also @ TechSpot: Onion Pi transforms Raspberry Pi into anonymous Wi-Fi hotspot

TechSpot News

exploits articles


Android infections tripled in 2012, "Bill Shocker" costliest mobile malware ever

Android infections tripled in 2012, "Bill Shocker" costliest mobile malware ever
  • Posted April 15, 2013, 6:00 PM by Rick Burgess | Filed in Mobile Computing, IT Security
  • Android has become an increasingly popular target for malware authors, a recent report (pdf) by NQ Mobile indicates. The security firm claims that it discovered over 65,000 types of malware -- more than double the amount from 2011 -- and bills…

Apple releases iOS 6.1.3, finally fixes lock screen bug

Apple releases iOS 6.1.3, finally fixes lock screen bug
  • Posted March 19, 2013, 6:30 PM by Rick Burgess | Filed in Mobile Computing, Apple
  • Apple today released iOS 6.1.3, an update to its mobile OS which contains "improvements and bug fixes". Perhaps the most importantly though, Apple has finally fixed the lock screen (aka. passcode) bug which allowed potential miscreants to bypass lock screens…

Critical Windows USB exploit allows flash drives to grant root access, patch issued

Critical Windows USB exploit allows flash drives to grant root access, patch issued
  • Posted March 13, 2013, 4:30 PM by Rick Burgess | Filed in Microsoft, IT Security
  • Microsoft's Patch Tuesday yielded an interesting security fix for a glaring vulnerability in how the Windows kernel handles USB device enumeration. The critical vulnerability allowed potential hackers with physical access to a Windows PC to run arbitrary code with system…

New Mac virus skirts Gatekeeper, initiates creepy reverse-shell connection

New Mac virus skirts Gatekeeper, initiates creepy reverse-shell connection
  • Posted February 19, 2013, 6:30 PM by Rick Burgess | Filed in IT Security, Apple
  • A new trojan virus is targeting computers running Mac OS X and initiating an encrypted reverse-shell connection, allowing attackers potentially unfettered access to infected machines armed with basic, inbound-only firewalls. Security firm Intego appears to be the first to report…

Android malware steals data, records audio via PC microphone

Android malware steals data, records audio via PC microphone
  • Posted February 4, 2013, 5:30 PM by Rick Burgess | Filed in IT Security, Mobile Computing
  • Two newly-discovered Android apps found on Google Play were designed to spy on their users, claim security experts at Kaspersky. The apps, SuperClean and DroidCleaner, posed as innocuous Android clean-up utilities; however, each app could quietly copy photos, contacts and…

UPnP flaws place millions of networks in danger

UPnP flaws place millions of networks in danger
  • Posted January 29, 2013, 4:00 PM by Rick Burgess | Filed in IT Security, The Web
  • Several security vulnerabilities found within common UPnP implementations have prompted experts at Rapid 7 to recommend the public disable UPnP entirely. Research spanning several months in 2012 revealed that over 2 percent -- or about 50 million -- of all…

IE mouse tracking flaw allows sites to record cursor movements

IE mouse tracking flaw allows sites to record cursor movements
  • Posted December 12, 2012, 5:30 PM by Rick Burgess | Filed in IT Security, Microsoft With Video
  • Spider.io reported today that Microsoft has no "immediate plans" to fix the potential Internet Explorer vulnerability which allows any website operator (or advertiser, hacker etc...) to track a visitor's mouse cursor movements. Microsoft's security team has acknowledged the issue but…

Microsoft faults developers for cracked Windows Store apps

Microsoft faults developers for cracked Windows Store apps
  • Posted December 12, 2012, 2:30 PM by Rick Burgess | Filed in Microsoft, Mobile Computing
  • Microsoft says a crack which allows hackers to download paid-for Windows Store apps without spending a dime is the fault of insecure app code and not a Windows Store issue. Redmond is essentially placing the onus of protecting apps against…

Trojan bypasses two-factor authentication, steals $46.5 million

Trojan bypasses two-factor authentication, steals $46.5 million
  • Posted December 7, 2012, 6:00 PM by Rick Burgess | Filed in IT Security, Mobile Computing
  • A sophisticated, multi-layered trojan dubbed "Eurograbber" is estimated to be responsible for siphoning over €36 million -- or about $46.5 million -- from the bank accounts of unsuspecting Europeans. In a case study (pdf) performed by Versafe and Check Point Software Technologies, researchers reveal…

