#CybersecurityDiscovery

Hotel check-in terminal bug spews out access codes for guest rooms

by

April 5, 2024 at 08:40AM A self-service check-in terminal at a German hotel leaked room keycodes due to a security flaw. Anyone could access an array of keycodes within minutes, compromising guest safety and security. Accor Security fixed the issue in a month, and dormakaba’s door locks also faced vulnerabilities. Omni Hotels experienced IT issues, … Read more

NSO Group Adds ‘MMS Fingerprinting’ Zero-Click Attack to Spyware Arsenal

by

February 19, 2024 at 09:02AM Enea researcher discovered a new tactic used by NSO Group to deploy Pegasus spyware on mobile devices without user interaction. The tactic, called “MMS Fingerprint,” allows obtaining device details by sending an MMS message, exploiting MMS flow to retrieve device information. The researcher concluded that this could be leveraged for … Read more