Login
FreshRSS
Login
Secure Planet Training Courses Updated For 2019 - Click Here
Main stream
Favourites (0)
My labels
Security
/r/netsec - Information Security News & Discussion
Dark Reading:
ICS-CERT Alert Feed
InfoSec Resources
Infosec Island Latest Articles
Krebs on Security
McAfee Blogs
Naked Security
News β Packet Storm
Paul's Security Weekly
SANS Internet Storm Center, InfoCON: green
Security β Cisco Blog
SecurityFocus News
The Hacker News
The Register - Security
The first stop for security news | Threatpost
Threatpost | The first stop for security news
Troy Hunt
Verisign Blog
WIRED
WeLiveSecurity
ZDNet | security RSS
http://blog.trendmicro.com/feed
Tools
KitPloit - PenTest Tools!
Security Tool Files β Packet Storm
ToolsWatch.org β The Hackers Arsenal Tools Portal
Vulnerabilities
Advisory Files β Packet Storm
Exploit-DB Updates
Full Disclosure
SecurityFocus Vulnerabilities
There are new available articles, click to refresh the page.
Before yesterday
Naked Security
Naked Security
GnuTLS patches memory mismanagement bug β update now!
August 1
st
2022 at 16:55Β
GnuTLS patches memory mismanagement bug β update now!
By:
Paul Ducklin
GnuTLS may well be the most widespread cryptographic toolkit you've never heard of. Learn more...
π·οΈ
My labels
β
Article tags
β
Cryptography
Vulnerability
CVE-2022-2509
double-free
gnutls
heartbleed
August 1
st
2022 at 16:55
Naked Security
How to celebrate SysAdmin Day!
July 29
th
2022 at 15:37Β
How to celebrate SysAdmin Day!
By:
Paul Ducklin
I've just popped in to wish you all/The best SysAdmin Day!
π·οΈ
My labels
β
Article tags
β
Security leadership
SysAdminDay
SAAD
sysadmin day
July 29
th
2022 at 15:37
Naked Security
S3 Ep93: Office security, breach costs, and leisurely patches [Audio + Text]
July 28
th
2022 at 15:47Β
S3 Ep93: Office security, breach costs, and leisurely patches [Audio + Text]
By:
Paul Ducklin
Latest episode - listen now!
π·οΈ
My labels
β
Article tags
β
Apple
Data loss
Law & order
Mozilla
Podcast
Privacy
Vulnerability
Safari
T-Mobile
vulnerability
Zero Day
July 28
th
2022 at 15:47
Naked Security
Critical Samba bug could let anyone become Domain Admin β patch now!
July 27
th
2022 at 21:15Β
Critical Samba bug could let anyone become Domain Admin β patch now!
By:
Paul Ducklin
It's a serious bug... but there's a fix for it, so you know exactly what to do!
π·οΈ
My labels
β
Article tags
β
Vulnerability
CVE-2022-32744
password reset
Samba
July 27
th
2022 at 21:15
Naked Security
Mild monthly security update from Firefox β but update anyway
July 27
th
2022 at 00:41Β
Mild monthly security update from Firefox β but update anyway
By:
Paul Ducklin
You're probably thinking we're going to say, "Don't delay/Do it today"... and that's exactly what we are saying!
π·οΈ
My labels
β
Article tags
β
Firefox
Mozilla
Vulnerability
clickjacking
vulnerability
July 27
th
2022 at 00:41
Naked Security
T-Mobile to cough up $500 million over 2021 data breach
July 25
th
2022 at 16:20Β
T-Mobile to cough up $500 million over 2021 data breach
By:
Paul Ducklin
Technically, it's not a fine, and the lawyers will get a big chunk of it. But it still adds up to a half-billion-dollar data breach.
π·οΈ
My labels
β
Article tags
β
Data loss
Law & order
Privacy
data breach
T-Mobile
July 25
th
2022 at 16:20
Naked Security
Office macro security: on-again-off-again feature now BACK ON AGAIN!
July 23
rd
2022 at 01:10Β
Office macro security: on-again-off-again feature now BACK ON AGAIN!
By:
Paul Ducklin
20 years to turn it on, then 20 weeks to turn it off, then just 2 weeks to turn it back on again. That's progress!
