Posts

Showing posts from July, 2019

Viral Aging Face App Might Be Breaching Your Personal Data

Image
In case you haven't noticed yet, a new face filter that shows you an aged version of yourself is going viral—yes, that explains the influx of familiar-looking grandmas and grandpas you've been seeing on your timeline lately. It's quite fun, and we must admit that it gave us a few belly laughs in the past few days. But here's the thing: You might be giving the app more access to your personal data than you think. FaceApp, or the program that's been aging everyone by 50 years, is currently the number one free app in the Apple App Store. Forbes reports that over 100 million Android users have downloaded it on the Google Play Store as well, according to information from data gathering service App Annie. This sudden popularity has raised a few concerns because a particular section of its terms of service basically implies they could use your data however they wish In short, the photos and videos you take from FaceApp and everything in your camera roll could be stored...

Microsoft July 2019 Patch Tuesday fixes zero-day exploited by Russian hackers

Image
Microsoft patches 77 security flaws, including 15 rated "critical." Earlier today, Microsoft published its monthly roll-up of security updates known as Patch Tuesday. This month, the Redmond-based company patched 77 vulnerabilities, including two zero-days -- security flaws that were being actively exploited in the wild. The two zero-days are CVE-2019-0880 and CVE-2019-1132, and both are privilege escalation issues. They don't allow hackers to take over users' computers remotely, but are used after the hacker has gained access to a system to elevate access rights to a high-privileged account. The most important of the two zero-days patched today is CVE-2019-1132 , a privilege escalation in the Win32k component. The zero-day was discovered by ESET as part of the attack chain of a group of Russian state-funded hackers. The company told ZDNet it plans to publish an in-depth blog post about these attacks and the zero-day tomorrow, July 10. The second zero-day is CVE-2019-...