Tag: api

Flaws in smart car alarms exposed 3 million cars to hijack

March 11, 2019

The vulnerabilities, which resided in associated smartphone apps, were both easy to find and easy to fix. Two smart alarm systems for cars have plugged critical security holes that put three million vehicles globally at risk of being hijacked, research by Pen Test Partners reveals. If exploited, the vulnerabilities would have enabled anyone to turn the alarm … More Flaws in smart car alarms exposed 3 million cars to hijack

Twitter patches bug that may have spilled users’ private messages

September 27, 2018

The flaw affected one of the platform’s APIs between May 2017 and September 10 of this year, when it was patched “within hours”. Twitter has fixed a bug that is believed to have shared Direct Messages (DMs) and protected Tweets of some users with developers who were not authorized to access that information. According to the … More Twitter patches bug that may have spilled users’ private messages

PowerPool malware exploits ALPC LPE zero-day vulnerability

September 6, 2018

Malware from newly uncovered group PowerPool exploits zero-day vulnerability in the wild, only two days after its disclosure. On August 27, 2018, a so-called zero-day vulnerability affecting Microsoft Windows was published on GitHub and publicized via a rather acerbic tweet. It seems obvious that this was not part of a coordinated vulnerability disclosure and there was no … More PowerPool malware exploits ALPC LPE zero-day vulnerability