Passcode Bypass Bug and Email Attachment Encryption Plague iOS 7.1.1
Two issues – one that allows the bypass of the iPhone 5’s security lockscreen and one that fails to encrypt email attachments are affecting the most recent build of iOS, 7.1.1.
Chris Brook
About
"Distrust and caution are the parents of security" - Benjamin Franklin
Critical Holes in OAuth, OpenID Could Leak Information, Redirect Users
A serious vulnerability in both the OAuth and OpenID protocols could lead to complications for those who use the services to login to websites like Facebook, Google, LinkedIn, Yahoo, Microsoft, PayPal among many others.
Apple Fixes Critical Hole in Developer Center
Apple patched a potentially serious hole in its Developer Center that could have given anyone unfettered access to personal contact information for Apple employees and partners.
A recent VoIP phishing campaign has been netting the payment card information of up to 250 Americans per day.
Google recently removed five bogus wallpaper applications from its Play marketplace after they were found sneakily mining Bitcoins.
UPDATE – Viber, a messaging and VoIP application similar to WhatsApp, is in the middle of patching a vulnerability that could allow an attacker to view sensitive information shared between users like images, videos and location information.
A vulnerability in NetSupport Manager could yield sensitive configuration settings and lead to compromise.
Developers who produce apps intended for use on internal networks at government agencies are getting a vetting process of their own called AppVet.
A slew of old AOL email accounts were hacked over the weekend to send spam to other users.
Amidst all of the fallout related to Heartbleed, Oracle is doing its best to keep users apprised of its efforts to patch any and all software that may be vulnerable to the OpenSSL issue.
