(Tumblr patches a critical vulnerability)[https://thehackernews.com/2018/10/tumblr-account-hacking.html] in the "Recommended Blogs" feature on its desktop version of the website that could have allowed hacker to steal users’ account information, including emails and passwords (hashed and salted)

Several critical vulnerabilities found in #Amazon FreeRTOS #IoT operating system, which also affect its variants: OpenRTOS and SafeRTOS

https://thehackernews.com/2018/10/amazon-freertos-iot-os.html

Reported flaws could allow remote attackers to execute malicious code, leak information or crash targeted devices

Signal Secure Messaging App Introduces A New Feature Called "Sealed Sender" That Encrypts 🔒Sender's Identity Along with the Message ✉️

https://thehackernews.com/2018/10/signal-secure-messaging-metadata.html …

Signal Aims to Further Reduce the Metadata Information That's Still Accessible to the Company.

Microsoft Windows 10 Built-in Defender Antivirus Becomes First #Antivirus to Have the Ability to Run Inside a Secure Sandbox

https://thehackernews.com/2018/10/windows-defender-antivirus-sandbox.html …

Here's How You Can Turn It ON.

IBM to Acquire "Red Hat" Open-Source Software Company for $34 Billion

https://thehackernews.com/2018/10/ibm-redhat-tech-acquisition.html …

One of the Largest Tech-Deals that Could Reshape the Future of Cloud Computing

Who says hacking is difficult! 🤣 It's fun.

*NEW* — *NEW* — iPhone Passcode Bypass Discovered Just Hours After Apple Releases the Latest iOS 12.1

This easy-to-perform technique exploits the new Group FaceTime feature and works without Siri or VoiceOver.

https://thehackernews.com/2018/10/iphone-ios-passcode-bypass.html

Popular WooCommerce WordPress Plugin Patches A Critical File-Deletion Vulnerability That Could Allow Shop Managers to Reset Administrator Password and Take Complete Control Over the Site

https://thehackernews.com/2018/11/woocommerce-wordpress-hacking.html

Multiple Vulnerabilities Discovered in Popular Samsung and Crucial's Self-Encrypting SSDs Let Attackers Bypass Hardware Encryption and Decrypt Data

Read More: https://thehackernews.com/2018/11/self-encrypting-ssd-hacking.html

Researchers Discover Another Hyper-Threading Vulnerability in Intel CPUs

New PortSmash (CVE-2018-5407) Side-Channel Attack Could Allow Malicious Processes to Steal Sensitive and Protected Data

Read More: https://thehackernews.com/2018/11/portsmash-intel-vulnerability.html

BleedingBit — Two New Critical #Bluetooth Chip RCE Vulnerabilities (CVE-2018-16986 and CVE-2018-7080) Expose Millions of BLE-Enabled Enterprise Networking Devices to Remote Attacks

https://thehackernews.com/2018/11/bluetooth-chip-hacking.html

Unpatched Oracle's VirtualBox Zero-Day Vulnerability and Exploit Details Released Online:

Read ➣ https://thehackernews.com/2018/11/virtualbox-zero-day-exploit.html

New VirtualBox Exploit Could Allow Attackers to Escape Virtual Machines and Compromise Host Operating System.

Hackers compromised popular Web Traffic Analytics service "StatCounter" to steal Bitcoins from Gate[.]io cryptocurrency exchange users
. Malicious code bundled with the widely-used StatCounter analytics script gets injected into 700,000 websites, but targeted only cryptocurrency sites and their users.

https://thehackernews.com/2018/11/statcounter-cryptocurrency-cyberattack.html

New Android "In-app Updates" API Lets Developers Push Updates Within Their Apps Which Users Can Install While Using Them

https://thehackernews.com/2018/11/android-in-app-updates-api.html

Popular drone maker DJI left its website and mobile apps users vulnerable for 6 months that could have allowed hackers to hijack Drone account and access sensitive data—including flight records, drone's location, live video feed and photos.

https://thehackernews.com/2018/11/dji-drone-hack_8.html

23-Year-Old "DerpTroll" Hacker Pleads Guilty to #DDoS Attacks Against Sony, EA and Steam Gaming Companies
.
He Could Face Maximum Penalty of 10 Years in Prison and Fine of $250,000

https://thehackernews.com/2018/11/gaming-server-ddos-attack.html

New SDK APIs and Wi-Fi settings in Insider Preview editions suggest that support for the latest WPA3 Wi-Fi Security Protocol is coming very soon to Windows 10 operating system

https://thehackernews.com/2018/11/windows-10-wpa3-wifi-security.html

Yet Another #Facebook Bug Discovered That Could Have Exposed Private Information About You and Your Friends to Attackers

https://thehackernews.com/2018/11/facebook-vulnerability-hack.html

Read More ☝ and Watch Demonstration Video

It’s Patch Tuesday — 63 New Vulnerabilities (Including 0-Days) #Windows Users Need to Patch Immediately

https://thehackernews.com/2018/11/microsoft-patch-tuesday-updates.html

• 12 Critical Flaws
• 49 Important—2 Publicly Disclosed & 1 Being Exploited in the Wild
• 1 Moderate
• 1 Low Flaw