Communications of the ACM
An edited collection of advanced computing news from Communications of the ACM, ACM TechNews, other ACM resources, and news sites around the Web.
From ACM TechNews
Deepfake Audio Has a Tell
Researchers at the University of Florida can detect audio deepfakes by measuring acoustic and fluid dynamic distinctions between organic and synthetic voice samples...
From ACM News
Cops Wanted to Keep Mass Surveillance App Secret; Privacy Advocates Refused
Fog Reveal is "almost invisible" when attempting to search for it online.
From ACM TechNews
Organizations Spending Billions on Easy-to-Bypass Malware Defense
Research suggests that hackers can easily circumvent Endpoint Detection and Response systems, the malware detecting and blocking solutions on which organizations...
From ACM TechNews
Post-Quantum Encryption Contender Taken Out by Single-Core PC in One Hour
Researchers ruled out an algorithm selected by the U.S. National Institute of Standards and Technology as a potential post-quantum encryption program.
From ACM TechNews
YouTube Content Creator Credentials Are Under Siege by YTStealer Malware
A researcher at security firm Intezer identified a new malware that can steal YouTube content creators' authentication credentials.
From ACM News
FCC Lets Starlink Offer Internet Service in Moving Vehicles
"These services, never before available, promise the potential for expanding reach to remote and rural areas and facilitating higher quality broadband services...
From ACM TechNews
Wide Range of Routers Under Attack by Sophisticated Malware
Researchers have discovered at least 80 routers in North America and Europe have been infected by a remote access Trojan as part of a larger hacking campaign.
From ACM TechNews
Tesla Hack Gives Thieves Their Own Personal Key
Austrian security researcher Martin Herfurt has demonstrated that electric vehicle company Tesla's updated near-field communication key card can be hacked.
From ACM TechNews
'Tough to Forge' Digital Driver's License Actually Easy to Forge
Security researchers have found that the supposedly hard-to-counterfeit digital driver's licenses in use in New South Wales, Australia, actually can be altered...
From ACM TechNews
Bluetooth Hack Can Unlock Tesla, Devices
Sultan Qasim Khan at U.K.-based security firm NCC Group devised an exploit for unlocking Teslas and countless other devices.
From ACM TechNews
Some Top 100,000 Websites Collect Everything You Type--Before You Hit Submit
Researchers analyzed the top 100,000 websites and found a significant number record some or all of visitors' typewritten data.
From ACM TechNews
Apple, Google, Microsoft Want to Kill the Password with 'Passkey' Standard
Apple, Google, and Microsoft are launching a "joint effort" to "expand support for a common password-less sign-in standard created by the FIDO Alliance and the...
From ACM TechNews
Gear from Netgear, Linksys, 200 Others Has Unpatched DNS Poisoning Flaw
Researchers at security firm Nozomi Networks identified an unpatched vulnerability in third-party code libraries used by 200 hardware and software vendors.
From ACM TechNews
Your iOS App May Still Be Covertly Tracking You, Despite What Apple Says
Researchers at the U.K.’s University of Oxford found that iOS apps can still track users without explicit permission.
From ACM TechNews
Apple Rushes Out Patches for Zero-Days Threatening iOS, macOS Users
Apple recently released patches for two critical zero-day vulnerabilities discovered by an anonymous researcher that affect the operating systems of iPhones, iPads...
From ACM TechNews
Researchers Use Decommissioned Satellite to Broadcast Hacker TV
Researchers in the Shadytel telecommunications and embedded device hacking group used a decommissioned Canadian satellite to broadcast a livestream to the Northern...
From ACM TechNews
Data-Harvesting Code in Mobile Apps Sends User Data to 'Russia's Google'
A researcher found that Yandex, known as "Russia's Google," embedded code in apps for mobile devices that allows data to be sent to servers in Russia.
From ACM TechNews
Behold, a Password Phishing Site that Can Trick Even Savvy Users
A proof-of-concept "browser in the browser" exploit could phish passwords using a malicious site that does not contain suspicious domains or substitute letters....
From ACM TechNews
New Attack Amplifies DDoSes by 4 Billion-Fold
New technique also stretches out distributed denial of service durations to 14 hours.
From ACM TechNews