Digital wallets can allow purchases with stolen credit cards

August 19, 2024 at 09:36PM Academic security researchers found critical flaws in digital wallets like Apple Pay, Google Pay, and PayPal, allowing attackers to use stolen and canceled payment cards for unauthorized purchases. By exploiting weaknesses in authentication and security mechanisms, attackers can add stolen cards to their digital wallets and make unauthorized transactions, regardless … Read more

ZKTeco Biometric System Found Vulnerable to 24 Critical Security Flaws

June 14, 2024 at 04:19AM A security analysis of ZKTeco’s hybrid biometric access system revealed 24 critical flaws, including SQL injections, buffer overflows, and file manipulations. These vulnerabilities enable attackers to bypass authentication, steal biometric data, execute arbitrary commands, and implant backdoors. Mitigation measures include network segmentation, strong passwords, and minimizing QR code use. Source: … Read more

Oracle Patches 185 Vulnerabilities With October 2023 CPU

October 18, 2023 at 08:48AM Oracle has released 387 new security patches as part of the October 2023 CPU. Over 40 patches address critical-severity flaws and more than 200 resolve bugs that can be remotely exploited. The patches cover various Oracle products, with Financial Services Applications receiving the most fixes. Oracle advises customers to apply … Read more