wednesday signed an executive order declaring a "national emergency" that would empower his administration to block foreign tech companies from doing business in the U.S. if they

Inject JavaScript to explore native apps on Windows, macOS, GNU/Linux, iOS, Android, and QNX

0 votes and 0 comments so far on Reddit

Recognizing that the internet is not always secure, millions of people are turning to the Tor anonymity system as a way to browse the World Wide Web more privately. However, Tor has been found to have its own vulnerabilities. This has a team of faculty and…

Introduction At the end of March we reported on the hidden potential to download and run unverified code in UC Browser. Today we will examine in detail how it...

0 votes and 0 comments so far on Reddit

A Simple and Comprehensive Vulnerability Scanner for Containers, Compatible with CI - knqyf263/trivy

Over the weekend, there was an attack on Stack Overflow. We have confirmed that some level of production access was gained on May 11. We discovered and investigated the extent of the access and are addressing all known vulnerabilities. We have not identified…

“Data exfiltration occurs when malware and/or a malicious actor carries out an unauthorized data transfer from a computer.” — Wikipedia

0 votes and 1 comment so far on Reddit