Researcher finds 'serious' security flaws on HMRC's UK tax site
A security researcher discovered two serious flaws on the HMRC tax website which could have allowed attackers to view, or even edit, tax records. But the researcher, Zemnmez, was astonished not only by the flaws, but also at how hard it was to report them.
In a lengthy blog post entitled "how to hack the uk tax system, i guess," Zemnmez gives details of his findings. He also reveals that it took no fewer than 57 days to successfully report the issues so they could be looked into.
TheShadowBrokers group returns with NSA UNITEDRAKE hacking malware and promises more leaks
It feels as though it has been a while since we heard anything from the hacking group TheShadowBrokers. The group's latest data dump sees the release of the NSA's UNITEDRAKE exploit tool, and there's also a promise of two data dumps a month moving forward.
UNITEDRAKE is a remote access hacking tool that can be used to target Windows machines. Modular in nature, the malware can be expanded through the use of plugins to increase its capabilities so it can capture footage from webcams, tap into microphones, capture keystrokes, and more.
AI gaydar can accurately determine sexuality from a photo
Facial detection technology is usually used to identify individuals for the purposes of crime prevention, or as a biometric security method. But a paper published by Stanford University -- entitled simply "Deep neural networks are more accurate than humans at detecting sexual orientation from facial images" -- shows that it could also be used to determine people's sexuality.
Using AI and deep neural networks, algorithms have been shown to have a far better gaydar than people. Working with a sample of more than 35,000 photographs, the system was able to correctly determine whether individuals were gay or straight with staggering accuracy -- 81 percent of men and 74 percent of women. While on one hand the results are impressive, there are also ethical concerns.
Facebook uses World Suicide Prevention Day to highlight the support it offers
This Sunday -- September 10 -- is World Suicide Prevention Day. Facebook is using the global event to draw attention to the help it offers to those contemplating suicide.
The social network is planning to run ads in users' newsfeeds throughout the month, highlighting the supportive groups and suicide prevention tools that are available. Facebook is also launching a new Online Well-being portal which features advice about suicide prevention and how to resolve problems.
Hackers can take control of Siri, Cortana and other digital assistants with ultrasonic commands
Security researchers have discovered that digital assistants, including Alexa, Siri and Cortana, are vulnerable to hacking via inaudible voice commands. Known as the DolphinAttack, the exploit involves the use of ultrasonic commands that cannot be heard by humans.
Researchers from China's Zhejiang University have detailed the attack technique in a paper, but there are so many limitations and caveats that the vulnerability is not something that most people need worry about.
Facebook says it is likely Russia paid for polarizing political ads during US election
Speculation about Russian interference in the US election that saw Donald Trump propelled to presidency has been rife for months. Now Facebook has conceded that it's likely that a group operating out of Russia was responsible for taking out $100,000 worth of advertising that "focus[ed] on amplifying divisive social and political messages across the ideological spectrum."
The ads appeared between 2015 and 2017, and touched on polarizing topics such as gun rights, LGBT issues, race and immigration. Facebook is quick to point out that the advertising related to "inauthentic" accounts and Pages and that these have now been closed down, and the social network continues to help with federal inquiries into attempts to control the outcome of the 2016 election.
Hide 'running in the background' Notification app for Oreo does exactly what you'd hope
While there is a great deal to like about Android 8.0 Oreo, the latest version of Google's mobile operating system is not without issues. Some users are wondering whether or not their phones will get the upgrade, and some who have upgraded are experiencing problems with data usage.
One niggle that has caused a lot of complaints is Oreo's notification that there are apps running in the background. It's Google's attempt to warn people about apps that might be draining their battery, but many people are more than a little irked by the pestering. Thankfully, there's a free app to kill the irritation.
Night mode comes to Twitter on the web
Android and iOS users who like to browse Twitter in bed were pleased when a night mode was added to the mobile apps, saving middle-of-the-night blindings. Now night mode has made its way to the web.
