Twitter experiences Tsunami of malicious messages

Twitter, the popular online service that lets you share a message in 140 characters or less to the rest of the world, has been hit by a massive wave of malicious messages. These messages were sent by hundreds of accounts that mention about dramatic weight loss as well as offering a link to a similar site that suspiciously pedals diet pills. When one has fallen to the temptation of clicking on one of those messages, they would be on the receiving end of a warning as seen above instead. It seems that this is the result of hundreds of Twitter accounts that have been hijacked earlier today in order to create this particular tsunami of malicious messages. <more>

Oracle fixes 104 security holes with April 2014 CPU

Oracle's April 2014 Critical Patch Update has been released, and solves a total of 104 vulnerabilities found across many of its products, including Oracle Database, Oracle Fusion Middleware, Oracle Hyperion, Oracle Supply Chain Product Suite, Oracle iLearning, Oracle PeopleSoft Enterprise, Oracle Siebel CRM, Oracle Java SE, Oracle and Sun Systems Products Suite, Oracle Linux and Virtualization, and Oracle MySQL. The most important ones for regular users are the patches addressing 37 vulnerabilities in Java SE, as four received a CVSS Base Score of 10.0 (Highly Critical - remote code execution, easily exploitable). "Due to the relative severity of a number of the vulnerabilities fixed in this Critical Patch Update, Oracle strongly recommends that customers apply it as soon as possible," the company advised. <more>

Samsung Galaxy S5 fingerprint scanner hacked

Samsung's newly released Galaxy S5 phone sports a fingerprint scanner embedded in the home button that works well but unfortunately, like iPhone 5S' TouchID before it, can be tricked with a mould of the user's fingerprint. "Samsung's implementation of fingerprint authentication leaves much to be desired," researchers from Berlin-based security firm Security Research Labs (SRLabs) noted, and demonstrated how these flaws can be used to expose users' devices, data, and even bank accounts to thieves or other attackers. The researchers used the same fingerprint mould they employed to fool iPhone 5s' TouchID last year. The spoof was made under lab conditions, they noted, but is based on a camera phone photo of an unprocessed latent print lifted off a smartphone screen. <more>