Earlier this year, a major vulnerability in Insta360 camera software was discovered by users on Reddit. In short, it let anyone connect to any Insta360 camera and download the photos. Seven months later and much of the issue remains unfixed.
Researchers from cyber security firm Zecops have discovered a way to alter an iPhone's shutdown sequence to trick an infected user into believing the phone has been turned off, but actually is still running and can secretly record photos and videos.
Western Digital is still reeling from two different major exploits that were used to remotely wipe the hard drives of its My Book Live products, but the headache has not ended. Several other Western Digital NAS drives running its OS 3 also have a vulnerability that the company won't fix.
According to a new report, hackers have exploited a 0-day bug, not the one discovered in 2018, to mass-wipe WD My Book Live Devices. It appears as though Western Digital intentionally removed lines of code that would have prevented it.
A team of researchers from the Secure Mobile Networking Lab (SEEMOO) and the Cryptography and Privacy Engineer Group (ENCRYPTO) discovered that it is possible for an attacker to learn the phone numbers and email addresses of AirDrop users even if they are complete strangers to the target.