π·οΈ
My labels
β
Article tags
β
Data loss
Malware
Microsoft
Privacy
macros
Office
VBA
July 23
rd
2022 at 01:10
Naked Security
S3 Ep92: Log4Shell4Ever, travel tips, and scamminess [Audio + Text]
July 21
st
2022 at 16:25Β
S3 Ep92: Log4Shell4Ever, travel tips, and scamminess [Audio + Text]
By:
Paul Ducklin
Latest episode - listen, read or both!
π·οΈ
My labels
β
Article tags
β
Podcast
Facebook
Naked Security Podcast
tips
July 21
st
2022 at 16:25
Naked Security
Apple patches β0-dayβ browser bug fixed 2 weeks ago in Chrome, Edge
July 21
st
2022 at 12:38Β
Apple patches β0-dayβ browser bug fixed 2 weeks ago in Chrome, Edge
By:
Paul Ducklin
One vendor's zero-day is another vendor's routine patch...
π·οΈ
My labels
β
Article tags
β
Apple
Vulnerability
iPad
iPhone
mac
macOS
vulnerability
July 21
st
2022 at 12:38
Naked Security
Last member of Gozi malware troika arrives in US for criminal trial
July 20
th
2022 at 14:56Β
Last member of Gozi malware troika arrives in US for criminal trial
By:
Paul Ducklin
His co-conspirators went into and got out of prison years ago, while he remained free. Now the tables have turned...
π·οΈ
My labels
β
Article tags
β
Law & order
Malware
banking malware
bust
Gozi
SpyEye
Zeus
July 20
th
2022 at 14:56
Naked Security
8 months on, US says Log4Shell will be around for βa decade or longerβ
July 18
th
2022 at 16:57Β
8 months on, US says Log4Shell will be around for βa decade or longerβ
By:
Paul Ducklin
When it comes to cybersecurity, ask not what everyone else can do for you...
π·οΈ
My labels
β
Article tags
β
Malware
Vulnerability
CSRB
DHS
Log4j
Log4Shell
Security.txt
July 18
th
2022 at 16:57
Naked Security
7 cybersecurity tips for your summer vacation!
July 15
th
2022 at 16:23Β
7 cybersecurity tips for your summer vacation!
By:
Paul Ducklin
Here you go - seven thoughtful cybersecurity tips to help you travel safely...
π·οΈ
My labels
β
Article tags
β
Privacy
holiday
spycam
surveillance
travel
vacation
Wi-fi
July 15
th
2022 at 16:23
Naked Security
S3 Ep91: CodeRed, OpenSSL, Java bugs, Office macros [Audio + Text]
July 14
th
2022 at 18:47Β
S3 Ep91: CodeRed, OpenSSL, Java bugs, Office macros [Audio + Text]
By:
Paul Ducklin
Latest episode - listen now! Great discussion, technical content, solid advice... all covered in plain English.
π·οΈ
My labels
β
Article tags
β
Cryptography
Law & order
Malware
Microsoft
Podcast
AES
Naked Security Podcast
ransomware
RSA
VBA
July 14
th
2022 at 18:47
Naked Security
Facebook 2FA scammers return β this time in just 21 minutes
July 13
th
2022 at 16:46Β
Facebook 2FA scammers return β this time in just 21 minutes
By:
Paul Ducklin
Last time they arrived 28 minutes after lighting up their fake domain... this time it was just 21 minutes
π·οΈ
My labels
β
Article tags
β
Facebook
Phishing
Privacy
2FA
Scam
July 13
th
2022 at 16:46
Naked Security
Paying ransomware crooks wonβt reduce your legal risk, warns regulator
July 12
th
2022 at 13:24Β
Paying ransomware crooks wonβt reduce your legal risk, warns regulator
By:
Paul Ducklin
"We paid the crooks to keep things under control and make a bad thing better"... isn't a valid excuse. Who knew?
π·οΈ
My labels
β
Article tags
β
GDPR compliance
Law & order
Ransomware
Uncategorized
cyberextortion
GCHQ
ico
NCSC
ransomware
July 12
th
2022 at 13:24
Naked Security
That didnβt last! Microsoft turns off the Office security it just turned on
July 11
th
2022 at 13:27Β
That didnβt last! Microsoft turns off the Office security it just turned on
By:
Paul Ducklin
An Office anti-malware setting that took more than 20 years to arrive... and fewer than 20 weeks to vanish again.
