Security Alerts & News
by Tymoteusz A. Góral

History
#1776 Thieves can guess your secret Visa card details in just seconds
Thieves can guess your secret Visa payment card data in as little as six seconds, according to researchers at Newcastle University in the UK. Bad actors can use browser bots to distribute guesses across hundreds of legitimate online merchants.

The attack starts out with a card's 16-digit number, which can be obtained in a variety of ways. Attackers can buy numbers on black-market websites, often for less than $1 apiece, or use a smartphone equipped with a near-field communication reader to skim them. The numbers can also be inferred by combining your first six digits—which are based on the card brand, issuing bank, and card type—with a verification formula known as the Luhn Algorithm. Once an attacker has a valid 16-digit number, four seconds is all they need to learn the expiration date and the three-digit card-verification value that most sites use to verify the validity of a credit card. Even when sites go a step further by adding the card holder's billing address to the process, the technique can correctly guess the information in about six seconds.
Read more
#1778 Dirty COW vulnerability patched in Android security bulletin
#1777 Google preparing "Invisible ReCAPTCHA" system for no user interaction
#1776 Thieves can guess your secret Visa card details in just seconds
History
2017: 01 02 03 04 05
2016: 01 02 03 04 05 06 07 08 09 10 11 12