Turkish president says the move is also aimed at increasing the amount of humanitarian aid entering Gaza
mena7 hours ago
Facebook has patched a critical vulnerability in Instagram that could have given an attacker the ability to take over a victims Instagram account, and turn their phone into a spying tool, simply by sending them a malicious image file.
When the image is saved and opened in the Instagram app, the exploit would give the hacker full access to the victim's Instagram messages and images, allowing them to post or delete images at will, as well as giving access to the phone's contacts, camera and location data, according to cyber security researchers at Check Point.
An attack can be triggered once a malicious image is sent via email or WhatsApp and then saved on a victim's device.
The researchers revealed the critical vulnerability as remote code execution (RCE) that allows an attacker to take over a computer or a server by running arbitrary malicious software (malware).
"This vulnerability can allow an attacker to perform any action they wish in the Instagram app. Since the Instagram app has very extensive permissions, this may allow an attacker to instantly turn the targeted phone into a perfect spying tool - putting the privacy of millions of users at serious risk," the cyber security firm revealed in a blog post on Friday.
Instagram is one of the most popular social media platforms globally, with over 100 million photos uploaded every day, and nearly 1 billion monthly active users.
"The vulnerability we found was in the way that Instagram used Mozjpeg- an open source project used by Instagram as its JPEG format image decoder for images uploaded to the service," the researchers explained.
The company disclosed the findings to Facebook and the Instagram team.
Facebook described the vulnerability as an "Integer Overflow leading to Heap Buffer Overflow" and issued a patch to remediate the issue on the newer versions of the Instagram application on all platforms.
"The patch for this vulnerability has already been available for 6 months prior to this publication, giving time to the majority of users to update their Instagram applications, thus mitigating the risk of this vulnerability being exploited," the researchers informed.
"We strongly encourage all Instagram users to ensure they are using the latest Instagram app version and to update if any new version is available".
Turkish president says the move is also aimed at increasing the amount of humanitarian aid entering Gaza
mena7 hours ago
In another case at the same airport, officials apprehended five foreign nationals who tried to smuggle gold worth Rs.24.4 million
asia8 hours ago
More than 2,000 pro-Palestinian protesters arrested in the past two weeks across the US
americas8 hours ago
Fireballs and Smash tied for the lead in the team event at the $25 million 54 hole tournament
sports8 hours ago
The hosts strengthened their chances of securing a slot in the semifinals with a 70-run victory in Abu Dhabi
sports9 hours ago
The group has a presence in five countries and eyes further geographic expansion, especially in India
markets9 hours ago
The severity of the situation gradually eased from Thursday evening, when it receded in the north and east of the country
weather10 hours ago
Cyclone Hidaya is predicted to cause torrential rain, strong winds and powerful and dangerous waves in the flood-ravaged country
africa10 hours ago