Facebook has now patched two high severity vulnerabilities in its server application that could allow the remote attackers to unauthorisedly obtain sensitive information or cause a denial of service just by uploading a maliciously constructed JPEG image file. The vulnerabilities reside in HHVM.Since the affected HHVM server application is open-source and free then the both issues may also impact other websites that use HHVM including Wikipedia, Box and especially those which

A big alert.If you have swiped your payment card at the popular Checkers and Rally's drive-through restaurant chains or like somewhere in past 2-3 years then now you should urgently  request your bank to block your card and  notice If any suspicious  transaction was done through your card. Checkers in the United States, founded with a huge data breach that affected an unknown number of customers at 103 of its Checkers and Rally's locations nearly 15% of its restaurants. The a

Here is the big news.If you concerns about privacy then its your day.Tor browser for android is now officially released on play store and it is available for download. Tor Browser 8.5 that which you can now download for FREE  on your mobile devices from Google Play Store. It's the first time that Official version of TOR is released through play store.Tor browser is used by the people to avoid tracking also to be anonymous. The criminals also using TOR to avoid government moni

Google unknowingly stored its G Suite users passwords in plain text on its servers that means any Google employee who has the permission to access  the servers could have read the passwords G Suite is a brand of cloud computing, productivity and collaboration tools, software and products developed by Google Google revealed that its G Suite platform mistakenly stored unhashed passwords due to a bug In a password recovery. Google also says that the plain text passwords were sto

In a joint exertion by a few law requirement offices from 6 unique nations, authorities have disassembled a worldwide cybercrime organize behind GozNym banking malware. GozNym banking malware is responsible for stealing nearly $100 million from over 41,000 victims across the World mainly in the United States and Europe  for many years GozNym was created by combining two known powerful Trojans — Gozi ISFB malware, a banking Trojan that first appeared in 2012 and Nymaim, a Troj

WyzAnt is an online marketplace where students and parents can find qualified, local in-person and online tutors in more than 250 different subjects. Visitors can browse WyzAnt's network of 75,000+ available tutors at no cost and compare tutors' experience, qualifications, personality and teaching style, background checks. Now Wyzant has suffered a data breach which includes their customers certain personal information An unknown attacker was able to gain access to one of its

One of the most advanced mobile spyware on the planet, the WhatsApp exploit installs Pegasus spyware on to Android and iOS devices. A buffer overflow vulnerability in WhatsApp VOIP stack allows remote attackers to run random code on target phones by sending a specially crafted series of SRTCP packets. The vulnerability, identified as CVE-2019-3568, can successfully be taken the advantage to install the spyware and steal data from a targeted Android phone or iPhone by making a

Europol announced the shut down of two prolific dark web marketplaces—Wall Street Market , Silkkitie due to Selling of the drugs, Stolen credit card numbers and private informations,Selling malicious software and pirated contents.Many unknown transactions are takes from here every day. Three men who were running Wall Street Market was arrested by the police of western germany.Wall Street Market have more than a million users and 5,400 dealers who was participating in the tr

Ms word is a famous software from giant microsoft that is using for offices as well as for homes. Security experts are founded that GandCrab ransomware and Ursnif virus spreading through the MS Word macros. Ursnif is a data-stealing trojan and the GandCrab ransomware will affect only the users which affected the Ursnif. Even Both of them is developed by different criminal groups there is some similarity in case of their orgin.Both they are origin from spam emails which hav

Be alert!f you have downloaded PHP PEAR package manager from its official website in past 6 months, then it's highly chance that your server might have been got hacked. the maintainers at PEAR took down the official website of the PEAR (pear-php.net) after they found that someone has replaced original PHP PEAR package manager (go-pear.phar) with a modified version in the core PEAR file system. The PHP Extension and Application Repository (PEAR) is a community framework and di

Cyber security experts have now founded a new malware attack linked to the notorious group DarkHydrus APT that uses Google Drive as its command-and-control server. They uses a backdoor Trojan, called RogueRobin, which infects victims computers by making them to open a Microsoft Excel document containing embedded VBA macros. Enabling the macro will drops a malicious text (.txt) file in the temporary directory and then it runs and then install the RogueRobin backdoor which is

There is a privacy setting available in Twitter to make the tweets private which is very relevent feature.But now Twitter disclosed a privacy bug dating back to November 3, 2014, Which caused the Twitter for Android app to disable the "Protect your Tweets" setting for users without their knowledge, making their private tweets visible to the public. The bug only caused for those Android users who made changes to their Twitter account settings, such as changing their email add

A California based Voice-Over-IP (VoIP) services provider VOIPO has left tens GB of its customer data, containing millions of call logs, SMS, and system credentials, publicly that can be accessible to anyone without any permission. VOIPO is one of the most popular who provides the VoIP facility in US.Their unprotected database contains the phone numbers,all the SMS/MMS and certain internal credentials that exposed to the public.This is not the first time that a database cont

Researchers have discovered some critical flows in one of the most popular online game Fortnite and this flows will allows the hackers to take your game account.The games includes some critical flows like SQL injection, cross-site scripting (XSS) bug, a web application firewall bypass issue, and most importantly an OAuth account takeover vulnerability. The XSS flows will allow attackers to take the authentication token just by diverting them by clicking a specially crafted we

Many one-click client-side vulnerabilities in the some of the world's most popular web hosting companies that put millions of their customers and visitors at risks and dangers of hacking. A bug-hunter and security researcher Paulos Yibelo, found many vulnerabilities in the most popular hosting providing web sites such us Bluehost, Dreamhost, HostGator, OVH, and iPage. This vulnerabilities will make attackers to simply hack their victims. Man In Middle Attack,Cross Site Scrip

One of the most popular used OS-Windows 7 is going to be shutdown on January 14, 2020.After the date windows won't release any updates or security solution for Windows 7.But the Microsoft will give some of the exception to their important clients and companies.But many users including professionals are also still using Windows 7 and its death will cause them a many difficulties.However,if you are using windows 7 kindly upgrade your OS within 1 year. #internet #cybersecurity