Security Affairs

NOVEMBER 11, 2022

Lookout researchers discovered two long-running surveillance campaigns targeting the ethnic minority Uyghurs. Researchers from mobile security firm Lookout uncovered two long-running surveillance campaigns targeting the Uyghurs minority. List of installed packages. Call logs and geocoded location associated with the call. .”

Surveillance

CSO Magazine

MARCH 31, 2023

However, their exploit chains also relied on known vulnerabilities to work, highlighting the importance of both users and device manufacturers to speed up the adoption of security patches. Several commercial spyware vendors developed and used zero-day exploits against iOS and Android users last year.

Spyware

Security Affairs

FEBRUARY 11, 2021

Researchers at mobile security firm Lookout have provided details about two recently discovered Android spyware families, dubbed Hornbill and SunBird, used by an APT group named Confucius. Since 2018, the hackers started targeting mobile users with an Android surveillance malware ChatSpy. ” concludes the report.

Spyware

Security Affairs

FEBRUARY 9, 2023

Researchers reported that the top-of-the-line Android mobile devices sold in China are shipped with malware. The smartphones analyzed by the r researchers were observed sending data to the device vendor and the Chinese mobile network operators (e.g., Chinese manufacturers have yet to comment on the research.

Mobile

Security Affairs

NOVEMBER 19, 2019

“After disclosing these findings to Google, they shared the report with other Android manufacturers, and Samsung confirmed the vulnerabilities existed in their smartphones as well. The post CVE-2019-2234 flaws in Android Camera Apps exposed millions of users surveillance appeared first on Security Affairs. Pierluigi Paganini.

Surveillance

Security Affairs

MARCH 3, 2024

Camera doorbells manufactured by the Chinese company Eken Group Ltd under the brands EKEN and Tuck are affected by major vulnerabilities. Researchers from Consumer Reports (CR) discovered severe vulnerabilities in doorbell cameras manufactured by the Chinese company Eken Group Ltd. ” reads the report published by CR.

Manufacturing

Security Affairs

JANUARY 2, 2021

According to the alert issued by the FBI, the swatters have been hijacking smart devices such as video and audio capable home surveillance devices. “Recently, offenders have been using victims’ smart devices, including video and audio capable home surveillance devices, to carry out swatting attacks. ” concludes the alert.

Surveillance

Malwarebytes

SEPTEMBER 1, 2021

This time, the FTC spoke more forcefully about the threat that these apps present to overall privacy and their undeniable intersection with domestic violence , saying in a release that the “apps sold real-time access to their secret surveillance, allowing stalkers and domestic abusers to stealthily track the potential targets of their violence.”.

Surveillance

Security Affairs

FEBRUARY 13, 2020

can covertly access mobile-phone networks around the world through “back doors” designed for use by law enforcement, as Washington tries to persuade allies to exclude the Chinese company from their networks.” This week The Wall Street Journal reported that U.S. “U.S. officials say Huawei Technologies Co. officials said. .

Manufacturing

Security Affairs

SEPTEMBER 12, 2019

Cybersecurity researchers at AdaptiveMobile Security disclosed a critical vulnerability in SIM cards dubbed SimJacker that could be exploited by remote attackers to compromise targeted mobile phones and spy on victims just by sending an SMS. “ Simjacker represents a clear danger to the mobile operators and subscribers.

Hacking

Security Affairs

MAY 22, 2024

The digital imaging products manufacturer OmniVision disclosed a data breach after the 2023 ransomware attack. The company designs and develops digital imaging products for use in mobile phones, laptops, netbooks and webcams, security and surveillance cameras, entertainment, automotive and medical imaging systems.

Data breaches

eSecurity Planet

JULY 21, 2021

In a statement to journalists, Apple officials argued that the company has worked with security experts outside of the company, which has resulted in the iPhone being “the safest, most secure consumer mobile device on the market.” Mobile Security, Privacy at Issue. Thousands of iPhones have potentially been compromised.

Spyware

Security Affairs

MAY 29, 2023

Security researchers at Cisco Talos and the Citizen Lab have shared technical details about a commercial Android spyware named Predator that is sold by the surveillance firm Intellexa (formerly known as Cytrox). The attacks aimed at installing the surveillance spyware Predator, developed by the North Macedonian firm Cytrox.

Spyware

Security Affairs

JUNE 12, 2022

The flaws impact products manufactured by LenelS2, a provider of advanced physical security solutions (i.e. access control, video surveillance and mobile credentialing) owned by HVAC giant Carrier. The experts focused on Carrier’s LenelS2 access control panels, manufactured by HID Mercury.

Firmware

CyberSecurity Insiders

JUNE 29, 2021

Security researchers say that the flaw is related to software component used in cloud surveillance platform ThroughTek that is used by OEMs while manufacturing IP Cameras, baby monitoring cams and pet monitoring solutions along with robotic and battery devices.

Firmware

SC Magazine

APRIL 9, 2021

A screenshot from a music video of hte Evan Greer song, “Surveillance Capitalism,” which tackles the dangers of commercial surveillance technology. Sometimes fighting the excesses of the creeping surveillance economy is done through position papers, coalition building and lawsuits. Our concern is not ‘Hey patch this up.’

Surveillance

Security Affairs

JULY 20, 2022

. “These vulnerabilities could impact access to a vehicle fuel supply, vehicle control, or allow locational surveillance of vehicles in which the device is installed.” Most North American organizations using flawed MiCODUS devices are in the manufacturing sector, while those in South America are government entities.

Manufacturing

Malwarebytes

AUGUST 20, 2024

In June, the Attorney General (AG) announced he had opened an investigation into several car manufacturers over allegations that the companies had improperly collected mass amounts of data about drivers directly from the vehicles and then sold the information to third parties.

