Tag

Biometric Authentication

All articles tagged with #biometric authentication

"Fixing the Vulnerability in Apple's iOS 17.3 Stolen Device Protection"
technology2 years ago

"Fixing the Vulnerability in Apple's iOS 17.3 Stolen Device Protection"

Apple's new Stolen Device Protection feature in iOS 17.3, meant to add extra security by requiring biometric authentication or a security delay for critical operations, has a vulnerability. The feature determines familiar locations based on frequency of visits, potentially flagging less secure places as significant. Users can disable this feature to prevent false positives, but doing so will require biometric verification even at actual familiar locations. Alternatively, users can toggle the Stolen Device Protection feature on or off in settings.

"Chameleon Android Trojan: Stealing PINs by Bypassing Biometric Authentication"
cybersecurity2 years ago

"Chameleon Android Trojan: Stealing PINs by Bypassing Biometric Authentication"

A new variant of the Android banking malware called Chameleon has been discovered, expanding its targeting to users in the U.K. and Italy. This evolved version of Chameleon excels in executing Device Takeover (DTO) using the accessibility service and is now being delivered via Zombinder, a dropper-as-a-service. The malware masquerades as the Google Chrome web browser and tricks users into enabling the accessibility service by checking the Android version on the device. It also disrupts biometric operations by transitioning the lock screen authentication mechanism to a PIN, allowing the malware to unlock the device at will. This development highlights the sophisticated and adaptive nature of the Android threat landscape.

"Apple's iOS 17.3 Beta: Enhanced Security and Exciting Features"
technology2 years ago

"Apple's iOS 17.3 Beta: Enhanced Security and Exciting Features"

Apple has released the iOS 17.3 beta, which introduces the Stolen Device Protection feature for iPhone. Users can install the beta by making a backup, signing in with their Apple ID, and selecting the iOS 17.3 Public Beta option in the Settings app. The update adds an extra layer of security for Apple ID and device passcodes in case of theft, requiring biometric authentication.

Apple Bolsters iPhone Security with Stolen Device Protection and Passcode Thwarting Features
technology2 years ago

Apple Bolsters iPhone Security with Stolen Device Protection and Passcode Thwarting Features

Apple has released a beta version of its Stolen Device Protection feature, which requires users to enter their biometric information to access certain phone functions. The feature activates when a phone is in an unknown location and provides an additional layer of protection against thieves who may have observed the user entering their passcode. The new security feature is currently available for testing to members of Apple's beta software program.

Apple's iOS 17.3 Update Bolsters Security Against iPhone Thieves
technology2 years ago

Apple's iOS 17.3 Update Bolsters Security Against iPhone Thieves

Apple is introducing a new security feature called Stolen Device Protection in iOS 17, which requires Face ID or Touch ID authentication. The feature adds a Security Delay that prompts users to scan their face or enter a fingerprint a second time after an hour to protect sensitive iCloud settings. It is an optional feature recommended by Apple and is designed to make it harder for thieves to access sensitive settings without obstructing everyday use. Only specific settings will be locked under Stolen Device Protection, and the Security Delay won't be required in trusted locations. The feature is currently available in the iOS 17.3 developer beta and will be included in a future public iOS 17 update.

"Mastering Mobile Security: 10 Steps to Protect Your Smartphone from Hacks"
technology2 years ago

"Mastering Mobile Security: 10 Steps to Protect Your Smartphone from Hacks"

Protecting your smartphone's security and privacy is crucial in today's digital age. Here are 10 simple steps to enhance your device's security: enable two-factor authentication (2FA) for sensitive accounts, regularly update your software, review and limit app permissions, keep sensitive notifications off the lock screen, install reliable antivirus software, prioritize regular backups, enable biometric authentication (fingerprint or face recognition), download apps only from trusted sources, activate spam filters for text messages, and invest in protective screens and cases. Additionally, be cautious with Wi-Fi and Bluetooth usage and charging your device from unknown sources.

Windows Hello Fingerprint Security Bypassed on Major Laptop Brands
technology2 years ago

Windows Hello Fingerprint Security Bypassed on Major Laptop Brands

Security researchers have discovered vulnerabilities in the embedded fingerprint sensors of Dell Inspiron, Lenovo ThinkPad, and Microsoft Surface Pro X laptops, allowing them to bypass Windows Hello fingerprint authentication. The researchers successfully exploited security flaws in the fingerprint sensors made by ELAN, Synaptics, and Goodix, using man-in-the-middle attacks and custom Linux-powered devices. Despite Microsoft's Secure Device Connection Protocol (SDCP), which was designed to protect the communication between the fingerprint device and the host, the researchers found that SDCP was not enabled on two out of three of the targeted laptops. They recommend that vendors enable SDCP to enhance the security of biometric authentication solutions.

Researchers Discover Critical Vulnerabilities in Windows Hello Fingerprint Authentication
authentication-security-windows2 years ago

Researchers Discover Critical Vulnerabilities in Windows Hello Fingerprint Authentication

Researchers have discovered vulnerabilities in the fingerprint sensors of Dell Inspiron 15, Lenovo ThinkPad T14, and Microsoft Surface Pro X laptops, which could allow attackers to bypass Windows Hello authentication. The flaws were found in the fingerprint sensors from Goodix, Synaptics, and ELAN, all of which are "match on chip" (MoC) sensors. The vulnerabilities include sensor spoofing, cleartext transmission of security identifiers, and the lack of support for the Secure Device Connection Protocol (SDCP). To mitigate these attacks, it is recommended that OEMs enable SDCP and have the fingerprint sensor implementation audited by independent experts.

"Tech Giants Embrace Passkeys for Enhanced Cybersecurity: Here's How to Set Yours Up"
technology2 years ago

"Tech Giants Embrace Passkeys for Enhanced Cybersecurity: Here's How to Set Yours Up"

Amazon has joined the passwordless movement by introducing passkeys as an alternative to traditional passwords. Passkeys allow users to log in to their Amazon accounts using biometric authentication, such as fingerprint or face scan, instead of a password. While switching to passkeys is not mandatory, users can set up their Amazon passkey by going to their Account page and selecting Login & Security. Passkeys are considered more secure and convenient than passwords, and Amazon plans to expand passkey support to other apps in the future.