π·οΈ
My labels
β
Article tags
β
Malware
Microsoft
Phishing
macro
malware
Office
VBA
July 11
th
2022 at 13:27
Naked Security
Apache βCommons Configurationβ patches Log4Shell-style bug β what you need to know
July 8
th
2022 at 00:59Β
Apache βCommons Configurationβ patches Log4Shell-style bug β what you need to know
By:
Paul Ducklin
It's a bit like Log4J, but for configuration files, not for logging.
π·οΈ
My labels
β
Article tags
β
Vulnerability
Apache Commons
CVE-2022-33980
July 8
th
2022 at 00:59
Naked Security
S3 Ep90: Chrome 0-day again, True Cybercrime, and a 2FA bypass [Podcast + Transcript]
July 7
th
2022 at 14:46Β
S3 Ep90: Chrome 0-day again, True Cybercrime, and a 2FA bypass [Podcast + Transcript]
By:
Paul Ducklin
Listen now! Or read if you prefer...
π·οΈ
My labels
β
Article tags
β
Cryptocurrency
Google
Google Chrome
Law & order
Podcast
Vulnerability
2FA
busts
cryptocurrency
Naked Security Podcast
OneCoin
July 7
th
2022 at 14:46
Naked Security
OpenSSL fixes two βone-linerβ crypto bugs β what you need to know
July 6
th
2022 at 16:52Β
OpenSSL fixes two βone-linerβ crypto bugs β what you need to know
By:
Paul Ducklin
"As bad as Heartbleed"? We heard that concern a week ago, but we think it's less ungood than that...
π·οΈ
My labels
β
Article tags
β
Cryptography
Vulnerability
AES
openssl
RSA
vulnerability
July 6
th
2022 at 16:52
Naked Security
Google patches βin-the-wildβ Chrome zero-day β update now!
July 5
th
2022 at 15:55Β
Google patches βin-the-wildβ Chrome zero-day β update now!
By:
Paul Ducklin
Running Chrome? Do the "Help-About-Update" dance move right now, just to be sure...
π·οΈ
My labels
β
Article tags
β
Google
Google Chrome
Vulnerability
0 day
chrome
CVE-2022-2294
vulnerability
zer-day
Zero Day
July 5
th
2022 at 15:55
Naked Security
Canadian cybercriminal pleads guilty to βNetWalkerβ attacks in US
July 4
th
2022 at 14:09Β
Canadian cybercriminal pleads guilty to βNetWalkerβ attacks in US
By:
Paul Ducklin
Bust in Canada, now bust in the USA as well.
π·οΈ
My labels
β
Article tags
β
Cryptocurrency
Law & order
Ransomware
bitcoin
bust
Netwalker
ransomware
revil
July 4
th
2022 at 14:09
Naked Security
Facebook 2FA phish arrives just 28 minutes after scam domain created
July 1
st
2022 at 20:01Β
Facebook 2FA phish arrives just 28 minutes after scam domain created
By:
Paul Ducklin
The crooks hit us up with this phishing email less than half an hour after they activated their new scam domain.
π·οΈ
My labels
β
Article tags
β
Data loss
Facebook
Phishing
Privacy
2FA
phishing
Scam
July 1
st
2022 at 20:01
Naked Security
βMissing Cryptoqueenβ hits the FBIβs Ten Most Wanted list
July 1
st
2022 at 16:49Β
βMissing Cryptoqueenβ hits the FBIβs Ten Most Wanted list
By:
Paul Ducklin
The "Missing Cryptoqueen" makes the American Top Ten... but not in a good way.
π·οΈ
My labels
β
Article tags
β
Cryptocurrency
Law & order
crypto
cryptocoin
cryptoqueen
Ignatova
Scam
July 1
st
2022 at 16:49
Naked Security
S3 Ep89: Sextortion, blockchain blunder, and an OpenSSL bugfix [Podcast + Transcript]
June 30
th
2022 at 12:57Β
S3 Ep89: Sextortion, blockchain blunder, and an OpenSSL bugfix [Podcast + Transcript]
By:
Paul Ducklin
Latest episode - listen and read now! Use our advice to advise your own friends and family... let's all do our bit to stand up to scammers!
π·οΈ
My labels
β
Article tags
β
Cryptocurrency
Cryptography
Law & order
Podcast
Vulnerability
crypto
cryptocurrency
extortion
Naked Security Podcast
openssl
scammers
June 30
th
2022 at 12:57
Naked Security
Firefox 102 fixes address bar spoofing security hole (and helps with Follina!)
June 29
th
2022 at 16:11Β
Firefox 102 fixes address bar spoofing security hole (and helps with Follina!)
