An analysis of a hybrid biometric access system from Chinese manufacturer ZKTeco has uncovered two dozen security flaws that could be used by attackers to defeat authentication, steal biometric data, and even deploy malicious backdoors.
“By adding random user data to the database or using a fake QR code, a nefarious actor can easily bypass the verification process and gain unauthorized access,”
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-06-14 09:08:202024-06-14 09:08:20ZKTeco Biometric System Found Vulnerable to 24 Critical Security Flaws
Threat actors linked to North Korea have accounted for one-third of all the phishing activity targeting Brazil since 2020, as the country’s emergence as an influential power has drawn the attention of cyber espionage groups.
“North Korean government-backed actors have targeted the Brazilian government and Brazil’s aerospace, technology, and financial services sectors,” Google’s Mandiant and
Microsoft on Thursday revealed that it’s delaying the rollout of the controversial artificial intelligence (AI)-powered Recall feature for Copilot+ PCs.
To that end, the company said it intends to shift from general availability preview available first in the Windows Insider Program (WIP) in the coming weeks.
“We are adjusting the release model for Recall to leverage the expertise of the Windows
Microsoft delays broad release of Recall AI feature for Copilot+ PCs, opting for a staged rollout to Windows Insiders to ensure security and gather feedback.Read More
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-06-14 02:09:252024-06-14 02:09:25Microsoft delays broad release of Recall AI feature due to security concerns
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-06-13 22:07:412024-06-13 22:07:414 Ways to Help a Security Culture Thrive
BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
Microsoft Delaying Recall Feature to Improve Security
/in General NewsMicrosoft is not rolling out Recall with Copilot+ PCs as it’s seeking additional feedback and working on improving security.
The post Microsoft Delaying Recall Feature to Improve Security appeared first on SecurityWeek.
SecurityWeek – Read More
ZKTeco Biometric System Found Vulnerable to 24 Critical Security Flaws
/in General NewsAn analysis of a hybrid biometric access system from Chinese manufacturer ZKTeco has uncovered two dozen security flaws that could be used by attackers to defeat authentication, steal biometric data, and even deploy malicious backdoors.
“By adding random user data to the database or using a fake QR code, a nefarious actor can easily bypass the verification process and gain unauthorized access,”
The Hacker News – Read More
North Korean Hackers Target Brazilian Fintech with Sophisticated Phishing Tactics
/in General NewsThreat actors linked to North Korea have accounted for one-third of all the phishing activity targeting Brazil since 2020, as the country’s emergence as an influential power has drawn the attention of cyber espionage groups.
“North Korean government-backed actors have targeted the Brazilian government and Brazil’s aerospace, technology, and financial services sectors,” Google’s Mandiant and
The Hacker News – Read More
Microsoft Delays AI-Powered Recall Feature for Copilot+ PCs Amid Security Concerns
/in General NewsMicrosoft on Thursday revealed that it’s delaying the rollout of the controversial artificial intelligence (AI)-powered Recall feature for Copilot+ PCs.
To that end, the company said it intends to shift from general availability preview available first in the Windows Insider Program (WIP) in the coming weeks.
“We are adjusting the release model for Recall to leverage the expertise of the Windows
The Hacker News – Read More
Microsoft delays broad release of Recall AI feature due to security concerns
/in General NewsMicrosoft delays broad release of Recall AI feature for Copilot+ PCs, opting for a staged rollout to Windows Insiders to ensure security and gather feedback.Read More
Security News | VentureBeat – Read More
Marsh Insurance: Volume of Cyber-Insurance Claims Reaches New Heights
/in General NewsMore claims are being made across the US and Canada compared with previous years, with healthcare organizations leading the way.
darkreading – Read More
KnowBe4 Launches Risk & Insurance Partner Program
/in General NewsPost Content
darkreading – Read More
NetSPI Acquires Hubble, Adds CAASM to Complement its IEASM
/in General NewsPost Content
darkreading – Read More
4 Ways to Help a Security Culture Thrive
/in General NewsCreating and nurturing a corporate environment of proactive cybersecurity means putting people first — their needs, weaknesses, and skills.
darkreading – Read More
Apple iOS 18 Cheat Sheet: Release Date, RCS Integration and More
/in General NewsiOS 18 includes artificial intelligence features, new apps and much more. Learn how registered developers can install the iOS 18 beta.
Security | TechRepublic – Read More