Top 10 Stories

Digital signals can be conveyed to certain places by satellites where the Internet appears like a wonder: off-the-network desert sunlight based homesteads, the Arctic or a plane carrying warship adrift. Be that as it may, in radiating information to and from the world’s most remote spots, satellite Internet might likewise offer its signals to a less generous beneficiary: any advanced scoundrel inside of a large number of miles. In a presentation at the Black Hat...

Google today released to open source a new patch for the infamous Stagefright vulnerability found in 950 million Android devices after researchers at Exodus Intelligence discovered the original patch was incomplete and Android devices remain exposed to attack. “We’ve already sent the fix to our partners to protect users, and Nexus 4/5/6/7/9/10 and Nexus Player will get the OTA update in the September monthly security update,” a Google spokesperson told Threatpost. Last week at Black...

A Harvard student named Aran Khanna lost an internship position with Facebook because he created a Google Chrome extension that pointed out a major privacy flaw in the site. The tool, called Marauder’s Map, used location data gathered through Messenger’s Android app. Though many users didn’t know it, Messenger shared detailed location information whenever a message was sent. Khanna’s program simply grabbed that data and charted it, showing a clear and scary map that was able...

Researchers have identified a handful of vulnerabilities present in three different plugins used by the content management system WordPress. The issues, most of which are cross-site scripting (XSS) vulnerabilities, could give some users administrative privileges, warns DXW Security, a British firm that found the issues and disclosed them on Monday. Two XSS vulnerabilities, one reflected and one stored, can be found in version 3.0 of the WordPress’ iframe plugin. The stored vulnerability could allow users to...

Cisco has warned users to watch out who's got admin access to kit, because it's seen malicious ROM images in the wild. The problem is that this isn't something the Borg can just issue a patch for. Admins – with appropriate credentials, naturally – need to be able to drop new ROM images on their kit as a matter of course. "The ability to install an upgraded ROMMON image on IOS devices is a standard,...

Facebook tonight awarded a $100,000 prize to a team of Georgia Tech researchers who found a new class of browser-based memory-corruption vulnerabilities and built a corresponding detection technique. The award brings the social media giant on par with Microsoft and its six-figure payouts for mitigation bypasses and new defensive techniques for those bypasses. The award, Facebook’s Internet Defense Prize, was handed out at the USENIX Security Symposium in Washington, D.C., and doubles last year’s inaugural...

Windows 10 uses the Internet a lot to support many of its features. The operating system also sports numerous knobs to twiddle that are supposed to disable most of these features, and the potentially privacy-compromising connections that go with them. Unfortunately for privacy advocates, these controls don't appear to be sufficient to completely prevent the operating system from going online and communicating with Microsoft's servers. For example, even with Cortana and searching the Web from the...

Dropbox has upped account security in a major way, announcing that Universal 2nd Factor (U2F) security keys are now an accepted form of verification during two-step login. Dropbox has adopted this new method of verification to provide stronger defence against phishing attacks. Two-step login has become the norm in recent years as online privacy and security become growing concerns, but companies are now beginning to eschew the standard mobile verification in favour of U2F keys....

US authorities have now charged 32 members of an alleged international hacking and insider trading ring. The group, operating in the US and Ukraine, allegedly netted more than $100m (£64m) in illegal profits. Nine members had already been charged by district attorneys in New York and New Jersey. Hackers are accused of accessing data being processed by financial "wires" in order to obtain information about companies before it was made public. The information was then...

Children are being raped, citizens murdered, and lost souls trafficked for sex and the police can't do anything about it thanks to Apple and Google, senior government lawyers and a top cop have claimed. In an op-ed in The New York Times, Manhattan district attorney Cyrus Vance Jr; Adrian Leppard, commissioner of the City of London Police; Paris' chief prosecutor François Molins; and Javier Zaragoza, chief prosecutor of the High Court of Spain, said that the...