By:
Paul Ducklin
Firefox squashes a bug that helped phishers, and brings its own helping hand to Microsoft's "Follina" saga.
π·οΈ
My labels
β
Article tags
β
Firefox
Mozilla
Vulnerability
Follina
Patch
vulnerability
June 29
th
2022 at 16:11
Naked Security
Harmony blockchain loses nearly $100M due to hacked private keys
June 27
th
2022 at 18:14Β
Harmony blockchain loses nearly $100M due to hacked private keys
By:
Paul Ducklin
The crooks needed at least two private keys, each stored in two parts... but they got them anyway.
π·οΈ
My labels
β
Article tags
β
Cryptocurrency
Data loss
crypto
ether
hack
Harmony
June 27
th
2022 at 18:14
Naked Security
FTC warns of LGBTQ+ extortion scams β be aware before you share!
June 27
th
2022 at 14:58Β
FTC warns of LGBTQ+ extortion scams β be aware before you share!
By:
Paul Ducklin
It's a simple jingle and it's solid advice: "If in doubt, don't give it out!"
π·οΈ
My labels
β
Article tags
β
Law & order
Privacy
cyberextortion
extortion
RTC
Scam
June 27
th
2022 at 14:58
Naked Security
OpenSSL issues a bugfix for the previous bugfix
June 24
th
2022 at 15:32Β
OpenSSL issues a bugfix for the previous bugfix
By:
Paul Ducklin
Fortunately, it's not a major bugfix, which means it's easy to patch and can teach us all some useful lessons.
π·οΈ
My labels
β
Article tags
β
Cryptography
Vulnerability
command injection
crypto
openssl
June 24
th
2022 at 15:32
Naked Security
S3 Ep88: Phone scammers, hacking bust, and data breach fines [Podcast + Transcript]
June 23
rd
2022 at 11:08Β
S3 Ep88: Phone scammers, hacking bust, and data breach fines [Podcast + Transcript]
By:
Paul Ducklin
Latest epsiode - listen (or read) now!
π·οΈ
My labels
β
Article tags
β
Amazon
Cryptocurrency
Data loss
Law & order
Malware
Podcast
Privacy
bust
data breach
hacking
Interpol
Naked Security Podcast
phone scams
scammers
June 23
rd
2022 at 11:08
Naked Security
Capital One identity theft hacker finally gets convicted
June 21
st
2022 at 15:24Β
Capital One identity theft hacker finally gets convicted
By:
Paul Ducklin
It took three years, but the Capital One cracker was convicted in the end. Don't get caught out in a data breach of your own!
π·οΈ
My labels
β
Article tags
β
Data loss
Law & order
Malware
capital one
cryptojacking
data breach
doj
SSN
June 21
st
2022 at 15:24
Naked Security
Interpol busts 2000 suspects in phone scamming takedown
June 20
th
2022 at 18:10Β
Interpol busts 2000 suspects in phone scamming takedown
By:
Paul Ducklin
Friends don't let friends get scammed. Not everyone knows how typical scams unfold, so here are some real-world examples...
π·οΈ
My labels
β
Article tags
β
Law & order
Privacy
bust
Interpol
scamming
Social Engineering
June 20
th
2022 at 18:10
Naked Security
S3 Ep87: Follina, AirTags, ID theft and the Law of Big Numbers [Podcast]
June 16
th
2022 at 16:52Β
S3 Ep87: Follina, AirTags, ID theft and the Law of Big Numbers [Podcast]
By:
Paul Ducklin
Lastest epsiode - listen now!
π·οΈ
My labels
β
Article tags
β
Apple
Microsoft
Phishing
Podcast
Vulnerability
CVE-2022-30190
Exploit
Follina
phishing
SMS
vishing
vulnerability
June 16
th
2022 at 16:52
Naked Security
Follina gets fixed β but itβs not listed in the Patch Tuesday patches!
June 15
th
2022 at 01:20Β
Follina gets fixed β but itβs not listed in the Patch Tuesday patches!
By:
Paul Ducklin
We tried it out to make sure, so you don't have to.
π·οΈ
My labels
β
Article tags
β
Microsoft
Vulnerability
CVE-2022-30190
Follina
Patch Tuesday
June 15
th
2022 at 01:20
Naked Security
Murder suspect admits she tracked cheating partner with hidden AirTag
June 14
th
2022 at 16:49Β
Murder suspect admits she tracked cheating partner with hidden AirTag
By:
Paul Ducklin
O! What a tangled web we weave, when first we practise to deceive.
