Google Pixel flaw allowed recovery of redacted, cropped images


An 'Acropalypse' flaw in Google Pixel's Markup tool made it possible to partially recover edited or redacted screenshots and images, including those that have been cropped or had their contents masked, for the past five years. [...]


https://www.bleepingcomputer.com/news/se...ed-images/

Hackers mostly targeted Microsoft, Google, Apple zero-days in 2022

Hackers continue to target zero-day vulnerabilities in malicious campaigns, with researchers reporting that 55 zero-days were actively exploited in 2022, most targeting Microsoft, Google, and Apple products. [...]


https://www.bleepingcomputer.com/news/se...s-in-2022/

Subaru names longtime exec Troy Poston to top sales job

<p>Troy Poston will take over as head of U.S. sales for Subaru of America effective April 1, succeeding Jeff Walters, who moves to the automaker's top U.S. job with the retirement of longtime CEO Tom Doll.</p>

https://www.autonews.com/executives/suba...d-us-sales

Meta Proposes Revamped Approach to Online Kill Chain Frameworks

A more holistic model beyond MITRE et al. is needed to help defenders better identify and understand commonalities in different online threat campaigns, the Facebook parent company says.

https://www.darkreading.com/application-...ne-threats

Technology Firms Delivering Much-Sought Encryption-in-Use

If the approaches stand up to scrutiny, companies may soon be able to encrypt most databases in a way that allows using data without the need to decrypt to plaintext.

https://www.darkreading.com/emerging-tec...ion-in-use

Microsoft Outlook Vulnerability Could Be 2023's 'It' Bug

Snowballing PoC exploits for CVE-2023-23397 and a massive attack surface means that almost any business user could be a victim.

https://www.darkreading.com/application-...023-it-bug

Shouldering the Increasingly Heavy Cloud Shared-Responsibility Model

There are a number of solutions that can help ensure security and compliance mandates are met in the cloud, but organizations should prioritize integration and policy-based management.

https://www.darkreading.com/cloud/should...lity-model

SecurityBridge Introduces The SAP Management Dashboard



https://www.darkreading.com/application-...-dashboard

Cyberattackers Hoop NBA Fan Data via Third-Party Vendor

The basketball playoffs are around the corner and convincing social-engineering attacks on fans using NBA-themed lures could be too.

https://www.darkreading.com/risk/cyberat...rty-vendor

What percentage of your software vulnerabilities have GDPR implications?

Do you know how many of your unknown vulnerabilities have the potential to cause a breach of consumer data? In other words, how many have GDPR implications? We wondered the same thing, so we did some digging. Here’s what we found.


https://www.hackerone.com/security-compl...plications