S3 Ep143: Supercookie surveillance shenanigans

Latest episode - listen now! (Full transcript inside.)

Juniper Networks Patches High Severity Vulnerabilities

Microsoft Fixes 130 CVE Listed Bugs, 5 Flaws Exploited

Microsoft patches four zero-days, finally takes action against crimeware kernel drivers

Here's a brief reminder to do two things. The first is to patch. The second is to read up why it's a good idea to patch...

Apple Releases, Quickly Pulls Rapid Security Response Update For 0-Day WebKit Bug

Firefox 115 is out, says farewell to users of older Windows and Mac versions

No zero-days this month, so you're patching to stay ahead, not merely to catch up!

WordPress plugin lets users become admins – Patch early, patch often!

Ultimate Member plugin lets rogue users choose their own site capabilities, including becoming admins.

Fortinet Fixes Critical RCE Flaw In FortiNAC Zero Trust Product

Remotely Exploitable DoS Vulns Patched In BIND

Microsoft's Bootkit Patches Offer False Sense Of Security Against BlackLotus Threat, NSA Says

Apple Squashes Kernel Bug Used By TriangleDB Spyware

Apple patch fixes zero-day kernel hole reported by Kaspersky – update now!

Apple didn't use the words "Triangulation Trojan", but you probably will.

ASUS warns router customers: Patch now, or block all inbound requests

"Do as we say, not as we do!" - The patches took ages to come out, but don't let that lure you into taking ages to install them.

Asus Patches Highly Critical WiFi Router Flaws

MOVEit Customers Urged To Patch Third Critical Vulnerability

Progress Software Rushes To Patch Another MOVEit SQL Vulnerability

Patch Tuesday fixes 4 critical RCE bugs, and a bunch of Office holes

No zero-days this month, if you ignore the Edge RCE hole patched last week

Progress Software Issues New Critical Fix For MOVEit Transfer App

Firefox 114 is out: No 0-days, but one fascinating “teachable moment” bug

With the right (or wrong, if you're on the right side of the fence) timing...

Google Cloud Patches Vulnerability In CloudSQL Service

Cisco Squashes Critical Bugs In Small Biz Switches

Intel Says Friday's Mystery Security Update Microcode Isn't Really A Security Update

Microsoft Will Take Nearly A Year To Finish Patching New 0-Day Secure Boot Bug

CyberGhost VPN Patches Command Injection Vulnerability

Apple Uses Rapid Security Response Feature For The First Time

Apple delivers first-ever Rapid Security Response “cyberattack” patch – leaves some users confused

Just when we'd got used to three-numbered versions, such as "13.3.1", here comes an update suffix, bringing you "13.3.1 (a)"...

VMware Releases Patches For Workstation, Fusion Exploits

Double zero-day in Chrome and Edge – check your versions now!

Wouldn't it be handy if there were a single version number to check for in every Chromium-based browser, on every supported platform?

If You Haven't Patched Microsoft Process Explorer, Prepare To Get Pwned

Zero Day In Google Chrome Patched: Bug Exploited In The Wild

Microsoft Patches Zero Day Under Active Attack

Patch Tuesday: Microsoft fixes a zero-day, and two curious bugs that take the Secure out of Secure Boot

Is Secure Boot without the Secure just "Boot"?

Now Patched Outlook Zero Day Gains PoC And Growing Concerns

Dangerous Android phone 0-day bugs revealed – patch or work around them now!

Despite its usually inflexible 0-day disclosure policy, Google is keeping four mobile modem bugs semi-secret due to likely ease of exploitation.

S3 Ep 126: The price of fast fashion (and feature creep) [Audio + Text]

Worried about rogue apps? Unsure about the new Outlook zero-day? Clear advice in plain English... just like old times, with Duck and Chet!

Microsoft fixes two 0-days on Patch Tuesday – update now!

An email you haven't even looked at yet could be used to trick Outlook into helping crooks to logon as you.

Cisco Patches Critical Bugs In Its IP Phones

S3 Ep122: Stop calling every breach “sophisticated”! [Audio + Text]

Latest episode - listen now! (Full transcript inside.)

Intel Patches Up SGX Best It Can After Another Load Of Security Holes Found

Two Zero-Days Fixed In Patch Tuesday Can Escalate Privileges To SYSTEM

Solving Open Source Security - From Alpha To Omega

Apple Splats Zero-Day Bug, Other Gremlins In macOS, iOS

Microsoft Patch Tuesday: 36 RCE bugs, 3 zero-days, 75 CVEs

Lots of lovely patches for your Valentine's Day delight. Get 'em as soon as you can...

Valve Waited 15 Months To Patch High Severity Flaw. A Hacker Pounced.

VMWare user? Worried about “ESXi ransomware”? Check your patches now!

To borrow from HHGttG, please DON'T PANIC. But if you are two years out of date with patches, please do ACT NOW!

First Patch Tuesday Of The Year Explodes With In-The-Wild Exploit Fix

Microsoft Patch Tuesday: One 0-day; Win 7 and 8.1 get last-ever patches

Get 'em while they're hot. And get 'em for the very last time, if you still have Windows 7 or 8.1...

Microsoft Fixes Hyper-V VM Problem Caused By Patch Tuesday

Patch Tuesday: 0-days, RCE bugs, and a curious tale of signed malware

Tales of derring-do in the cyberunderground! (And some zero-days.)

Apple pushes out iOS security update that’s more tight-lipped than ever

We grabbed the update, based on no information at all, just in case we came across a reason to advise you not to. So far, so good...

Firefox fixes fullscreen fakery flaw – get the update now!

What's so bad about a web page going fullscreen without warning you first?

S3 Ep108: You hid THREE BILLION dollars in a popcorn tin?

Patches, busts, leaks and why even low-likelihood exploits can be high-severity risks - listen now!

Exchange 0-days fixed (at last) – plus 4 brand new Patch Tuesday 0-days!

In all the excitement, we kind of lost track ourselves. Were there six 0-days, or only four?

S3 Ep107: Eight months to kick out the crooks and you think that’s GOOD? [Audio + Text]

Listen now - latest episode - audio plus full transcript

S3 Ep105: WONTFIX! The MS Office cryptofail that “isn’t a security flaw” [Audio + Text]

The coolest video game ever! And lots of solid cybersecurity advice - listen now!

Patch Tuesday in brief – one 0-day fixed, but no patches for Exchange!

There's a zero-day patch, but it's not for the zero-day you thought.

Chrome and Edge fix zero-day security hole – update now!

This time, the crooks got there first - only 1 security hole patched, but it's a zero-day.

Firefox 104 is out – no critical bugs, but update anyway

Two trust-spoofing bugs were the main culprits this month - but neither one was a zero-day.

Firefox 102 fixes address bar spoofing security hole (and helps with Follina!)

Firefox squashes a bug that helped phishers, and brings its own helping hand to Microsoft's "Follina" saga.

Follina gets fixed – but it’s not listed in the Patch Tuesday patches!

We tried it out to make sure, so you don't have to.