Sophos – Page 113 – PossibleThreat Articles

EARN IT Act threatens end-to-end encryption

March 17, 2020 0 Comments #nobackdoors, backdoor, backdoors, communications decency act, Cryptography, earn it act, earn-it, encryption, end-to-end encryption, Government security, Law & order, no backdoors, section 230

Credit to Author: Lisa Vaas| Date: Fri, 13 Mar 2020 13:12:27 +0000

The bill, which would undercut Section 230 protections for online publishing, presents itself as a way to stop online child abuse.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/SqOImXCXz8A” height=”1″ width=”1″ alt=””/>

Security Sophos

Digital piggy bank sevice broken into by cybercrooks

March 3, 2020 0 Comments data breach, data loss, loqbox, phishing

Credit to Author: Paul Ducklin| Date: Tue, 03 Mar 2020 14:08:13 +0000

A financial proivider that gives loans but locks them down to turn them into savings… didn’t lock down its own network.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/zpLp7E5OQY8″ height=”1″ width=”1″ alt=””/>

Security Sophos

Huge flaw found in how facial features are measured from images

March 3, 2020 0 Comments AI, anthropometry, Artificial intelligence, biometrics, camera-to-subject distance, conference, eilidh noyes, face matching, faceprints, facial recognition, Law & order, Machine Learning, research, surveillance, ufig, unfamiliar face identification group, university of huddersfield

Credit to Author: Lisa Vaas| Date: Tue, 03 Mar 2020 12:48:02 +0000

It has to do with optics: faces appear to flatten out as we get further away. Our brains compensate, but AI-run facial recognition doesn’t.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/A15DxfJxLcc” height=”1″ width=”1″ alt=””/>

Security Sophos

GoodRx stops sharing personal medical data with Google, Facebook

March 3, 2020 0 Comments adtech, advertising, branch, braze, data loss, Data Sharing, facebook, goodrx, Google, hipaa, Marketing, medical information, Mobile, mobile marketing, personal data deletion, prescription drugs, Privacy, security threats, Social networks, surveillance, targeted advertising, targeted marketing

Credit to Author: Lisa Vaas| Date: Tue, 03 Mar 2020 12:47:27 +0000

The mobile app saves people money but was letting 20 companies know who’s taking antipsychotics, erectile dysfunction and HIV meds, and more.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/Mjy_qyNwWEk” height=”1″ width=”1″ alt=””/>

Security Sophos

Nvidia patches severe flaws affecting GeForce, Quadro NVS and Tesla

March 3, 2020 0 Comments cve vulnerabilities, cve‑2020‑5957, cve‑2020‑5958, cve‑2020‑5959, cve‑2020‑5960, cve‑2020‑5961, CVEs, geforce, gpu display, Linux, malware, Microsoft, NVIDIA, nvidia gpu, nvs, Operating Systems, Patches, Patching, quadro, security threats, tesla, vulnerability, Windows, windows gpu display driver

Credit to Author: John E Dunn| Date: Tue, 03 Mar 2020 11:09:05 +0000

In all, the update covers five Windows and Linux desktop CVE vulnerabilities, including one rated as critical.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/YitOMgSO498″ height=”1″ width=”1″ alt=””/>

Security Sophos

XSS plugin vulnerabilities plague WordPress users

March 3, 2020 0 Comments async, cross-site scripting, flexible checkout fields, JavaScript, plugins, security threats, vulnerability, woocommerce, Wordpress, WordPress plugin, XSS

Credit to Author: Danny Bradbury| Date: Tue, 03 Mar 2020 10:44:44 +0000

Thousands of active WordPress plugins have been hit with a swathe of XSS vulnerabilities that could give attackers complete control of the site.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/Bjh4-1ye-9E” height=”1″ width=”1″ alt=””/>

Security Sophos

Siri and Google Assistant hacked in new ultrasonic attack

March 2, 2020 0 Comments Android, Apple, bixby, dolphin attack, dolphinattack, Google, Google Assistant, Huawei, lyrebird, motorola, Privacy, Samsung, security threats, Siri, surfingattack, ultrasonic waves, Ultrasound, voice assistants, xiaomi

Credit to Author: John E Dunn| Date: Mon, 02 Mar 2020 13:07:04 +0000

Researchers have demonstrated how voice assistants can be secretly activated without ever physically touching the device.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/d4GKhM4slSc” height=”1″ width=”1″ alt=””/>

Security Sophos

Let’s Encrypt issues one billionth free certificate

March 2, 2020 0 Comments acme, automated certificate management environment, Cisco, Cryptography, digital certificates, EFF, Electronic Frontier Foundation, facebook, Google, http, https, ietf, internet engineering task force, internet security research group, internet society, isrg, lets encrypt, Mozilla, ovh

Credit to Author: Danny Bradbury| Date: Mon, 02 Mar 2020 13:06:25 +0000

Thanks to this flood of free certificates, the web is a lot more encrypted than it was a few years ago.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/m_p5aVh50cI” height=”1″ width=”1″ alt=””/>

Security Sophos

Ironpie robot vacuum can suck up your privacy

March 2, 2020 0 Comments 2-factor Authentication, Checkmarx, Internet of Things, IoT, perceptin, Privacy, robot vacuum, robots, rsa, rsa conference, security threats, shodan, smart vacuum, trifo ironpie, vulnerability, webcam

Credit to Author: Lisa Vaas| Date: Mon, 02 Mar 2020 12:37:11 +0000

You might want to unplug this not-so-smart robot: researchers found they can watch video streams piped out from its security camera.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/kGtvD8tF-C4″ height=”1″ width=”1″ alt=””/>

Security Sophos

Fresh phish! Stripe scam baked and delivered in under an hour

March 2, 2020 0 Comments phishing, Scam, Spam, stripe

Credit to Author: Paul Ducklin| Date: Mon, 02 Mar 2020 12:24:39 +0000

Less than an hour after the crooks registered their scamming domain, the phishing attack was under way.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/fdEzwug8kJk” height=”1″ width=”1″ alt=””/>