Whether you see night mode as an eye-saving feature, or just a way to get in touch with your inner goth, the arrival of the feature has been long-awaited by users.
Drive File Stream launches for G Suite users as Google kills off its Drive software
Google is deprecating the Google Drive software for PC and Mac as it launches Drive File Stream. The company plans to support the cloud storage software for just three more months before killing it off completely in six months.
Starting in October, Drive users will begin to be shown messages informing them that their software is going away. Users with both Drive File Stream and Backup and Sync will be prompted to stop syncing My Drive with the latter. It's a move from Google that is likely to cause confusion among users.
OnePlus 3 users treated to Android Oreo beta -- OnePlus 3T and 5 won't be far behind
True to past form, OnePlus is not hanging about in getting Oreo pushed out to its smartphones. It's early days at the moment, but OnePlus 3 owners can already download a beta version of Android 8.0 for their devices.
The update is only available to members of a closed beta group at the moment, but a public beta is due by the end of September. OnePlus has not indicated exactly when the 3T and 5 will receive the beta, but the update is on the way.
Symantec: hackers could target US and European power grids with Dragonfly 2.0 attacks
Researchers at Symantec have warned that a "sophisticated attack group" is targeting the energy sector in Europe and North America, and has been doing so for some time. A group known as Dragonfly has been detected carrying out attacks since 2011, and the campaign of attacks was recently stepped up a gear.
Dubbed the Dragonfly 2.0 campaign, the attacks included disruption to the Ukrainian power system in 2015 and 2016. After a quiet period, the group's activities have started up again, with targets hit in US, Turkey and Switzerland. On the hit list are energy facilities -- something that could have devastating consequences.
Facebook is overestimating its ad reach
Facebook ad metrics are facing scrutiny after it transpired the social network is overestimating the potential audience advertisers can expect to reach. A senior analyst from Pivotal Research Group points out that Facebook's Adverts Manager tool suggests demographic figures that exceed official numbers.
For example, advertisers are told that they could hit up to 41 million 18- to 24-year-olds in the US, but according to recent census data only 31 million 18- to 24-year-olds live in the US. The discrepancy is not isolated, as there are similar instances of inflated potential reach suggestions for various age groups in the US, UK and Canada.
Android Oreo could eat through your data allowance even if you have Wi-Fi enabled
An apparent bug with Android Oreo has been discovered which means Google's mobile operating system could be munching its way through your data allowance, even if you're connected to a wireless network.
A thread on Reddit highlighted the issue, with many people pointing out that it could prove expensive for anyone not using an unlimited data plan. Google is apparently aware of the problem and is working on a patch, but in the meantime Oreo users are being warned to consider disabling mobile data when they are at home or using a wireless connection elsewhere.
Facebook offers millions to music industry to avert copyright crisis
Facebook is said to be offering hundreds of millions of dollars to music publishers and record labels to avoid having to take down user-generated videos that feature copyrighted music.
Bloomberg cites "people familiar with the matter" as saying Facebook's payments will allow for the legal use of songs in uploaded videos. At the moment rights holders can tell Facebook to remove any videos that feature copyrighted music, and the social network is keen to create a frictionless experience for users if at all possible.
Facebook Watch is now available right across the US
Facebook Watch may sound like it's going to be a cheap alternative to the Apple Watch, but it's really just Facebook's latest jump into video. Launched a month ago, Facebook Watch is now available to everyone in the US.
The initial launch was a limited one, and just last week the rollout expanded to a wider group of users. But now everyone in the US is able to see the Watch tab on desktop and mobile platforms, giving access to original video content.
Sofia Elizabella's Bio
Sofia Wyciślik-Wilson is a queer, transgender journalist based in Poland. She has been writing about technology for more than two decades, and after years working for magazines, her writing moved online. She is fueled by literature, music, nature, and vegetables. You can find her on Bluesky and Mastodon. If you like what you read, you can Buy her a Coffee!
© 1998-2026 BetaNews, Inc. All Rights Reserved. Privacy Policy - Cookie Policy.