AT Command Hitch Leaves Android Phones Open to Attack
Researchers used AT commands to rewrite device firmware, bypass Android security mechanisms, exfiltrate sensitive device information, and unlock screens.
Lindsey O'Donnell
Cross-Site Scripting Flaw in Apache ActiveMQ Threatens Web Visitors
With the malicious code embedded into websites, the attacker can then piggyback on the trust level of the website and launch a variety of attacks.
AdvisorsBot Downloader Emerges in Raft of Malware Campaigns
A tricky downloader has hit the scene in a series of campaigns targeting restaurants, hotels and telecommunications companies.
Facebook has been struggling to keep its data privacy woes at bay this week, between banning apps on its social media platform – and pulling its own app from Apple’s store.
A remote, unauthenticated attacker could execute arbitrary commands on systems with the privileges of the Ghostscript code.
The two vulnerabilities are critical remote code execution flaws that exist in Adobe Photoshop CC.
Dark Tequila, which has been active since 2013, is highly modular and targets victims in Mexico.
Bishop Fox’s Christie Terrill talks to us about IoT security and other trends at Black Hat 2018 this month.
After a report said Google tracks users even when they opt out, the company is under fire from activists and has been slapped with a lawsuit.
Researchers launched a Proof-of-Concept attack on two Android mobile phones and an embedded system board.
