LACMA data breach last year exposed social security and medical data
The Los Angeles County Museum of Art (LACMA) has announced that a breach last year exposed customer and employee information. […]
Looking for easy ESP32 projects? These 3 are the best place to start
The ESP32 can seem overwhelming at first because there are so many projects to try with it. However, you can start out super simple, like the three projects below. These three ESP32 projects are perfect for beginners and can easily be completed in a weekend.
Refurbished Pixels beat new ones if you avoid these 6 common mistakes
Nothing beats the experience of unboxing a brand-new phone, removing the protective sheets, and turning it on for the first time while you’re gliding all over it with your fingers to get a feel for the case’s texture. After unboxing dozens of phones in my life, this still hasn’t gotten old.
I thought a 3-inch eReader was a gimmick—a day later I was hooked
I love reading, but I always find it hard to find the time these days. I read non-stop as a kid, but now I have kids of my own, life seems to get in the way. I’d seen people raving about how a tiny eReader had helped them read far more, and I was skeptical but decided to give it a try.
This modernized Lamborghini has less tech, and that’s the point
Modern cars are packed with technology. Touchscreens control everything from climate settings to drive modes, computers constantly adjust suspension and power delivery, and increasingly sophisticated driver-assistance systems are always watching what happens around you. Even the humble manual transmission is rapidly disappearing.
Zombie Card: An expired Visa credit card can be used for purchases
Did you know there is still a good reason to physically destroy your expired credit card?
Scientific research found that the expiration date used by payment terminals on some contactless cards was not effectively protected against tampering.
University of Massachusetts Amherst researchers Raja Hasnain Anwar, Gerard DeCunha, and Muhammad Taqi Raza tested contactless cards across Visa, Mastercard, Discover, and American Express, using multiple terminals and merchants, and cards from five major US banks.
They found that a payment terminal could be tricked into seeing a future expiry date. Basically, they were able to modify the expiration date sent to the terminal to a future date. This allowed them to revive expired Visa contactless credit cards for real in-store purchases. Hence the name “Zombie Card.”
The result was not universal. The tested Mastercard, American Express, and Discover configurations rejected the altered expiry data, while issuer behavior differed even among the tested Visa cards: Some transactions were declined or prompted for a replacement card, while others were approved.
The flaw lies in the Visa Kernel 3 contactless flow, where the terminal-facing Application Expiration Date was not effectively bound to the card’s data. In the tested Mastercard, American Express, and Discover kernels, consistency checks or authenticated-data coverage caused modified expiry data to be detected and the transaction to be declined.
How this could be abused
The most credible abuse case is theft or recovery of an expired or replaced card which the owner regards as harmless. Consider cards left in household waste, a drawer, a lost wallet, or an unsecured corporate disposal stream. If the underlying account remains open and issuer-side controls do not validate the exact card lifecycle state, an attacker could attempt contactless purchases using a relay setup.
Less likely is a scenario that uses a proximity relay attack against a card still held by its owner. That requires sustained NFC (Near Field Communication) proximity and a live relay during the transaction, making it materially harder than merely scanning a card from a passing distance.
How to stay safe
For cardholders, the practical advice is simple:
- Destroy expired and replacement cards. Cut through the chip several times. Make further cuts through the card body to disrupt the contactless antenna, and damage the magnetic stripe before disposing of the pieces.
- Report a lost expired card rather than treating it as inert.
These are sensible precautions, but the primary responsibility lies with payment networks, terminal implementations, and issuers to ensure expiry data is integrity-protected and that authorization systems reject retired card credentials.
Something feel off? Check it before you click.
Malwarebytes Scam Guard helps you analyze suspicious links, texts, and screenshots instantly.
Available with Malwarebytes Premium Security for all your devices, and in the Malwarebytes app for iOS and Android.
Hundreds of leaked AWS keys give full control over corporate accounts
More than 9,300 Amazon Web Services (AWS) access keys publicly exposed between August 2022 and August 2026 are still active and valid. […]
Milwaukee’s M12 batteries fit 5 tools you would never expect
Did you know that Milwaukee’s M12 tool lineup has a lot more than just drills, drivers, and saws in it? I didn’t either. Here are five fun tools that you’d never have expected to be part of Milwaukee’s lineup.
3 excellent Prime Video shows to stream this weekend (August 21-23)
Original programming has been dominating Prime Video’s top 10 in August, with Reacher season 4 and Sterling Point season 1 sitting at Nos. 1 and No. 2, respectively. Beyond the list of new and returning shows this month, Prime Video has a stacked library of licensed shows that appeal to mass audiences.
Hackers poison arrayref Rust crate to push infostealer malware
Hackers compromised the maintainer account behind the widely used Rust crate arrayref to introduce malware that executed on developers’ systems during compilation. […]