Insurance

The Last Watchdog

MARCH 8, 2021

Another telling finding: some 65 percent of respondents indicated they were extremely or very concerned about websites and mobile apps that proactively track their online behaviors, while only 14 percent said they were not at all concerned. It’s quite natural to listen and respect the view of the manufacturer that you are invested in.

Data privacy

SecureWorld News

NOVEMBER 15, 2023

This could raise concerns about the potential for this data to be used for purposes other than those originally disclosed to customers, such as targeted advertising or surveillance. For the auto manufacturers involved, this is a significant victory. states specific to a private right of action that allows class actions.

Data collection

Adam Shostack

JANUARY 2, 2025

In a sense, products are never perfected, but express tradeoffs between many pressures, like manufacturing techniques, available materials, and fashion in both superficial and deep ways. Coinbase, one of the most widely used Bitcoin wallets, has encouraged customers to disconnect their mobile phones from their Coinbase accounts.

Software

eSecurity Planet

OCTOBER 21, 2022

From facial recognition to surveillance cameras to time trackers or just having a couple guys standing over employees’ shoulders, there are a multitude of ways to make sure employees are staying on-task and being productive. Businesses have long wondered if employees are staying focused and doing their jobs.

Computers and Electronics

SecureList

JUNE 20, 2023

These vulnerabilities could allow an attacker to gain unauthorized access to the device and steal sensitive information, such as video footage, potentially turning the feeder into a surveillance tool. Typically, pet feeders are controlled by a mobile application that allows you to set, update and manage them.

Firmware

Centraleyes

DECEMBER 21, 2023

Ubiquiti, a leading networking and video surveillance camera manufacturer, has successfully resolved a bug that inadvertently allowed users access to other customers’ accounts and private live video streams. The company attributed the problem to an upgrade in its cloud infrastructure.

Surveillance

CyberSecurity Insiders

FEBRUARY 15, 2023

Karin Nyman, the in-charge spokesperson of SAS, stated that his company was working on remediating the effects of the digital attack and urged customers to stay away from the mobile app for now. Last but not the least is the news related to Chinese devices being used in London.

Cyber Attacks

Google Security

MAY 15, 2024

In addition to our new suite of advanced theft protection features to help keep your device and data safe in the case of theft, we’re also focusing increasingly on providing additional protections against mobile financial fraud and scams. These features require device OEM integration and compatible hardware.

Scams

SC Magazine

MAY 7, 2021

Recently, a group of hackers located the super admin credentials for security camera company Verkada, and gained access to Verkada customers’ surveillance cameras , including Tesla and the Madison County Jail. For example, many legacy VPN clients cause mobile apps to break when re-establishing connections after a network transition).

VPN

SecureList

APRIL 27, 2021

We investigated a long-running espionage campaign, dubbed A41APT, targeting multiple industries, including the Japanese manufacturing industry and its overseas bases, which has been active since March 2019. Domestic Kitten is a threat group mainly known for its mobile backdoors. Other interesting discoveries.

Malware

SecureList

MAY 31, 2021

A41APT is a long-running campaign, active from March 2019 to the end of December 2020, that has targeted multiple industries, including Japanese manufacturing and its overseas bases. Ecipekac: sophisticated multi-layered loader discovered in A41APT campaign.

Malware

Pen Test

OCTOBER 12, 2023

About the Author: Larbi OUIYZME Cybersecurity Consultant and Licensed Ham Radio Operator since 1988 with prefix CN8FF, deeply passionate about RF measurement, antennas, satellites, Software-defined radio, Digital Mobile Radio and RF Pentesting. Criminals may use hijacked drones for illegal surveillance, smuggling, or even as weapons.

Encryption

Schneier on Security

MAY 29, 2024

Research paper: “ Surveilling the Masses with Wi-Fi-Based Positioning Systems : Abstract: Wi-Fi-based Positioning Systems (WPSes) are used by modern mobile devices to learn their position using nearby Wi-Fi access points as landmarks. Really fascinating implications to this research.

Wireless

ForAllSecure

APRIL 22, 2021

With the proliferation of mobile devices, the perimeter became porous than non existent. The Mirai botnet contributed to a massive denial of service attack that brought parts of the Internet to a standstill, what was remarkable was that Mariah was constructed from 1000s of Internet of Things devices, namely surveillance cameras.

IoT

ForAllSecure

APRIL 22, 2021

With the proliferation of mobile devices, the perimeter became porous than non existent. The Mirai botnet contributed to a massive denial of service attack that brought parts of the Internet to a standstill, what was remarkable was that Mariah was constructed from 1000s of Internet of Things devices, namely surveillance cameras.

IoT

ForAllSecure

MARCH 14, 2022

FOX: Roberts: The tweet was pretty blunt but it was in response to the GAO reports and apparently one of the airline manufacturers tweeted, basically they put out a response to say that they thought it was all nice and secure. I have a laptop, with linux, so I can hack into a network or a mobile phone app, or a remote garage door opener.

Hacking

SecureWorld News

JANUARY 5, 2021

Perpetrators are increasingly using victims' smart home devices, such as home video cameras and audio surveillance technology. The FBI says it will work with the manufacturers of these smart home devices to help guide customers in avoiding these attacks. The FBI is now reporting on new twist and trend in swatting attacks.

Passwords

ForAllSecure

SEPTEMBER 21, 2021

And what if that unease was coming from your mobile device. The Federal Trade Commission in the United States, banned an app called SpyPhone, and its CEO Scott Zuckerman, from operating in the surveillance industry. Vamosi: There's also Pegasus, a type of surveillance software created by NSO in Israeli security company.

Technology