A new W3C standard called Payment Request API is now increasingly being adopted in most browser implementations since it makes entering and storing credit card info significantly faster. However, the fact that it stores the information in the browser similar to how passwords are currently...
Earlier this week, security researcher Will Strafach found that Uber’s app had the ability to record the iPhone’s screen, an entitlement that no other third-party app has. The undocumented private app permission can only be granted by Apple, and are normally not given to most...
FireEye researchers have recently uncovered hacking campaigns that use the data-stealing FormBook malware to target defense, aerospace, and manufacturing sectors in US and South Korea. Advertised as a software designed to provide an “extensive and powerful Internet monitoring experience”, the FormBook malware is being sold in...
Boston, MA - Last Wednesday, U.S. Deputy Attorney General Rod Rosenstein expressed his frustration against strong encryption at the Cambridge Cyber Summit, calling it a serious problem that hampers the ability of law enforcement to solve crimes and protect public safety. He also said that...
Palo Alto Networks Unit 42 researchers recently uncovered a campaign that uses a malware called FreeMilk to hijack email conversations with phishing messages designed to spread malware into corporate networks. The FreeMilk phishing attack uses the CVE-2017-0199 remote code execution flaw to take control of a...
For the first time, bipartisan lawyers introduced a new House bill which intends to limit the access of law enforcement to NSA-gathered data. Section 702 of the Foreign Intelligence Surveillance Act (FISA) currently allows various agencies to query a database of NSA intelligence which includes sensitive...
It is predicted that a key part of the plan to use facial recognition against terrorism may not prosper in the Australian Senate. Earlier this week, it was reported that the Australian Capital Territory has declined to sign on a database function that will permit agencies...
Last Wednesday, toy giant Mattel announced that it will not be moving forward on its planned child-focused smart hub called Aristotle. Earlier this month, several features of the smart devices were revealed, which included the ability to react to a child’s needs such as turning on...
USA - Fast food chain Sonic recently divulged in a press release that the breach that hit the company was caused by malware, and that affected customers are eligible to a free identity theft protection service provided by Experian. Sonic however, did not specify that the...
Northwest Territories, Canada - It was revealed in the Information and Privacy Commissioner’s (IPC) annual report that six staff members of the Inuvik Regional Hospital wrongly accessed patient information using the MediPatient system last 2016. It was also discovered that the acts which breached patient privacy...