Vulgar post lands on prominent blogs, Tumblr patches vulnerability

Vulgar post lands on prominent blogs, Tumblr patches vulnerability
  • Posted December 4, 2012, 6:00 PM by Rick Burgess | Filed in The Web
  • Tumblr says it has addressed a vulnerability which allowed hackers to force visitors into unwittingly reposting an offensive, expletive-ridden message condemning the "tasteless" and "bourgeoisie" blog site. More than 8,600 users were affected -- Cnet, USA Today and The Verge were…

Windows Store crack turns trial apps into full versions

Windows Store crack turns trial apps into full versions
  • Posted November 27, 2012, 12:02 PM by Rick Burgess | Filed in Mobile Computing, Microsoft
  • A tool of questionable ethical value has surfaced, allowing Windows 8 users to transform trial apps into their full-fledged, paid-for counterparts. Wsservice_crk has actually been available for at least a month -- most notably at the MyDigitalLife forums -- but only…

Google improves Flash sandbox, Chrome safer than ever

Google improves Flash sandbox, Chrome safer than ever
  • Posted November 14, 2012, 3:30 PM by Rick Burgess | Filed in Apple, Software
  • Google silently rolled out an update to Chrome which featured an unusual change, apparently one worthy of an announcement on the Chrome Blog: improved Adobe Flash plug-in sandboxing. The company claims its new method of fortifying Flash makes Adobe's plug-in…

Windows 8, IE10 suffer multiple critical zero-day vulnerabilities

Windows 8, IE10 suffer multiple critical zero-day vulnerabilities
  • Posted November 5, 2012, 7:00 PM by Rick Burgess | Filed in Microsoft, IT Security
  • Researchers at Vupen, a private security firm based in France, claim to have found multiple, critical vulnerabilities in Windows 8 and Internet Explorer 10. The team's exploits allow hackers to remotely execute code, allowing crafty individuals to potentially gain control…

Solar panel management systems vulnerable to attack, DHS warns

Solar panel management systems vulnerable to attack, DHS warns
  • Posted October 17, 2012, 5:00 PM by Rick Burgess | Filed in IT Security, Industry News
  • The U.S. Department of Homeland Security has issued another industrial control warning (pdf) regarding critical vulnerabilities found across a number of solar panel systems. Affected systems can be easily exploited using "proof of concept" code developed by security researchers Roberto Paleari…

Chrome hacked at Pwnium, "Pinkie Pie" does it again

Chrome hacked at Pwnium, "Pinkie Pie" does it again
  • Posted October 11, 2012, 5:30 PM by Rick Burgess | Filed in IT Security, Software
  • For the second time this year, hacker "Pinkie Pie" gave Google a run for its money -- and won. The clever hacker exploited yet another vulnerability in Chrome during the second Pwnium conference this year, netting himself (or perhaps herself)…

Simple three-step hack lets iOS users unlock in-app content for free

Simple three-step hack lets iOS users unlock in-app content for free
  • Posted July 13, 2012, 3:30 PM by Rick Burgess | Filed in Mobile Computing, IT Security With Video
  • A new three-step hack promises iPhone and iPad users a simple way to install premium in-app purchases from the App Store -- for free. Remarkably, the hack doesn't require jailbreaking or the installation of any software. Instead, iOS users are…

Apple finally releases Java patches for Flashback malware

Apple finally releases Java patches for Flashback malware
  • Posted April 4, 2012, 9:30 AM by Lee Kaelin | Filed in Apple, IT Security
  • Apple silently released security patches for Java, addressing 12 separate flaws yesterday after their OS X operating system was found to be vulnerable to the Flashback Trojan. In fact security experts were so worried about the potential for damage from…

Infinity Ward bans 1600+ Modern Warfare 3 cheaters

Infinity Ward bans 1600+ Modern Warfare 3 cheaters
  • Posted November 21, 2011, 11:44 AM by Shawn Knight | Filed in Gaming
  • Not to be outdone by EA and their ban hammer tactics to handle cheaters in Battlefield 3, Infinity Ward has doled out bans of their own for Modern Warfare 3 cheaters to the tune of 1600+. Robert Bowling, part of…

1the archive »

TechSpot on:

Subscribe to TechSpot

Get free exclusive content, learn about new features and breaking tech news.