Tag Archive for: score

Hackers Score Nearly $1M at Device-Focused Pwn2Own Contest


Security researchers and hackers demonstrated 63 zero-day vulnerabilities in popular devices at the latest Pwn2Own, exploiting printers from Canon, HP, and Lexmark, and routers and network-attached storage device from Synology and Netgear.

According to Trend Micro’s Zero Day Initiative (ZDI), which organized the competition last week, the collection of vulnerabilities earned $989,750 for the offensive cybersecurity specialists competing in the contest. While some attacks chained together a series of exploits to take control of the remote devices, including one that used five vulnerabilities, others found a single security weakness to target, such as the Pentest Limited team, which found a reliable single-click exploit in the Samsung Galaxy S22 mobile phone that required less than a minute to attack.

The Samsung exploit highlighted that significant vulnerabilities are out there to find, says Dustin Child, head of threat awareness at Trend Micro’s Zero Day Initiative.

“Just click a link on an affected device and you get owned,” he says. “It’s a very reliable bug, too. Very impressive research and quite the effective demonstration of why clicking unknown links can be dangerous.”

Focusing on IoT and Mobile

Pwn2Own started in 2007 as an annual contest connected with the annual CanSecWest conference, but has since branched out into two contests: one focused on computer operating systems and applications, and the other — which includes the latest contest — focused on devices and the Internet of Things.

Over the four days of the contest, offensive cybersecurity specialists discovered a significant number of vulnerabilities in printers and routers from major brands, but also targeted Bluetooth speakers and network-attached storage, ZDI stated in a summary of the contest results.

Because many of the devices are commonly used by small and medium-sized businesses (SMBs), companies should take the results of the competition as a warning, Child says.

“If anything, SMBs should understand that, while they may feel they aren’t large enough to be a target, their devices can and will be targeted by threat actors,” he says. “At [this] time, the attackers are just looking to add nodes to their botnet,…

Source…

UTSA professor’s thrift store score becomes priceless addition to Georgia museum | UTSA Today | UTSA


While the artwork itself was striking, so too was the crisp, clear blue signature in the painting’s lower right-hand corner. Pugh realized he had come across an original painting and immediately searched the web to find out more about Keith Bankston.

According to the Digital Library of Georgia, Bankston was born and raised in Macon. He was inspired to pursue a career in art during a trip to Paris shortly after his high school graduation. After attending Florida State, he would return to Middle Georgia to teach art in the Bibb County public schools while simultaneously working to establish himself as an exhibiting artist. However, his fledgling art career was cut short when he died from AIDS in 1992 at the age of 34.

Pugh also found that multiple Bankston paintings were part of the collection at the Tubman African American Museum in Macon, an educational and cultural hub that strives to enrich cultural understanding and present the highest quality art to the Georgia communities it serves. Upon reading about Bankston and the Tubman Museum, Pugh knew he wanted to purchase the painting. But he no longer wanted to keep it.

“I really like it. But something like this—by a known artist in Georgia—would provide the most benefit in a museum in Georgia where everyone else can enjoy it,” Pugh said.

He bought Bankston’s “Eve in the Rose Garden” for $125 and wasted no time reaching out to Jeff Bruce, the director of exhibitions for the Tubman Museum, with intentions of donating the piece. The museum was excited to hear about the painting’s existence and happy to accept his gift. The museum will add “Eve in the Rose Garden” to its permanent collection of African American art.

“Keith Bankston is a beloved figure in the art community in Macon. His story is a kind of tragic tale of what could have been—of great potential that was never fully realized due to the AIDS epidemic.” Bruce said. “His light was just beginning to shine, so we honor the promise of his talent by collecting and exhibiting his work, and by sharing the story of his short but impactful career with young people in Middle Georgia, as well as visitors…

Source…

Selfie biometrics providers score partnerships, customer wins and fundraising


Selfie biometrics providers score partnerships, customer wins and fundraising

Veratad and GBG have each formed partnerships to distribute their selfie biometrics technologies to new customers. Customer wins in the remote identity verification market have been announced by OneSpan, Onfido and Trulioo meanwhile, iProov technology has reached public beta testing for Australia’s online government services app, and A.ID and WebID have each completed successful fundraises.

Partnerships extend selfie biometrics reach

Veratad Technologies has formed a partnership with Kernel Edge Technologies Ltd, integrating its biometric digital identity verification solutions for KYC and AML-compliance onboarding with the Bank Kernel Fintech Development Kit (FDK) to help fintech clients go to market quickly and securely.

The identity verification solutions Veratad is integrating with Bank Kernel include selfie biometrics with liveness checks and two-factor authentication.

“Veratad is thrilled to work with Bank Kernel on this revolutionary bank-in-a-box concept,” says John E. Ahrens, CEO, Veratad Technologies. “Bank Kernel gives fintechs everything they need to create and market a full-scale product, from mobile and web apps to extensive banking capabilities and risk management tools. Digital identity verification is a must-have as the financial industry seeks to modernize onboarding and provide a smooth customer experience, and we are eager for our solutions to continue playing a part in that innovation.”

GBG has partnered with Seon to provide new customer onboarding and fraud prevention through data validation to fintechs and digital banks in the Asia Pacific region, Fintechnews Singapore reports.

The partnership makes GBG’s Intelligence Center available through Seon to customers in Vietnam, Cambodia, the Philippines, Malaysia and Thailand. GBG says the integration can reduce the use of fake and malicious email addresses to 0 percent, and increase the detection of applications and transactions from suspicious IPs by 80 percent.

“To effectively address the rise in digital financial crime simply means that fraud detection and prevention measures need to be constantly modernised,” GBG APAC Managing Director Dev Dhiman says.

“This…

Source…

Business anti-virus products put to the test – which received the highest score?

If you want to find out how different business anti-virus products performed in the tests, and how the one that protects your business fared, check out the report right now.

Graham Cluley