WhatsApp Calls Used to Inject Spyware on Mobile Phones

Hackers have reportedly been injecting Israeli spyware onto smartphones via the popular Facebook-owned messaging service WhatsApp. The surveillance software, named Pegasus, was developed by Israeli firm NSO Group and can access an iPhone with a single missed voice call on WhatsApp. NSO claims that it carefully vets its customers; the company’s software is intended for government agencies to combat crime and terrorism. While it is currently unknown how many users may have been affected at this point (the problem was first discovered in early May), WhatsApp says it has created a patch to address the vulnerability. Continue reading WhatsApp Calls Used to Inject Spyware on Mobile Phones

Alphabet Posts Higher Profits But Slowing Overall Revenue

Alphabet, dealing with pushback from regulators and struggles in its corporate culture, reported net profit that increased 37 percent to $9.19 billion in the quarter through September. Last year, during the same period, the company posted $6.7 billion. Although this growth exceeded analysts’ expectations, overall revenue is actually down, growing 21 percent to $33.74 billion versus last year’s 24 percent growth in the same period. Revenue from advertising, representing the majority of sales, grew 20 percent to $28.95 billion. Continue reading Alphabet Posts Higher Profits But Slowing Overall Revenue

Facebook Notifying Over 800,000 Users About Blocking Bug

Facebook announced yesterday that it was notifying more than 800,000 users about a bug in Facebook and Messenger that unblocked some of the people that those users had previously blocked. The bug was active between May 29th and June 5th. “It did not reinstate any friend connections that had been severed,” according to Facebook chief privacy officer Erin Egan. “83 percent of people affected by the bug had only one person they had blocked temporarily unblocked, and someone who was unblocked might have been able to contact people on Messenger who had blocked them.” Continue reading Facebook Notifying Over 800,000 Users About Blocking Bug

Facebook Faces Another Privacy Issue Due to Software Bug

Facebook revealed that a software bug was live for 10 days during May and, as a result, may have affected up to 14 million users. The company explained that millions of users who believed they were sharing privately with their friends or small groups may have actually shared their information publicly; the bug apparently updated the audience selector to “public” without notifying users. Facebook announced it plans to contact the individuals that may have been impacted. “We’d like to apologize for this mistake,” said Facebook’s chief privacy officer Erin Egan in a statement yesterday. Continue reading Facebook Faces Another Privacy Issue Due to Software Bug

Security Researcher Reports Privilege-Escalation Bug in OS X

A privilege-escalation bug was identified in the latest version of Apple’s OS X this week by security researcher Stefan Esser. The vulnerability reportedly provides hackers with root user privileges that make it possible to infect Macs with rootkits and other malware. This type of bug is commonly used to bypass security protections created for applications and operating systems. According to Esser, the vulnerability can be found in OS X Yosemite 10.10.4 and the beta version of 10.10.5, but not in the recent beta version of El Capitan 10.11. Continue reading Security Researcher Reports Privilege-Escalation Bug in OS X

Apple Claims that Most OS X Users Are Safe from Shellshock

Last week we reported that a bug called “Shellshock” had been identified as a potentially dangerous security flaw in the Bash software that appears in more than 70 percent of devices connected to the Internet. While initial reports have suggested that Linux and OS X systems are anticipated to be particularly vulnerable, Apple released a statement claiming that there is no need to panic. “The vast majority of OS X users are not at risk to recently reported Bash vulnerabilities,” said Apple. Continue reading Apple Claims that Most OS X Users Are Safe from Shellshock

Security Experts Warn of Potentially Dangerous Shellshock Bug

In 1987, programmer Brian J. Fox wrote one of the Internet’s most widely used tools. The software is named “Bash” (short for Bourne-Again Shell) and now appears in more than 70 percent of devices connected to the Internet, including computers, routers, servers and some mobile phones. Yesterday, security experts warned that Bash contains a software bug called “Shellshock” that could potentially be used to take over hundreds of millions of machines, including Mac computers and smartphones that run Android. Continue reading Security Experts Warn of Potentially Dangerous Shellshock Bug

New Initiative Gets Companies to Fund Open Source Projects

More than a dozen companies have joined the Core Infrastructure Initiative to provide funding to open source projects, starting with OpenSSL. The Linux Foundation, Amazon, Cisco, Dell, Facebook, Fujitsu, Google, IBM, Intel, Microsoft, NetApp, Rackspace, Qualcomm, and VMWare have each pledged $100,000 over the next three years to pay for full-time developers, security audits, computing and testing infrastructure, and more to help financially strapped open source projects. Continue reading New Initiative Gets Companies to Fund Open Source Projects

Bug Causes Scramble to Update Software and Change Passwords

Popular websites have been scrambling to update software and Internet users have been encouraged to change their passwords following the news of an encryption flaw known as the Heartbleed bug, which is already being categorized as one of the biggest security threats the Internet has ever experienced. The bug has affected a number of websites and services (although the extent is not clear), and may have exposed account info including passwords and credit card numbers going back two years. UPDATE: Cisco and Juniper said yesterday that some of their networking products contain the bug, which means sensitive info may have been obtained while moving across corporate networks, home networks and the Internet. Continue reading Bug Causes Scramble to Update Software and Change Passwords

Capture and Share 3D Images with the Seene App for iPhone

A new app from London-based Obvious Engineering allows iPhone users to easily capture and share 3D images. Seene is compatible with Apple’s iPhone 4S and higher, and browsers such as Chrome, Firefox and Safari that support WebGL for 3D. It works by aiming your phone at a subject and moving around to record different angles. The progress is then overlaid on top of a video feed, resulting in a “seene” that builds automatically, which can be shared via social tools. Continue reading Capture and Share 3D Images with the Seene App for iPhone