Down the Rabbit Hole with a BLU Phone Infection
Much-maligned BLU phones have been a privacy and spyware nightmare. Threatpost shares the story of one victim who experienced firsthand a relentless wave of unwanted programs, spyware and frustration.
Mobile Security
iOS Password Prompts are Ripe for Abuse
Apple’s password prompts for iOS devices are an easy target for phishing attacks to steal iTunes passwords and IDs.
Five Critical Android Bugs Get Patched in October Update
Android receives three remote code execution patches for vulnerabilities rated critical as Google launches a new Pixel/Nexus Security Bulletin.
The FBI can keep details around how much it paid and which company it hired to unlock a terrorist’s iPhone 5C in 2016 secret, the court ruled over the weekend.
Signal is testing out a new private contact discovery service that will let the app determine if a user has Signal contacts in their address book, but forbid its servers from accessing the users’ address book.
Google’s Project Zero released a proof-of-concept attack against a Wi-Fi firmware vulnerability in Broadcom chips that backdoors the iPhone 7. The flaw was patched in iOS 11.
Researchers settle PIN versus pattern debate with study that proves a low-tech hack makes cracking an unlock screen simple.
Google’s Android security team has turned a corner with 8.0 Oreo, reducing the attack surface, compartmentalizing components and beefing up protection against rogue apps.
Apple released a number of patches, including a security update for iOS 11, which is available today.
An undocumented Microsoft Office feature allows for spying via specially crafted Word documents—no macros, exploits or any other active content needed.
