Hackers discover way to access Google accounts without a password

Hackers discover way to access Google accounts without a password

Sign up to our free weekly IndyTech newsletter delivered straight to your inbox Sign up to our free IndyTech newsletter Security researchers have uncovered a hack that allows cyber criminals to gain access to people’s Google accounts without needing their passwords. Analysis from security firm CloudSEK found that a dangerous form of malware uses third-party cookies to gain unauthorised access to people’s private data, and is already being actively tested by hacking groups. The exploit was… Source link

Read More »

Federal officials order grounding of Boeing 737 Max 9 jetliners after a plane suffers a blowout

Federal officials order grounding of Boeing 737 Max 9 jetliners after a plane suffers a blowout

Federal officials on Saturday ordered the immediate grounding of Boeing 737 Max 9 jetliners until they are inspected after an Alaska Airlines plane suffered a blowout that left a gaping hole in the side of the fuselage. The required inspections take around four to eight hours per aircraft and affect about 171 airplanes worldwide. As of Saturday morning, inspections on more than a quarter of the fleet were complete “with no concerning findings,” the company said. “Aircraft will return to… Source link

Read More »

Malware abusing API is standard token theft, not an API issue

Malware abusing API is standard token theft, not an API issue

Google is downplaying reports of malware abusing an undocumented Google Chrome API to generate new authentication cookies when previously stolen ones have expired. In late November 2023, BleepingComputer reported on two information-stealing malware operations named Lumma and Rhadamanthys, claiming they could restore expired Google authentication cookies stolen in attacks. These cookies could then be loaded into threat actors’ browsers to gain access to an infected user’s… Source link

Read More »