π·οΈ
My labels
β
Article tags
β
Law & order
Privacy
AirTag
BLE
bluetooth
surveillance
Tracking
June 14
th
2022 at 16:49
Naked Security
Youβre invited! Join us for a live walkthrough of the βFollinaβ storyβ¦
June 13
th
2022 at 16:28Β
Youβre invited! Join us for a live walkthrough of the βFollinaβ storyβ¦
By:
Paul Ducklin
Live demo, plain English, no sales pitch, just a chance to watch an attack dissected in safety. Join us if you can!
π·οΈ
My labels
β
Article tags
β
Malware
Security leadership
Vulnerability
CVE-2022-30190
Follina
webinar
June 13
th
2022 at 16:28
Naked Security
S3 Ep86: The crooks were in our network for HOW long?! [Podcast + Transcript]
June 9
th
2022 at 13:07Β
S3 Ep86: The crooks were in our network for HOW long?! [Podcast + Transcript]
By:
Paul Ducklin
Latest episode - listen (or read) now!
π·οΈ
My labels
β
Article tags
β
Podcast
Active Adversary
MDR
MTR
Naked Security Podcast
vulnerability
Zero Day
June 9
th
2022 at 13:07
Naked Security
SSNDOB Market domains seized, identity theft βbrokerageβ shut down
June 8
th
2022 at 14:53Β
SSNDOB Market domains seized, identity theft βbrokerageβ shut down
By:
Paul Ducklin
The online identity "brokerage" SSNDOB Market didn't want people to be in any doubt what it was selling.
π·οΈ
My labels
β
Article tags
β
Law & order
Privacy
bust
doj
identity theft
SSNDOB
takedown
June 8
th
2022 at 14:53
Naked Security
Know your enemy! Learn how cybercrime adversaries get inβ¦
June 7
th
2022 at 15:49Β
Know your enemy! Learn how cybercrime adversaries get inβ¦
By:
Paul Ducklin
Here's how 144 recent attacks actually went down in real life. Don't let this happen to you!
π·οΈ
My labels
β
Article tags
β
Phishing
Privacy
Ransomware
Security leadership
Vulnerability
data theft
MDR
MTR
ransomware
threat response
June 7
th
2022 at 15:49
Naked Security
Atlassian announces 0-day hole in Confluence Server β update now!
June 3
rd
2022 at 18:59Β
Atlassian announces 0-day hole in Confluence Server β update now!
By:
Paul Ducklin
Zero-day announced - here's what you need to know
π·οΈ
My labels
β
Article tags
β
Vulnerability
atlassian
CVE-2022-26134
Zero Day
June 3
rd
2022 at 18:59
Naked Security
S3 Ep85: Now THATβS what I call a Microsoft Office exploit! [Podcast]
June 2
nd
2022 at 15:37Β
S3 Ep85: Now THATβS what I call a Microsoft Office exploit! [Podcast]
By:
Paul Ducklin
Latest episode - listen now!
π·οΈ
My labels
β
Article tags
β
Phishing
Podcast
Privacy
Vulnerability
CVE-2022-30190
Follina
Naked Security Podcast
smishing
SMS
webcam
June 2
nd
2022 at 15:37
Naked Security
Yet another zero-day (sort of) in Windows βsearch URLβ handling
June 2
nd
2022 at 13:46Β
Yet another zero-day (sort of) in Windows βsearch URLβ handling
By:
Paul Ducklin
More trouble with special-purpose URLs on Windows.
π·οΈ
My labels
β
Article tags
β
Microsoft
Vulnerability
url
vulnerability
Windows
June 2
nd
2022 at 13:46
Naked Security
Firefox 101 is out, this time with no 0-day scares (but update anyway!)
June 1
st
2022 at 14:31Β
Firefox 101 is out, this time with no 0-day scares (but update anyway!)
By:
Paul Ducklin
After an intriguing month of Firefox releases, here's one with a bit less drama, probably to the collective relief of Mozilla's coders.
π·οΈ
My labels
β
Article tags
β
Firefox
Mozilla
Vulnerability
Patch
vulnerability
June 1
st
2022 at 14:31
Naked Security
Mysterious βFollinaβ zero-day hole in Office β hereβs what to do!
