Google Home, Chromecast Leak Location Information
The devices don’t require authentication for connections received on a local network; and, HTTP is used to configure or control embedded devices. READ MORE HERE…
Privacy
macOS QuickLook Feature Leaks Data Despite Encrypted Drive
Researchers demonstrate how an encrypted macOS hard drive can still leak unprotected data via the operating system’s Finder and QuickLook feature. READ MORE HERE…
Apple Removes iPhone USB Access Feature, Blocking Out Hackers, Law Enforcement
The move escalates tensions between the phone giant and federal law enforcement when it comes to mobile security. READ MORE HERE…
Facebook Software Bug Made Some Private Posts Public: 14 Million Affected
A Facebook glitch in May set millions of posts that users composed to “public” for ten days. READ MORE HERE…
Browser Side-Channel Flaw De-Anonymizes Facebook Data
An attacker can pick up the profile picture, username and the “likes” of unsuspecting visitors who find themselves landing on a malicious website. READ MORE HERE…
Public Google Groups Leaking Sensitive Data at Thousands of Orgs
The exposed information includes accounts payable and invoice data, customer support emails, password-recovery mails, links to employee manuals, staffing schedules and other internal resources. READ MORE HERE…
Honda, Universal Music Group Expose Sensitive Data in Misconfig Blunders
The Honda mistake affects 50,000 users of the Honda Connect App, while UMG exposed corporate keys to the kingdom. READ MORE HERE…
ICANN Launches GDPR Lawsuit to Clarify the Future of WHOIS
WHOIS, the searchable “phonebook” of contact data for internet domains, may violate GDPR — or it may not. A lawsuit seeks to find out which it is. READ MORE HERE…
