Skip to main content

Breaking News : YAHOO has just released a security patch that prevents a serious bug which allowed hackers to read any email

Breaking News : YAHOO has just released a security patch that prevents a serious bug which allowed hackers to read any email

Yahoo has just issued a security patch of a highly critical XSS (cross-site scripting) security vulnerability in its users’ email system that allowed hackers to read any email contents.

Who discovered this security flaw ?

Jouko Pynnonen, a famous cyber-security researcher lived in Finland first discovered this serious issue and reported it to Yahoo. Jouko Pynnonen also reported a serious bug in Yahoo last year that allowed hackers to hack any user’s account by using XSS (cross-site scripting) vulnerability. He was also awarded in $10,000 by Yahoo’s bug bounty program on Hackerone.

How does this bug work ?

Jouko Pynnonen has posted an article on his personal blog about how the bug works. He said that the bug existed in the email’s HTML filtering.
Jouko sent an email with various sorts of attachments to inspect the raw code in HTML (Hyper Text Markup Language) of that email. However, Yahoo has a protection to block malicious codes of these type HTML emails in its filtration process.
But, Jouko had succeeded to bypass this filtration process by sending a YouTube link in that email which allowed him to execute a JavaScript code. After executing this malicious JavaScript he was able to read victim’s email finally.
According to his statement :
“As long as the URL pointed to a white-listed website such as YouTube, it was not further sanity checked or encoded,” writes Pynnonen.

I’m still a Yahoo user. What can I do now to get rid off ?

Do not scare …. Yahoo has already fixed this poisonous flaw.

Sources for the news and further reading


Tags : Bugs, Hacks, News, Security, Software, Yahoo, 

This Post Was Published On My Steemit Blog. Please, navigate to steemit and cast a free upvote to help me if you like my post. First Time heard about Steemit ? Click Here To Know Everything About Steemit 



$3 Donation [Fixed]

$Any Amount





Comments

Popular Posts (Last 7 Days)

My Original Abstract Art : "shadows on the stained glass - reflection of minds"

My Original Abstract Art :  "shadows on the stained glass - reflection of minds"
enjoy:) This Post Was Published On My Steemit Blog. Please, navigate to steemit and cast a free upvote to help me if you like my post. First Time heard about Steemit ? Click Here To Know Everything About Steemit 



[TIL] How to Draw a Leopard With Pencil - Big Cat

[video tutorial step by step] How to Draw a Leopard With Pencil - Big Cat
This video tutorial was made by Leonardo Pereznieto on youtube. visit : https://www.youtube.com/channel/UCaapxaQKJFJ6XC56CHgeTzw Tags : Art, Drawing, Sketch, Tutorials, Video, Youtube,  This Post Was Published On My Steemit Blog. Please, navigate to steemit and cast a free upvote to help me if you like my post. First Time heard about Steemit ? Click Here To Know Everything About Steemit 

$3 Donation [Fixed]
Donate $Any Amount


My Original Abstract Art : "holi - the festival of colours & the festival of sharing love"

My Original Abstract Art  "holi - the festival of colours & the festival of sharing love"
enjoy it :) This Post Was Published On My Steemit Blog. Please, navigate to steemit and cast a free upvote to help me if you like my post. First Time heard about Steemit ? Click Here To Know Everything About Steemit 



My Original Abstract Art -"demon of death valley"

My Original Abstract Art  "demon of death valley"
enjoy:-) This Post Was Published On My Steemit Blog. Please, navigate to steemit and cast a free upvote to help me if you like my post. First Time heard about Steemit ? Click Here To Know Everything About Steemit 



My Original Abstract Art -"Destitution"

My Original Abstract Art   "Destitution"
enjoy :) This Post Was Published On My Steemit Blog. Please, navigate to steemit and cast a free upvote to help me if you like my post. First Time heard about Steemit ? Click Here To Know Everything About Steemit 



My Original Abstract Art -"inside volcano"

My Original Abstract Art 
"inside volcano"
fire, ash, lava, smoke, melted stones makes volcano terribly beautiful This Post Was Published On My Steemit Blog. Please, navigate to steemit and cast a free upvote to help me if you like my post. First Time heard about Steemit ? Click Here To Know Everything About Steemit 



Top 10 famous Abstract Art of all the time

Top 10 famous Abstract Art of all the time I love abstract arts. I believe that abstract art is not what you see , it’s what you think. Abstract art is the freedom of using colors, is the freedom of representing your thoughts in colors. Today, here I share top 10 famous abstract arts of all the time. Hope you’ll enjoy them. Number 10 : The Son Of Man by Rene Magritte
image source & credit : LINK Artist: René Magritte
Media: Oil paint
Created: 1964
Period: Surrealism
Subject: René Magritte Number 09 : Garçon à la pipe by Pablo Picasso
image source & credit : LINK Artist: Pablo Picasso
Dimensions: 1 m x 81 cm
Created: 1905
Media: Oil paint
Period: Picasso’s Rose Period
Support: Canvas Number 08 : The Night Watch by Rembrandt
image source & credit : LINK Artist: Rembrandt
Dimensions: 3.63 m x 4.37 m
Created: 1642
Locations: Amsterdam Museum, Rijksmuseum
Periods: Baroque, Dutch Golden Age
Genres: Portrait, History painting Number 07 : Girl with a pearl earring by Johannes Ver…

ALERT ! Kickass Torrents Mirror katcr.to stealing users credit card data

katcr.to seems to a torrent site offering torrent services, but, the shocking truth is that it's not legit, it's a scam site. It scams its users by requesting them to register with their valid credit card details. Also kat.am is doing same. These two sites are using the same pattern to scam people. The most worried thing is that due to their site's alexa ranks, it's very difficult to determine that they are legit or scam.  The worldwide alexa rank of Katcr.to is 15,355 &  Kat.am is 6,773. On the past 21st July, 2016  the alleged owner of Kat.cr domain Artem Vaulin wasarrested. ALERT !! Don't be SCAMMED by this fake torrent site. Do not provide any financial or, confidential data. Source of the news : https://www.hackread.com/kickass-torrents-mirror-credit-card-scam/ image source & credit : LINK Tags : Hacks, News, Security, Cyber Attack, Cyber Crime,  This Post Was Published On My Steemit Blog. Please, navigate to steemit and cast a free upvote to help me if y…

My Original Abstract Art - "fence of flower"

My Original Abstract Art  "fence of flower"
enjoy :) This Post Was Published On My Steemit Blog. Please, navigate to steemit and cast a free upvote to help me if you like my post. First Time heard about Steemit ? Click Here To Know Everything About Steemit 



Here I share my original abstract art “Fault of life”

Here I share my original abstract art “Fault of life”

enjoy :)
Tags : Abstract, Art, Drawing, Painting,  This Post Was Published On My Steemit Blog. Please, navigate to steemit and cast a free upvote to help me if you like my post. First Time heard about Steemit ? Click Here To Know Everything About Steemit 

$3 Donation [Fixed]
Donate $Any Amount


Back to Top