An infamous cybercriminal named “Peace” said on a website that he was selling credentials of 200 million Yahoo users from 2012 on the dark web for just over $1,800. The data allegedly included user names, easily decrypted passwords, personal information like birth dates and other email addresses.
Source : Yahoo is expected to confirm massive data breach, impacting hundreds of millions of users – Recode
A Computer Science student and security enthusiast from Netherlands who own a Xiaomi Mi4 smartphone started an investigation to know the purpose of a mysterious pre-installed app, dubbed AnalyticsCore.apk, that runs 24×7 in the background and reappeared even if you delete it.
Source : Xiaomi Can Silently Install Any App On Your Android Phone Using A Backdoor
Si créer des bases de données d’internautes avec leur orientation politique, leur nom et leur adresse n’est pas du fichage, alors on ne sait plus ce qu’est le fichage.
Source : Knockin : l’incroyable fichage d’internautes par l’équipe de Nicolas Sarkozy – Politique – Numerama
La technique utilisée, qui consiste à jailbreaker l’iPhone depuis un simple lien ouvert sur un navigateur, rappelle très fortement la faille achetée 1 million de dollars en novembre 2015 par Zerodium, une société française créée par Chaouki Bekrar, qui avait publiquement offert une telle somme à qui lui fournirait la solution.
Source : Comment une faille de sécurité sur iOS permettait d’espionner des dissidents – Tech – Numerama
An Apple patent application published on Thursday describes a method of storing an unauthorized user’s biometric information, which can help strengthen security management or assist in device recovery and criminal prosecution in the case of a theft.
Source : Future iPhones might collect fingerprints, photos of thieves
Plutôt qu’un empilement de mesures, prises dans l’urgence et sous le coup de l’émotion, l’ampleur de ces transformations devrait nous imposer une réflexion globale et collective. Il en va ainsi de la résilience de nos sociétés.
Source : En s’attaquant au chiffrement contre le terrorisme, on se trompe de cible
Tor is an anonymity and censorship circumvention network. Due to abuse by vandals, Tor exit nodes are usually blocked from editing Wikipedia.
Source : Wikipedia:Advice to users using Tor – Wikipedia, the free encyclopedia
With root privilege, the malware can then receive remote instructions on which app to download and silently install on mobile devices. This can then lead to affected users receiving unwanted apps, which may then lead to unwanted ads. Even worse, these threats can also be used to install backdoors and spy on users.
If placed strategically in an office or other location where individuals might use wireless devices, a malicious cyber actor could potentially harvest personally identifiable information, intellectual property, trade secrets, passwords, or other sensitive information.
Source : Beware of keystroke loggers disguised as USB phone chargers, FBI warns | Ars Technica
We know all of your interests. Not only just your interests you are willing to declare publicly on Facebook – we know your dark secrets, we know everything.
TNW Conference, 26 May via Reddit
© 2025 no-Flux
Theme by Anders Noren — Up ↑
