Meta Faces Scrutiny Over Dormant Facial Recognition Code Recent reports have uncovered that Meta has stored dormant facial recognition technology on over 50 million smartphones, embedded within the companion application for its Ray-Ban and Oakley smart glasses. Internally referred to as NameTag, this feature, if activated, would enable users to…
A team of cybersecurity researchers from the University of New Haven has unveiled significant vulnerabilities within a popular virtual reality (VR) application known as Bigscreen. Their findings, shared exclusively with The Hacker News, highlight how these flaws could allow malicious actors to compromise users’ privacy and security during VR interactions,…
New Vulnerabilities Expose All Major Operating Systems to DMA Attacks Recent research has unveiled a significant security concern that affects widely-used operating systems, including Microsoft Windows, Apple macOS, Linux, and FreeBSD. These vulnerabilities allow attackers to potentially bypass existing security measures against Direct Memory Access (DMA) attacks by exploiting newly…
In a recent cybersecurity incident involving a speaker model known as the Katana V2X, a researcher successfully manipulated its firmware to explore potential vulnerabilities. After replacing the original firmware with a modified version that displayed the word “patched” on the speaker’s LED, the researcher turned his focus to FreeRTOS—the open-source…
A critical security vulnerability has been identified in Google Chrome that poses a significant risk to users. Discovered by Clement Lecigne, a security researcher from Google’s Threat Analysis Group, this flaw could enable remote attackers to execute arbitrary code, potentially giving them complete control over affected systems. Designated as CVE-2019-5786,…
Microsoft has rolled out a series of crucial updates as part of its monthly “Patch Tuesday” initiative, aiming to address a total of 64 CVE-listed vulnerabilities in its Windows operating systems and various applications. Among these vulnerabilities, 17 have been classified as critical, 45 as important, while one is considered…
Critical Vulnerability in WinRAR Exploited by Cybercriminals Recent reports have highlighted that cybercriminal groups and independent hackers are actively taking advantage of a critical code execution vulnerability in WinRAR, a widely-used file compression tool with a user base of over 500 million. The vulnerability, designated CVE-2018-20250, was patched in the…
Libssh2 Addresses Critical Security Vulnerabilities in Latest Update Libssh2, an open-source C library widely utilized for SSHv2 communication, has released a critical update aimed at addressing nine security vulnerabilities. This release underscores the persistent security risks inherent in widely used libraries and highlights the necessity for developers and organizations to…
In a recent cybersecurity incident involving Dashlane, attackers gained access to encrypted user vaults, raising concerns about the robustness of the platform’s security measures. While the strength of users’ master passwords plays a critical role in preventing unauthorized access, it is essential to note that not all users adhere to…