May 30
th
2022 at 23:01Β
Mysterious βFollinaβ zero-day hole in Office β hereβs what to do!
By:
Paul Ducklin
News has emerged of a "feature" in Office that has been abused as a zero-day bug to run evil code. Turning off macros doesn't help!
π·οΈ
My labels
β
Article tags
β
Microsoft
Security threats
Vulnerability
CVE-2022-30190
Follina
ms-msdt
MSDT
Office
Zero Day
May 30
th
2022 at 23:01
Naked Security
Beware the Smish! Home delivery scams with a professional feelβ¦
May 30
th
2022 at 17:59Β
Beware the Smish! Home delivery scams with a professional feelβ¦
By:
Paul Ducklin
Home delivery scams are getting leaner, and meaner, and more likely to "look about right". Here's an example to show you what we mean...
π·οΈ
My labels
β
Article tags
β
Phishing
Privacy
phishing
Scam
smishing
SMS
May 30
th
2022 at 17:59
Naked Security
S3 Ep84: Government demand, Mozilla velocity, and Clearview fine [Podcast]
May 27
th
2022 at 11:17Β
S3 Ep84: Government demand, Mozilla velocity, and Clearview fine [Podcast]
By:
Paul Ducklin
Latest episode - listen now!
π·οΈ
My labels
β
Article tags
β
Podcast
Privacy
Vulnerability
Clearview
Mozilla
Naked Security Podcast
Patching
VMware
May 27
th
2022 at 11:17
Naked Security
Whoβs watching your webcam? The Screencastify Chrome extension storyβ¦
May 26
th
2022 at 12:41Β
Whoβs watching your webcam? The Screencastify Chrome extension storyβ¦
By:
Paul Ducklin
When you really need to make exceptions in cybersecurity, specify them as explicitly as you can.
π·οΈ
My labels
β
Article tags
β
Privacy
Chrome store
need-to-know
Screencastify
webcam
May 26
th
2022 at 12:41
Naked Security
Poisoned Python and PHP packages purloin passwords for AWS access
May 24
th
2022 at 23:04Β
Poisoned Python and PHP packages purloin passwords for AWS access
By:
Paul Ducklin
More supply chain trouble - this time with clear examples so you can learn how to spot this stuff yourself.
π·οΈ
My labels
β
Article tags
β
Malware
Vulnerability
exfiltration
PHP
python
secops
supply chain
XDR
May 24
th
2022 at 23:04
Naked Security
Clearview AI face-matching service fined a lot less than expected
May 23
rd
2022 at 13:01Β
Clearview AI face-matching service fined a lot less than expected
By:
Paul Ducklin
The fine has finally gone through... but it's less than 45% of what was originally proposed.
eleceye-1200
π·οΈ
My labels
β
Article tags
β
Privacy
Clearview
Clearview AI
fine
ico
May 23
rd
2022 at 13:01
Naked Security
Mozilla patches Wednesdayβs Pwn2Own double-exploitβ¦ on Friday!
May 20
th
2022 at 23:47Β
Mozilla patches Wednesdayβs Pwn2Own double-exploitβ¦ on Friday!
By:
Paul Ducklin
That was quick! 48 hours from exploit report to published patch.
π·οΈ
My labels
β
Article tags
β
Firefox
Mozilla
Vulnerability
CVE-2022-1529
CVE-2022-1802
Manfred Paul
Pwn2Own
May 20
th
2022 at 23:47
Naked Security
Microsoft patches the Patch Tuesday patch that broke authentication
May 20
th
2022 at 22:35Β
Microsoft patches the Patch Tuesday patch that broke authentication
By:
Paul Ducklin
Remember the good old days when security patches rarely needed patches? Because security patches themlelves were rare enough anyway?
π·οΈ
My labels
β
Article tags
β
Microsoft
Vulnerability
Windows
authentication
out-of-band
patch-to-patch
Woindows
May 20
th
2022 at 22:35
Naked Security
US Government says: Patch VMware right now, or get off our network
May 20
th
2022 at 14:03Β
US Government says: Patch VMware right now, or get off our network
By:
Paul Ducklin
Find and patch. Right now. If you can't patch, get it off the network. Right now! Oh, and show us what you did to comply.
π·οΈ
My labels
β
Article tags
β
Vulnerability
CVE-2022-22972
CVE-2022-22973
Federal Government
MTR
VMware
May 20
th
2022 at 14:03
Naked Security
S3 Ep83: Cracking passwords, patching Firefox, and Apple vulns [Podcast]
May 19
th
2022 at 13:56Β
S3 Ep83: Cracking passwords, patching Firefox, and Apple vulns [Podcast]
By:
Paul Ducklin
Latest episode - listen now!
