Verizon Femtocell Hack Intercepts Calls, Data Transmissions
Two iSEC Partners researchers will demonstrate a hack of a Verizon Network Extender femtocell that enables them intercept cellphone calls, and data and text transmissions.
Michael Mimoso
Amazon 1Button Browser Add-On Leaks Data in Plain Text
A researcher discovered that Amazon 1Button, a browser extension, leaks personal data–some of it in plain text.
Second Android Master Key Attack Surfaces
Chinese researchers have published a second Android Master Key attack, leveraging the same vulnerability that allows attackers to modify signed apps with malware.
A security researcher is expected to unveil Tortilla, an open source tool that anonymously routes TCP and DNS traffic through Tor, at the same time bridging a gap in Windows-based tools for security researchers who use Tor.
The fallout from DEF CON organizers’ decision to ask the feds to stay away from this year’s event has been mixed–and predictable.
This month’s Patch Tuesday security bulletins called attention to vulnerabilities in the Windows kernel’s font-processing engine, which had been exploited previously in Duqu and other targeted attacks.
Google and Microsoft have joined forces with a number of civil liberties groups in requesting that a gag order be lifted allowing the tech companies to disclose how many FISA requests they receive for user data.
Microsoft’s July Patch Tuesday security bulletins patch numerous critical vulnerabilities, including some related to malicious TrueType Font files used in a number of high-profile targeted attacks.
Adobe’s July security updates include patches for Flash Player, Shockwave Player and ColdFusion vulnerabilities.
Firmware images for devices at the core of the Emergency Alert System are shipping with a compromised root SSH key, researchers at IOActive said.
