Multiple Flaws Affecting Realtek Wi-Fi SDKs Impact Nearly a Million IoT Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

Taiwanese chip designer Realtek is warning of four security vulnerabilities in three software development kits (SDKs) accompanying its WiFi modules, which are used in almost 200 IoT devices made by at least …

Attackers Can Weaponize Firewalls and Middleboxes for Amplified DDoS Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Weaknesses in the implementation of TCP protocol in middleboxes and censorship infrastructure could be weaponized as a vector to stage reflected denial of service (DoS) amplification attacks against any target, surpassing many …

Dozens of STARTTLS Related Flaws Found Affecting Popular Email Clients

Blog WriterThe Hacker News - Original news source is thehackernews.com

Security researchers have disclosed as many as 40 different vulnerabilities associated with an opportunistic encryption mechanism in mail clients and servers that could open the door to targeted man-in-the-middle (MitM) …

New Glowworm Attack Recovers Device’s Sound from Its LED Power Indicator

Blog WriterThe Hacker News - Original news source is thehackernews.com

A novel technique leverages optical emanations from a device’s power indicator LED to recover sounds from connected peripherals and spy on electronic conversations from a distance of as much as …

Hackers Spotted Using Morse Code in Phishing Attacks to Evade Detection

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft has disclosed details of an evasive year-long social engineering campaign wherein the operators kept changing their obfuscation and encryption mechanisms every 37 days on average, including relying on Morse …

Facebook Adds End-to-End Encryption for Audio and Video Calls in Messenger

Blog WriterThe Hacker News - Original news source is thehackernews.com

Facebook on Friday said it’s extending end-to-end encryption (E2EE) for voice and video calls in Messenger, along with testing a new opt-in setting that will turn on end-to-end encryption for …

Hackers Actively Searching for Unpatched Microsoft Exchange Servers

Blog WriterThe Hacker News - Original news source is thehackernews.com

Threat actors are actively carrying out opportunistic scanning and exploitation of Exchange servers using a new exploit chain leveraging a trio of flaws affecting on-premises installations, making them the latest set of bugs after …