π·οΈ
My labels
β
Article tags
β
Law & order
Podcast
Vulnerability
Apple
bust
cracking
Cybercrime
Naked Security Podcast
May 19
th
2022 at 13:56
Naked Security
Pwn2Own hacking schedule released β Windows and Linux are top targets
May 18
th
2022 at 13:04Β
Pwn2Own hacking schedule released β Windows and Linux are top targets
By:
Paul Ducklin
What's better? Disclose early, patch fast? Or dig deep, disclose in full, patch more slowly?
π·οΈ
My labels
β
Article tags
β
Vulnerability
hacking
Pwn2Own
research
secops
May 18
th
2022 at 13:04
Naked Security
Apple patches zero-day kernel hole and much more β update now!
May 17
th
2022 at 09:30Β
Apple patches zero-day kernel hole and much more β update now!
By:
Paul Ducklin
You'll find fixes for numerous kernel-level code execution holes, including an 0-day vulnerability in many (though not all) versions.
π·οΈ
My labels
β
Article tags
β
Apple
iOS
OS X
Vulnerability
0 day
Patch
vulnerability
Zero Day
May 17
th
2022 at 09:30
Naked Security
Firefox out-of-band update to 100.0.1 β just in time for Pwn2Own?
May 15
th
2022 at 21:53Β
Firefox out-of-band update to 100.0.1 β just in time for Pwn2Own?
By:
Paul Ducklin
A new point-release of Firefox. Not unusual, but the timing of this one is interesting, with Pwn2Own coming up in a few days.
π·οΈ
My labels
β
Article tags
β
Firefox
Mozilla
Pwn2Own
Sandbox
May 15
th
2022 at 21:53
Naked Security
He sold cracked passwords for a living β now heβs serving 4 years in prison
May 13
th
2022 at 15:31Β
He sold cracked passwords for a living β now heβs serving 4 years in prison
By:
Paul Ducklin
Crooks don't need a password for every user on your network to break in and wreak havoc. One could be enough...
π·οΈ
My labels
β
Article tags
β
Cryptography
Law & order
bust
cracking
Cybercrime
doj
May 13
th
2022 at 15:31
Naked Security
S3 Ep82: Bugs, bugs, bugs (and Colonial Pipeline again) [Podcast]
May 12
th
2022 at 15:46Β
S3 Ep82: Bugs, bugs, bugs (and Colonial Pipeline again) [Podcast]
By:
Paul Ducklin
Latest episode - lots to learn - plain English - fun with a serious side - listen now!
π·οΈ
My labels
β
Article tags
β
Uncategorized
Cybercrime
Cybercrime Squad
Naked Security Podcast
Podcast
May 12
th
2022 at 15:46
Naked Security
Serious Security: Learning from curlβs latest bug update
May 12
th
2022 at 15:08Β
Serious Security: Learning from curlβs latest bug update
By:
Paul Ducklin
Learn how to write plain-speaking and purposeful security advisories from one of the most widely-used open source tools in the world.
π·οΈ
My labels
β
Article tags
β
Vulnerability
curl
security bypass
vulnerability
May 12
th
2022 at 15:08
Naked Security
Colonial Pipeline facing $1,000,000 fine for poor recovery plans
May 10
th
2022 at 16:59Β
Colonial Pipeline facing $1,000,000 fine for poor recovery plans
By:
Paul Ducklin
How good is your cybersecurity? Are you making the same mistakes as lots of other people? Here's some real-life advice...
π·οΈ
My labels
β
Article tags
β
Ransomware
Colonial
Colonial Pipeline
MTR
ransomware
May 10
th
2022 at 16:59
Naked Security
RubyGems supply chain rip-and-replace bug fixed β check your logs!
May 9
th
2022 at 15:41Β
RubyGems supply chain rip-and-replace bug fixed β check your logs!
By:
Paul Ducklin
Imagine if you could assume the identity of, say, Franklin Delano Roosevelt simply by showing up and calling yourself "Frank".
ruby-1200
π·οΈ
My labels
β
Article tags
β
Vulnerability
CVE-2022-29176
ruby
RubyGems
suppy chain
vulnerability
May 9
th
2022 at 15:41
Load more articles