Cookie-nabbing app could have served users side helping of XSS

Credit to Author: Danny Bradbury| Date: Fri, 14 Feb 2020 12:29:39 +0000

A popular GDPR compliance WordPress plugin vendor has patched a flaw that rendered both site visitors and admins vulnerable to XSS attacks.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/uCTRH0KiVPg” height=”1″ width=”1″ alt=””/>

Read more

Suspect who refused to decrypt hard drives released after four years

Credit to Author: John E Dunn| Date: Fri, 14 Feb 2020 12:12:52 +0000

The US Court of Appeals ruled that he couldn’t continue to be held for refusing to give up his passcodes.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/-PcVPhz2bC0″ height=”1″ width=”1″ alt=””/>

Read more

Facebook ices in-app dating in EU after questions from regulator

Credit to Author: Lisa Vaas| Date: Fri, 14 Feb 2020 11:28:30 +0000

The app’s rollout in the EU has been delayed until Facebook can show privacy regulators its data protection workings.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/roQf9-KHcLw” height=”1″ width=”1″ alt=””/>

Read more

Self-driving car dataset missing labels for pedestrians, cyclists

Credit to Author: Lisa Vaas| Date: Fri, 14 Feb 2020 11:10:23 +0000

Udacity Dataset 2, used to train thousands of engineers, contained thousands of unlabeled vehicles and hundreds of unlabeled pedestrians.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/O3azSOGnuHw” height=”1″ width=”1″ alt=””/>

Read more

Corp.com is up for sale – check your Active Directory settings!

Credit to Author: Danny Bradbury| Date: Fri, 14 Feb 2020 10:51:44 +0000

An old, dormant domain is going on sale – and the results could be catastrophic for enterprises with common Active Directory misconfigurations.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/eNE2lUuM6GI” height=”1″ width=”1″ alt=””/>

Read more

Xstream SSL Inspection: Visibility, protection and performance

Credit to Author: Chris McCormack| Date: Thu, 13 Feb 2020 17:12:12 +0000

With XG Firewall v18’s new Xstream Architecture you’ll get extreme visibility and protection without compromising on performance.<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/fc_TuvGBe08″ height=”1″ width=”1″ alt=””/>

Read more

MIT researchers say mobile voting app piloted in U.S. is rife with vulnerabilities

Credit to Author: Lucas Mearian| Date: Thu, 13 Feb 2020 13:30:00 -0800

Elections officials in numerous states have piloted various mobile voting applications as a method of expanding access to the polls, but MIT researchers say one of the more popular apps has security vulnerabilities that could open it up to tampering by bad actors.

The MIT analysis of the application, called Voatz, highlighted a number of weaknesses that could allow hackers to “alter, stop, or expose how an individual user has voted.”

Additionally, the researchers found that Voatz’s use of Palo Alto-based vendor Jumio for voter identification and verification poses potential privacy issues for users.

To read this article in full, please click here

Read more

Cyber tips for safe online dating: How to avoid privacy gaffs, exploits, and scams

Credit to Author: Malwarebytes Labs| Date: Thu, 13 Feb 2020 16:36:45 +0000

We give advice on safe online dating, including steering clear of scams, buttoning up on privacy, and avoiding vulnerable apps.

Categories:

Tags:

(Read more…)

The post Cyber tips for safe online dating: How to avoid privacy gaffs, exploits, and scams appeared first on Malwarebytes Labs.

Read more